[Q] Internet Passthrough through a proxy server - Desire HD Q&A, Help & Troubleshooting

I'm trying to use internet passthrough at work. The problem is that we have a proxy that requires NTLM authentication. So I tried setting up an intermediate proxy on my windows xp machine, then I setup DHD to use the intermidate proxy (using Proxy Settings from the market).
This only works with the browser as it has built in support for communicating with proxy servers. other application don't work.
I'm wondering if any of the following is possible:
1- setup proxy in dhd in a way that is invisible to most applications and don't have to rely of application support for using a proxy server.
2- use some program/setting on my computer that manages connections with the proxy server in a way that is invisible to HTC Sync and DHD

+1 for the same question.
I hope someone know the procedure and I hope even more it's possible.
It would be a shame that shuch device doesn't offer that feature.

hatemk said:
I'm trying to use internet passthrough at work. The problem is that we have a proxy that requires NTLM authentication. So I tried setting up an intermediate proxy on my windows xp machine, then I setup DHD to use the intermidate proxy (using Proxy Settings from the market).
This only works with the browser as it has built in support for communicating with proxy servers. other application don't work.
I'm wondering if any of the following is possible:
1- setup proxy in dhd in a way that is invisible to most applications and don't have to rely of application support for using a proxy server.
2- use some program/setting on my computer that manages connections with the proxy server in a way that is invisible to HTC Sync and DHD
Click to expand...
Click to collapse
+1 for that!!

I'm in the same boat, anyone have a solution to this yet?

+1
still no solution?

+1 too.
Kind of glad to see I'm not the only one looking for a solution

i tried with no luck with widecap to proxify the process htcnat.exe adb.exe and another 2 but it's a really overwhelming configuration, furthermore the service in windows is run by the SYSTEM user and it should be changed to the user running widecap to have it trying recognizing it.
unfortunately even with all configured i think in the correct way i was not able to use the proxy, widecap was still refusing to proxify internet pass trhough.
there is another product called freecap on which is based widecap but i still havn't tried it (and the next week i will be on holidays so i won't try it soon ^^' )

solved by installing TransProxy 3.0.8 beta on android
http://forum.xda-developers.com/showthread.php?t=766569

ProxyDroid
I used ProxyDroid (needs root). It also supports NTLM authentication.

hatemk said:
I'm trying to use internet passthrough at work. The problem is that we have a proxy that requires NTLM authentication. So I tried setting up an intermediate proxy on my windows xp machine, then I setup DHD to use the intermidate proxy (using Proxy Settings from the market).
This only works with the browser as it has built in support for communicating with proxy servers. other application don't work.
I'm wondering if any of the following is possible:
1- setup proxy in dhd in a way that is invisible to most applications and don't have to rely of application support for using a proxy server.
2- use some program/setting on my computer that manages connections with the proxy server in a way that is invisible to HTC Sync and DHD
Click to expand...
Click to collapse
Hey did you find a solution? I'm facing the same issue for a long time !!!

Related

WM6, Activesync 4.5 and Proxy Servers - Is it possible?

I'm using Black v2.0.2. However, I've had this problem with all the WM6 ROMS. In WM5, I was able to connect to the internet through Activesync and sync the weather, news, etc. etc. With the new ROMs, I can no longer do it.
The older versions of Activesync had an option of entering the proxy server info in. Version 4.5 does not any longer. Or at least I can't find it anywhere.
My work proxy server is inetproxy2.home.net. I also believe it is port 80. How do I configure my Hermes to sync all the data with the internet connection through my work rather than connecting to GPRS eventhough I'm already connected to activesync?
Thanks for any help.
Default port
Try port 8080. That's the default port number for most proxy servers.
anubus12 said:
I'm using Black v2.0.2. However, I've had this problem with all the WM6 ROMS. In WM5, I was able to connect to the internet through Activesync and sync the weather, news, etc. etc. With the new ROMs, I can no longer do it.
The older versions of Activesync had an option of entering the proxy server info in. Version 4.5 does not any longer. Or at least I can't find it anywhere.
My work proxy server is inetproxy2.home.net. I also believe it is port 80. How do I configure my Hermes to sync all the data with the internet connection through my work rather than connecting to GPRS eventhough I'm already connected to activesync?
Thanks for any help.
Click to expand...
Click to collapse
silverfox0214 said:
Try port 8080. That's the default port number for most proxy servers.
Click to expand...
Click to collapse
Where do I enter the proxy information? Do I choose a profile or create a new profile on the Hermes?
anubus12 said:
Where do I enter the proxy information? Do I choose a profile or create a new profile on the Hermes?
Click to expand...
Click to collapse
if the proxy information is inserted into Internet Explorer on your machine ActiveSync will use this and overwrite the proxy configuration on the current enabled/active connection in Connection Manager... but for passthrough to work you have to have a profile setup in activesync....
walshieau said:
if the proxy information is inserted into Internet Explorer on your machine ActiveSync will use this and overwrite the proxy configuration on the current enabled/active connection in Connection Manager... but for passthrough to work you have to have a profile setup in activesync....
Click to expand...
Click to collapse
But where in activesync do I put in the proxy server info? I can't find that option anywhere.
anubus12 said:
But where in activesync do I put in the proxy server info? I can't find that option anywhere.
Click to expand...
Click to collapse
as i said in my post... activesync gets this information straight from your Internet Explorer settings on your PC...

Guide - ALL PORTS opened through carrier proxy 3G/HSDPA

Notice - This topic is for the very advanced computer users.
I will need help from WM6 developers and SUPER advanced users for a variant of this. Please go to the COMPLETE bottom to read what I need for help.
What is it for? : Gain full access to TCP ports while using carrier's WAP/GPRS/HTTP proxy. Access IMAP/POP3/Internet Radio/Streaming TV/Skype while still using your carrier's cheap/free GPRS APN.
(currently only works on tethered, but I am working on making it work directly from the phone, I need help from those in the know-how)
Summary: The PC is tethered to the phone for GPRS/3G internet. PuTTY client connects to a SSH server THROUGH the carrier's proxy and opens up a SSH tunnel with dynamic forwarding on port 1080.
What you need :
- PC with Windows or Linux
- PuTTY http://www.chiark.greenend.org.uk/~sgtatham/putty/download.html
- A simple SSH server directly connected to the internet (could be a modified Linksys WRT54G/GS/GL router with OpenWRT, no need for a PC)
optional - ProxyCap or SocksCap (commercial, look on bittorrent). They force softwares that required DIRECT internet acess to work with this guide
Settings:
1- Your SSH server needs to listen to port 443
2- In Windows go to Control Panel / Internet Options / Connections / LAN Settings / Proxy Server /
-Check the box "Use a Proxy Server for your LAN"
-Click advanced under SOCKS: , write: localhost" with port: 1080
3- In PuTTY
-Session TAB
Hostname = IPaddressOfYourSSHServer
port = 443
-Connection / Proxy
Proxy Type = HTTP
Proxy hostname = YourCarrierProxyAddress
Port = 80 or 8080 (whatever your carrier tells you to put)
-Connection / SSH / Tunnels
At the bottom, select Dynamic & IPv4
Source port = 1080
Click ADD
You should see "4D1080" appear in the white box under "forwarded ports"
-Session
Type any name you want under Saved Sessions
Click "Save" so that anytime you reload Putty, you click ony your sessions and load to restore all the above settings.
Final Step
- Disconnect your PC from any internet access
- Connect your PC to your phone's GPRS/3G internet
- In Putty, load the session and click on OPEN (This should open up a black window with no text)
- Wait a few seconds, you should see a new window asking you if you accept a new KEY for the new host you are connecting to. Click YES
NOTE: this will only happen the first time you connect to the SSH server through GPRS. It will never appear again
- You'll be asked to enter your username and password (those are the ones from your SSH server). You'll then gain SSH terminal access to your SSH server.
- type and enter "top" in your SSH terminal
WHY? : Your carrier's PROXY closes any IDLE connections. "top" makes the SSH server send you the server status every few seconds, keeping the connection active.
- Open internet explorer and see if you can load web pages.
- Congrats, you got non-carrier-proxied non-carrier-cached internet access.
TROUBLESHOOTING
Problem: PuTTY times out when I open my session
Diagnostic: PuTTY cant connect to your SSH server, this could be due to :
- Check if you got the right SSH server IP address
- SSH Server does not listen to TCP port 443
- SSH Server is behind a firewall that blocks port 443
- Your ISP may block port 443 (mine blocks port 80)
- Your wireless carrier may not allow SSL connections, test by loading a HTTPS web page while using their HTTP proxy (find a web page such as ebay, paypal, or whatever that requires an encrypted login, see if HTTPS is in the address bar). You're screwed if its blocked
- Your wireless carrier's proxy might not be on port 80/8080, please check
- Double check your Putty settings for your session.
Problem: PuTTY says "connection not allowed" "permission denied" or something
Diagnostic - Your wireless carrier probably does not allow SSL on 443, or scans your packets to see if it is TRUELY SSL. You're screwed in that case.
Problem: When I type my username and password, I get denied
Diagnostic: you don't know your OWN SSH server's access information, moron
Problem: Im connected to my SSH server, but IE won't load pages
Diagnostic: Either you forgot to set the dynamic port forwarding (review step 3 in settings) or you didn't set the proxy settings in IE (review step 2)
Please make sure you got NO other proxies entered other than in the SOCKS section of IE
WHAT I NEED FOR HELP
As you can see, this is only for using GPRS/3G on a PC/Laptop
Im very close to getting this to work directly on the phone.
PocketPutty is a conversion of PuTTY for WM5/6
http://www.pocketputty.net/
There is no Proxy tab in PocketPutty, but go in the registry
HKEY_current_user/Software/SimonTatham/Putty/Sessions/YourSessionName
This is IDENTICAL to what you'll find on your windows PC if you create a session. Create the proper session on your PC and copy the registry entries onto your phone's registry.
I got it to connect to my SSH server the same way you do on a PC, however, I can't get Pocket IE or any other software to use localhost:1080 socks proxy.
I've tried the obvious "proxy settings" in the connections manager, but IE still tries to connect directly unless I specify a HTTP proxy. Putty cannot do HTTP proxy so I can't just open up a second dynamic port on 80.
I tried in the registry to manually enter data. I noticed that even if you got NO proxy settings, you still got two proxy entries in the registry
HTTP , which uses "new-inet" on 1118
null-corp, which uses "new-corp" on 1118
I've made some tests and come to the conclusion that IE will only listen to the HTTP proxy entry in the registry. However, it will not use it if the "type" is set to "0". Setting it to "4" (SOCKS) gives me an error that IE cannot use my GPRS connection.
Im at loss here since im not a programmer or anything. Im wondering if any programmer/developper/professionals knew anything on the matter. It's only a matter of dynamic forwarding. I know PocketPutty can do it.
I was wondering if this was possible myself... I run a linux server at home and when I am at school/work/etc. I like to use my server as a socks proxy (using the method you stated) in order to get around those pesky firewalls and content filters. I've found that in general I like to tunnel everything through my home ISP's connection. It just 'feels' more secure, albeit a lot slower due to roadrunner's poor upstream bandwidth.
Pocket IE apparently did leave out the SOCKS proxy feature, and I don't know if it's even possible to tunnel through SOCKS on a WinMo phone.
This ancient guide from 1999 says that SOCKS is not implemented on WinCE, but surely this is outdated and useless information, right?
So I ask: Does anyone out there know how to use a SOCKS proxy on a PocketPC?
I don't know how much this will help you, I'm not nearly as advanced, but I saw the word SOCKS and a bell rang. Under Settings > Connections > Connections, when you setup or edit the proxy server, the SOCKS option is at the bottom. I always manually put in the AT&T proxy settings when I need to so it sounded familiar. Hope that helps.
Hey alkizmo !
I think that your idea is not really good, because there is an easier solution, with OpenVPN. This vpn allows you to do HTTP encapsulation, like PuTTY ...
And OpenVPN server/client is faster to install.
TKz said:
Hey alkizmo !
I think that your idea is not really good, because there is an easier solution, with OpenVPN. This vpn allows you to do HTTP encapsulation, like PuTTY ...
And OpenVPN server/client is faster to install.
Click to expand...
Click to collapse
A VPN connection cannot be initiated through a proxy where all ports are blocked except 8080/80/443
VPN is not the solution to proxy bypass.
Then again, go ahead, try to prove me wrong and you'd have found a much simpler solution.
oh and this thread is outdated, I did finalize this project and have it working now.
http://forum.xda-developers.com/showthread.php?t=316890
alkizmo said:
A VPN connection cannot be initiated through a proxy where all ports are blocked except 8080/80/443
VPN is not the solution to proxy bypass.
Then again, go ahead, try to prove me wrong and you'd have found a much simpler solution.
oh and this thread is outdated, I did finalize this project and have it working now.
http://forum.xda-developers.com/showthread.php?t=316890
Click to expand...
Click to collapse
Ok, i know your solution work, but three things :
1. Mine too (sorry, I bypass proxy through vpn)
2. Mine is easier ... that's all !
3. http://ovpnppc.ziggurat29.com/ovpnppc-main.htm
Personaly, I think the problem inlies with the way Pocket PC use proxys. If there was a way to make the Phone use the same proxy for everything it would work. but from what I can tell, the phone choses the right proxy for the right thing. by looking at the proxy settings it has a for Http wap, etc.
Well, the other programs don't work with these proxies, as far as I can tell. The best wayt, IMHO, would be to make a program that routes all connections to one proxy, and maybe then the prxys would work correctly.
TKz said:
Ok, i know your solution work, but three things :
1. Mine too (sorry, I bypass proxy through vpn)
2. Mine is easier ... that's all !
3. (deleted link, no url posting privileges for new members)
Click to expand...
Click to collapse
excellent.
As of this writing, the link is still alive. And the latest release of openvpn ppc is 2.1 released December 10/2009. Or, about a month ago.
see:
the changelog

VPN and Remote Desktop

Hi Guys,
either I dont know how to search or there is no info on VPN on the forum(I probably dont know how to search) In any case. I need assistance. How do I setup a VPN on my TyTn running WM6 and also how do I get remote desktop client? I am sure this was around previously. Did MS remove it from WM6? Or was it HTC? It this is the case.. how can one get it back?
thanks!
here's remote desktop. How do you use it? I don't know how to set it up.
thanks!!!!
now for VPN....
cheers!
The remote desktop client is available in several places in this forum for download.
To set up a VPN:
add a new VPN server connection
enter the name / ip of the server you want to connect to
select the vpn type -- ipsec or pptp
next
enter your user name and password
finish
The only way I have found to connect to the von is to goto
Start-Settings-connections-connections-edit my vpn servers- -- tap & hold MY VPN
select connect
you must be using a plan that assigns you a public IP (not WAP)
hope this helps
JTK said:
Hi Guys,
either I dont know how to search or there is no info on VPN on the forum(I probably dont know how to search) In any case. I need assistance. How do I setup a VPN on my TyTn running WM6 and also how do I get remote desktop client? I am sure this was around previously. Did MS remove it from WM6? Or was it HTC? It this is the case.. how can one get it back?
thanks!
Click to expand...
Click to collapse
Thanks cmccarter, done it but how will I know I am connected.. It does not say connected anywhere that I can see and when clicking/hold on the item it gives me the option to connect again, not disconnect as I would have thought The other thing is terminal server does not connect. It connects fine on USB. VPN/Remote desktop connects fine using normal internet on pc from outside the network. So I believe the network settings are fine.. How would I know though if I am on WAP or get an IP. Also ow would I know if the VPN is connected?
thanks
fyi
i also have struggled getting rdp to work over a vpn, in particular over 3+/hsdpa
the only i found in wm5 was to add the vpn connect to the exceptions list of the connection manager, so that it didnt disconnect the vpn whem connecting the rdp.
this occurs more when u use an ip address to connect to a work intranet.
suppose if u use the dns name of the machine and not the ip address then it isnt that much of an issue. in wm5 when u put the ip address in it assumes a an internet rather than intranet connection so it disconnects the vpn to look for the ip over the internet
putting the ip into exceptions forced wm5 to not disconnect it when rdp was looking for it.
i cudnt get it to work this way in wm6 so i am also looking for an answer on this.
rdp to my servers when they have crashed and i am on the road wud b wonderful....
Hi,
I've a similar problem.
I use a VPN-1 SecuRemote that normally connect my PC directly to the company network.
Well, using the share modem tool, I'm not able to reach the gateway.
the share modem system give me a private IP that establish a connection between PC and TYTN.
This connection use the Tytn like a gateway to navigate in internet.
Someone know to solve this issue?
Tanks a lot
if i select start the vpn connection, nothing happens - and i can`t ping the IP`s in the VPN. so i think the vpn ist not open - OR the routing entrie is missing....
is there some shiny "pptp - standalone" client?
greets, Nik
for some reason i dont think the vpn option works over 3g/hsdpa, atleast not on my device using t-mob web and walk.
if i connect the vpn when using wifi it connects and everything is fine, if i try and connect when i'm already running a 3g connection it doesn't work.
i dont think the radio stack is capible of handling a 3g connection and a vpn connection. we might need to go down the route of getting a seprate wm vpn client.

Problems with certificates & proxy

Hi,
I have been fighting with my Desire the last days to connect to my company network and e-mail without any success.
There are serious issues with Android wrt handling certificates and proxies.
For the moment I still haven't found anything which will allow me to access the internet from work via WiFi through a proxy. Did any one manage to do this with success ?
Apparently it is possible to use a proxy with Android 1.5 and 1.6 but only for browsing, not for other services, but this doesn't work with the Desire ;-)
Regarding certificates, Android doesn't support .p7b or .pcs certificates, so I was afraid I wouldn't be able to connect at all to the company WiFi. To my surprise when I tried to connect by entering MSCHAP it actually worked, so this is worth a try if you have issues with certificates to connect to WiFi.
Another problem of the certificates is that I need a certificate to connect via SSL to my e-mail server. Unfortunately Android doesn't support installation of .p7b or .pcs certificates, so I don't manage to connect. Did anyone encounter a solution for this problem ?
In global I am really surprised by the lack of support for standard functionality like certificates and proxy in Android. All my colleagues using Iphone have no issues at all with this
Kind regards

Desire Wifi proxy

In my colloge, I have a good wifi connection, but it should get through a HTTP proxy. I have tried many ways to solve the problem, such as TransProxy and proxy setting, but it seems that it doesn't work.
Does anybody have any ways to solve???help~~~ 3x
What exactly do u want to do? Bypass the proxy firewall that you have in the University? Can u explain yourself better?
I have the same problem.
I want use WIFI in my office where has a proxy server , And the server request user account and password.
I had tried transproxy too ,but not work.
This feature is not implemented on the Android OS. There are some 'half' workrounds on this forum somewhere, but no native support.
http://forum.xda-developers.com/showthread.php?t=766569

Categories

Resources