[Discontinued] Bypass Tether Restrictions - Moto G 5G Guides, News, & Discussion

I' ve decided I should effectively close this thread. I already made a guide some time ago on how to patch kernels, and that was original the reason I made this thread in the first place. 5G Ace was just my new toy and I solved a novel problem that Google gave me absolutely no leads on. There really wasn't anything out at the time, so I thought it was quite cool that I was able to run wireguard in kernel mode and tether ipv6 traffic. But now it's nothing special.
I've felt like posting this was always a mistake anyway, so pulled my files and am discontinuing this thread.
-------------------
This is an example of how I seamlessly bypass native tether restrictions for both usb and wifi tethering. For the Moto G Ace 5G, this comes in two parts. A kernel mod to disable CONFIG_MODULE_SIG_FORCE and Magisk module to set things up. The kernel modification was made through reverse engineering with Ghidra and the kernel module included in the Magisk module was built by compiling official sources with CONFIG_NETFILTER_XT_TARGET_HL=m added to the config.
The Magisk Module has three main parts:
system.prop - Disable tether provisioning
apns-conf.xml - Modify APN configuration
service.sh - Insert xt_HL and apply the iptables rule
The rule looks like:
Code:
iptables -t mangle -I POSTROUTING -o rmnet_data+ -j TTL --ttl-set 64
It tells the kernel to modify the TTL of all IPv4 traffic exiting through any mobile interface. The interface can be different on other devices, another common example would be "v4-rmnet_data+". It should also be noted that this only touches IPv4 traffic. If your carrier flags the hop limit of IPv6 traffic, I can only recommend blocking IPv6 to the tethered interface with an ip6tables rule or using another method.
The supplied apns-conf.xml is modified for T-Mobile and MetroPCS, you may need to edit it if your carrier differs. This is done by finding the DUN APNs, merging them with the primary APNs, and removing them as follows:
Spoiler: EXAMPLE
<apn carrier="MetroPCS"
mcc="310"
mnc="160"
apn="fast.metropcs.com"
mmsc="http://metropcs.mmsmvno.com/mms/wapenc"
type="default,supl,mms"
protocol="IPV6"
mvno_match_data="6D38"
mvno_type="gid"
mtu="1440"
user_editable="0"
carrier_id="1949"
/>
<apn carrier="MetroPCS DUN"
mcc="310"
mnc="160"
apn="pcweb.metropcs.com"
type="dun"
protocol="IPV4V6"
mvno_match_data="6D38"
mvno_type="gid"
mtu="1440"
user_visible="0"
carrier_id="1949"
/>
****************************************************
<apn carrier="MetroPCS"
mcc="310"
mnc="160"
apn="fast.metropcs.com"
mmsc="http://metropcs.mmsmvno.com/mms/wapenc"
type="default,supl,mms,dun"
protocol="IPV4V6"
mvno_match_data="6D38"
mvno_type="gid"
mtu="1440"
user_editable="0"
carrier_id="1949"
/>
Modified Kernel:
Meet Google Drive – One place for all your files
Google Drive is a free way to keep your files backed up and easy to reach from any phone, tablet, or computer. Start with 15GB of Google storage – free.
drive.google.com
Magisk Module:
Meet Google Drive – One place for all your files
Google Drive is a free way to keep your files backed up and easy to reach from any phone, tablet, or computer. Start with 15GB of Google storage – free.
drive.google.com
After flashing the kernel and installing the module, you will need to enter your APN settings and restore defaults for them to take effect.
Note: The Magisk module also disables nondisable, preinstall, and system upgrades.
I think I might of got a GPL report for this thread, so here's a link to stock sources used to build modules:
GitHub - MotorolaMobilityLLC/kernel-msm at MMI-QZK30.Q4-40-62
Linux Kernel for Motorola devices using MSM-based chipset - GitHub - MotorolaMobilityLLC/kernel-msm at MMI-QZK30.Q4-40-62
github.com
and also my patching guide that was made after this post:
[GUIDE][KERNEL][MOD] Patching out CONFIG_MODULE_SIG_FORCE on stock kernels
This is a guide for advanced users to remove the effect of CONFIG_MODULE_SIG_FORCE on stock kernels. This can be used to load custom modules you built or in building TWRP where you want to use a stock kernel and leverage the vendor partition to...
forum.xda-developers.com

nice mod, quick question, how did you figure out which interface to mangle?
for example the following attachment has a few interfaces, how do you know which one to mangle?

Well the way I have my hotspot undetectected.
Simple ,
Root of course,
1. Use adblocker or adaway first
2. Change DNS settings and apn.
DNS...dns.google or 1dot1dot1dot1.dns-.com
APN 4.4.8.8 NOT 4G.... I'll screen shot the settings.
4. Use app Hotspot VPN version 2.11.3
Set up hotspot on phone and activate hotspot via vpn app.. I'll screen shot the settings as well.
viola...
Edit..Thanks .O.P for this jewel. !! The VPN hotspot app works but only on the default apn..I guess metro/TMobile may have updated there servers..anyways I flashed the boot.img and installed the magisk module but I patched the boot.ing with the latest magisk 20.4 and manager 7.51.. I then said what does restore default apn mean? So I just took out my sim reinserted it and reset network settings only. Now I saw a fresh apn that allowed me to edit...yeah...before adding an apn was my only option. Now I noticed DNS and VPN apps work on default apn configs..
So VPN hotspot works and no detection from carrier or DNS errors..
I have two 5g ace phones I got for 89.99 a piece ..im on an unlimited data plan, I USB tether to my 5G ace to my laptop and utilized the windows 10 sharing feature. Share USB tether connection via Ethernet...then plug the Ethernet into my Netgear router. For Xbox and PlayStation I add port rules and assign a static i.p for both consoles.
Ii kid you not after 3 days of this method my average speeds using 5G per device connected to my router either by Ethernet or wifi , averages 40-90 MBs download and 33mb upload.. who needs an internet provider like spectrum anymore? Not me....

@jhjhjhjhjhjh how did you change the APN TYPE and add DUN to it? the newer version of android wont allow this modification. what version of android are you using?

XeoNoX said:
@jhjhjhjhjhjh how did you change the APN TYPE and add DUN to it? the newer version of android wont allow this modification. what version of android are you using?
Click to expand...
Click to collapse
There is a plus sign to add an apn.
Add one and change the configuration to your liking. To add dun one must capitalize it (DUN)

XeoNoX said:
nice mod, quick question, how did you figure out which interface to mangle?
for example the following attachment has a few interfaces, how do you know which one to mangle?
Click to expand...
Click to collapse
Your apn is setup with CLAT, so you mangle v4-rmnet_data+. You know which interface because it has an IPv4 address, in this case 192.0.0.2. The plus sign means it applies to all numbered networks by that name.
T-Mobile allows IPv6 HL of 64 and 63, so IPv6 is not an issue unless your tethering to a router. ip6tables only has access to forwarded ICMP traffic, TCP and UDP is encapsulated and can't be modified. In this case you block IPv6 or setup SNAT or MASQUERADING. SNAT is the only viable option without recompiling the kernel entirely and is on my TODO list.
XeoNoX said:
@jhjhjhjhjhjh how did you change the APN TYPE and add DUN to it? the newer version of android wont allow this modification. what version of android are you using?
Click to expand...
Click to collapse
Moto phones do not have this patch yet afaik, there is no such restriction. Modifying apns-conf.xml is always an option though, as long as you have root. This is not required if your redirecting to a VPN and blocking IPv6 though, traffic never crosses the DUN.

@fddm thank you sir, i will look into this and try it this weekend, as shown by my screenshot above i assume mines is called "v4-rmnet_data2" . i have a different rooted custom rom phone, ill try out and play with it and see if i can get it to work.

@fddm thanks for your help, patience, and explanation, thanks i figured it out and got it working on a different rooted phone. I also incorporated some of jhjhjhjhjh's settings. i was lookng for a few weeks for a IPTABLES solution so this thread helped alot. I coulndt get the TTL mod to work via iptables on the phone because the filter requires kernal changes like you mentioned ( https://netfilter.org/projects/patch-o-matic/index.html) , as a work around i changed the TTL on the client. i was also able to mangle the rules to be able to tether direct bypassing tether restriction at full LTE speed. So far so good.

I got unrestricted usb tethering working with IPv6 support via SNAT, if anyone wants that. It uses the patched kernel above with a new module that enables the IPv6 nat table and an app to manage the connection.
Magisk Module:
Meet Google Drive – One place for all your files
Google Drive is a free way to keep your files backed up and easy to reach from any phone, tablet, or computer. Start with 15GB of Google storage – free.
drive.google.com
USBTether app:
usbtether-v0.3-signed.apk
drive.google.com
In the app set Tether Interface to Auto, IPv6 NAT to SNAT, and enable Dnsmasq and Modify Outgoing TTL. After enabling the service it will automatically configure the connection, even after a reboot, until the service is disabled.
Make sure you restore default APN settings as mentioned in the OP, it disables CLAT which would otherwise prevent IPv6 from working(split network) unless your using a VPN.
Sources:
GitHub - worstperson/USBTether
Contribute to worstperson/USBTether development by creating an account on GitHub.
github.com
GitHub - worstperson/dnsmasq
Contribute to worstperson/dnsmasq development by creating an account on GitHub.
github.com

Does the same method for previous Motorola's not work? This works on my Z3 Play on Android 9 and G Stylus on Android 10.
Root with Magisk and use MagiskHide Props Config to add net.tethering.noprovisioning=true

gullzway said:
Does the same method for previous Motorola's not work? This works on my Z3 Play on Android 9 and G Stylus on Android 10.
Root with Magisk and use MagiskHide Props Config to add net.tethering.noprovisioning=true
Click to expand...
Click to collapse
That only disables the provisioning check, for most carriers you still need to use "settings put global tether_dun_required 0" or change the apn to bypass the dun. On TMO/VZW, you additionally need to set the TTL/HL or the packets will be flagged as tethering regardless.
There are tons of ways to do this, but methods that are fully contained on the device are most interesting to me.

fddm said:
That only disables the provisioning check, for most carriers you still need to use "settings put global tether_dun_required 0" or change the apn to bypass the dun. On TMO/VZW, you additionally need to set the TTL/HL or the packets will be flagged as tethering regardless.
There are tons of ways to do this, but methods that are fully contained on the device are most interesting to me.
Click to expand...
Click to collapse
fddm said:
That only disables the provisioning check, for most carriers you still need to use "settings put global tether_dun_required 0" or change the apn to bypass the dun. On TMO/VZW, you additionally need to set the TTL/HL or the packets will be flagged as tethering regardless.
There are tons of ways to do this, but methods that are fully contained on the device are most interesting to me.
Click to expand...
Click to collapse
Indeed. I just set up this Ace 5g last night. Even after adding the net.tethering.noprovisioning=true prop, and "settings put global tether_dun_required 0" MY Hotspot is still being throttled. VPN doesn't help. I'm connecting with an iphone and its still throttled to 500kb/s.
I guess since I was Sprint before, now T Mobile signal, it not as easy.
Can you explain "set the TTL/HL." Will this only work on a PC? Not sure how to Edit APN's on this device either.

You use Linux firewall rules on the router or bridge to overwrite that field in the packet or if it's a PC you can tell your kernel to create packets with a specific value. Try not to double Nat if you can avoid it. EDIT: Something like this is a good example:
TTL modification for outgoing traffic with OpenWRT
For OpenWRT 22.03 and above using firewall4, please refer to the following updated article. TTL modification for outgoing traffic with OpenWRT 22.03 and firewall4This is an admittedly belated post given the fact that the first stable build of OpenWRT 22.03 was released in September 2022, but I’
www.maroonmed.com
but the specifics depend on application. I've done this on DD-WRT, Tomato, and in plain Linux distros, as well as well as on the phone itself like shown in this thread.
VPN should always work though. Use VPN Hotspot with IPv6 and tethering hardware acceleration disabled. Cloudflare Warp and Google One VPNs are your best bets to avoid traffic shaping on mobile networks IMO.

What about connecting a Firestick or other Mobile phone to the Ace 5G hotspot? Any way to get around the TMobile throttle? That's the only time I use it.

That's exactly what the OP is about, follow the steps and you'll be able to do exactly that with the native tether/hotspot on your phone.
Or if you want to use a VPN, use VPN Hotspot like I mentioned.

fddm said:
That's exactly what the OP is about, follow the steps and you'll be able to do exactly that with the native tether/hotspot on your phone.
Or if you want to use a VPN, use VPN Hotspot like I mentioned.
Click to expand...
Click to collapse
Thanks, I'll try VPN hotspot. After reading "After flashing the kernel and installing the module, you will need to enter your APN settings and restore defaults for them to take effect."
I'm a little hesitant as I am unable to edit APN's on this New phone either through settings, or ##3282##
Edit: VPN Hotspot is working, data not counted as hotspot. Not sure how it works, I'm not even using my VPN unless it has one built in.

fddm said:
This is an example of how I seamlessly bypass native tether restrictions for both usb and wifi tethering. For the Moto G Ace 5G, this comes in two parts. A kernel mod to disable CONFIG_MODULE_SIG_FORCE and Magisk module to set things up. The kernel modification was made through reverse engineering with Ghidra and the kernel module included in the Magisk module was built by compiling official sources with CONFIG_NETFILTER_XT_TARGET_HL=m added to the config.
The Magisk Module has three main parts:
system.prop - Disable tether provisioning
apns-conf.xml - Modify APN configuration
service.sh - Insert xt_HL and apply the iptables rule
The rule looks like:
Code:
iptables -t mangle -I POSTROUTING -o rmnet_data+ -j TTL --ttl-set 64
It tells the kernel to modify the TTL of all IPv4 traffic exiting through any mobile interface. The interface can be different on other devices, another common example would be "v4-rmnet_data+". It should also be noted that this only touches IPv4 traffic. If your carrier flags the hop limit of IPv6 traffic, I can only recommend blocking IPv6 to the tethered interface with an ip6tables rule or using another method.
The supplied apns-conf.xml is modified for T-Mobile and MetroPCS, you may need to edit it if your carrier differs. This is done by finding the DUN APNs, merging them with the primary APNs, and removing them as follows:
Spoiler: EXAMPLE
<apn carrier="MetroPCS"
mcc="310"
mnc="160"
apn="fast.metropcs.com"
mmsc="http://metropcs.mmsmvno.com/mms/wapenc"
type="default,supl,mms"
protocol="IPV6"
mvno_match_data="6D38"
mvno_type="gid"
mtu="1440"
user_editable="0"
carrier_id="1949"
/>
<apn carrier="MetroPCS DUN"
mcc="310"
mnc="160"
apn="pcweb.metropcs.com"
type="dun"
protocol="IPV4V6"
mvno_match_data="6D38"
mvno_type="gid"
mtu="1440"
user_visible="0"
carrier_id="1949"
/>
****************************************************
<apn carrier="MetroPCS"
mcc="310"
mnc="160"
apn="fast.metropcs.com"
mmsc="http://metropcs.mmsmvno.com/mms/wapenc"
type="default,supl,mms,dun"
protocol="IPV4V6"
mvno_match_data="6D38"
mvno_type="gid"
mtu="1440"
user_editable="0"
carrier_id="1949"
/>
Modified Kernel:
Meet Google Drive – One place for all your files
Google Drive is a free way to keep your files backed up and easy to reach from any phone, tablet, or computer. Start with 15GB of Google storage – free.
drive.google.com
Magisk Module:
Meet Google Drive – One place for all your files
Google Drive is a free way to keep your files backed up and easy to reach from any phone, tablet, or computer. Start with 15GB of Google storage – free.
drive.google.com
After flashing the kernel and installing the module, you will need to enter your APN settings and restore defaults for them to take effect.
Note: The Magisk module also disables nondisable, preinstall, and system upgrades.
Click to expand...
Click to collapse
Will flashing the boot.img mess with my root

I flashed the kernel and installed the Magisk module without issue. I'm a total newb to all this though, and I don't know what the OP means by "enter your APN settings and restore defaults". I know how to restore default APNS's, but I don't know what do for the first part. Just restoring the default APN does enable tethering that's hidden from the carrier (once the connection decides to work properly that is), but the internet is getting cut off intermittently with messages like "can't find DNS" or "connection timed out". I can't help but suspect that this has something to do with me not knowing how to follow the last step in the OP. Any help would be appreciated.

cowboah said:
I flashed the kernel and installed the Magisk module without issue. I'm a total newb to all this though, and I don't know what the OP means by "enter your APN settings and restore defaults". I know how to restore default APNS's, but I don't know what do for the first part. Just restoring the default APN does enable tethering that's hidden from the carrier (once the connection decides to work properly that is), but the internet is getting cut off intermittently with messages like "can't find DNS" or "connection timed out". I can't help but suspect that this has something to do with me not knowing how to follow the last step in the OP. Any help would be appreciated.
Click to expand...
Click to collapse
Sounds like you got it then, restoring default APNs is all that calls for.
Not sure about about the errors your receiving though. This should act the same as tethering normally does. You might try disabling "Tethering hardware acceleration" in Developer options or manually set DNS servers on your client.

fddm said:
Sounds like you got it then, restoring default APNs is all that calls for.
Not sure about about the errors your receiving though. This should act the same as tethering normally does. You might try disabling "Tethering hardware acceleration" in Developer options or manually set DNS servers on your client.
Click to expand...
Click to collapse
Yeah, I ended up realizing it's the carrier. The connection was cutting out constantly and I just didn't notice it before setting things up. T-Mobile's network just isn't very good in my area. I switched to Cricket, and so far the network seems better. I'm trying to get set up again, and I'm having trouble merging the APN's for my carrier. It doesn't help that there is no dun type in either of the entries that use the same mmsc as I do.
<apn carrier="internet"
mcc="310"
mnc="150"
apn="ndo"
type="default,mms,fota,supl"
protocol="IPV4V6"
roaming_protocol="IPV4V6"
mmsc="http://mmsc.aiowireless.net"
mmsproxy="proxy.aiowireless.net"
mmsport="80"
mtu="1410"
user_editable="0"
carrier_id="1964"
/>
<apn carrier="internet"
mcc="310"
mnc="150"
apn="endo"
type="default,mms,fota,supl"
mvno_type="gid"
mvno_match_data="53FF"
protocol="IPV4V6"
roaming_protocol="IPV4V6"
mmsc="http://mmsc.aiowireless.net"
mmsproxy="proxy.aiowireless.net"
mmsport="80"
mtu="1410"
user_editable="0"
/>
Click to expand...
Click to collapse
The top is what I have unrooted after the switch. What I don't understand is if I need to add dun to the types and whether to use "ndo" or "endo" for the apn value.

Related

WORKING: Infrastructure Mode AP!

Hello All,
I have gotten infrastructure mode working on my EVO. I compiled support for the SIOCSIWPRIV AP_PROFILE_SET system call into iwconfig and lo and behold:
After unloading and reloading the _ap.bin firmware using insmod while wifi-tether is running I issue the following command:
Command: # ./ultraiwconfig eth0 mode master
Response in kernel log:
Code:
<4>[19452.040679] penguin, get AP_PROFILE_SET
<4>[19452.041076] wl_iw: set ap profile:
<4>[19452.041442] ssid = AndrewsAndroidAP
<4>[19452.042144] security = wpa-psk
<4>[19452.042510] key = 1234567890
<4>[19452.042877] channel = 0
<4>[19452.043243] max scb = 2
<4>[19454.110931] Set auto channel = 1
<4>[19454.112182] wl_iw_setap: do passhash...
<4>[19454.210723] [00]: aa2f2f2c
<4>[19454.210845] [01]: f4081ab1
<4>[19454.211059] [02]: ccc1d613
<4>[19454.211181] [03]: 887fd525
<4>[19454.211273] [04]: b51d0c01
<4>[19454.211395] [05]: 781b89b1
<4>[19454.211608] [06]: b5de9c57
<4>[19454.211730] [07]: 2f8812e2
<4>[19454.211853] wl_iw_setap: passphase = 2c2f2faab11a08f413d6c1cc25d57f88010c1db5b1891b78579cdeb5e212882f
<4>[19454.222106] ap setup done
<4>[19454.224487] send AP_UP
And proceed to assign IP information and bring the interface up.
The interface then appears on my Windows 7 laptop in infrastructure mode fully supporting wpa.
I will be working with Harald in the coming days to integrate this functionality into android-wifi-tether!
That is the shiz. Exellent work and I am sure it will be appreciated!
that's awesome. wow. nexus support?
iammuze said:
that's awesome. wow. nexus support?
Click to expand...
Click to collapse
Very likely, can you give me a quick summary of the state of nexus hotspotability? How does the native froyo app work on it?
NICE! this would be the first phone to do this right. Good option, dont really like the computer to computer mode. Thanks
Can't believe I don't know this but this would make wifi-tether look like a real WAP instead of ad-hoc?
spurnout said:
Can't believe I don't know this but this would make wifi-tether look like a real WAP instead of ad-hoc?
Click to expand...
Click to collapse
Yea this sums it up right
spurnout said:
Can't believe I don't know this but this would make wifi-tether look like a real WAP instead of ad-hoc?
Click to expand...
Click to collapse
yes
[10char]
Great news! Thanks for your hard work!
great contribution
andrew500 said:
I compiled support for the SIOCSIWPRIV AP_PROFILE_SET system call into iwconfig
Click to expand...
Click to collapse
So, if you compiled in support for it, than how did it work before? Wouldn't the Sprint Hotspot app have to use the same system calls?
I guess I would not put it past them to write a custom one that does some account checks before hand to make sure people are paying for the service...
blakejohnson86 said:
So, if you compiled in support for it, than how did it work before? Wouldn't the Sprint Hotspot app have to use the same system calls?
I guess I would not put it past them to write a custom one that does some account checks before hand to make sure people are paying for the service...
Click to expand...
Click to collapse
They did not use iwconfig to setup their hotspot! I'm actually curious as to how they did do it. From what I can deduce they've created something in android.net.hotspot and just do java-based calls to that class. com.htc.WifiRouter is the name of the task that manages it.
I come from the world of linux so I'm just starting to see how the Android API fits into the picture, but I'm going to assume that's how they can make the system-calls needed to pull this off.
I'm using the same system calls, just I compiled them (because they are undocumented!) into iwconfig.
I'm going to guess this is how they manage to ensure you pay your bill, and will with FroYo, they hook into the interface that lets the applications make the system calls and as a result they are the gatekeeper.
Sprint changes your apn information btw, when you use their app, to ensure you pay for it. You're basically authenticating under a different 3g username.
andrew500 said:
I have gotten infrastructure mode working on my EVO. I compiled support for the SIOCSIWPRIV AP_PROFILE_SET system call into iwconfig and lo and behold:
After unloading and reloading the _ap.bin firmware using insmod while wifi-tether is running I issue the following command:
Command: # ./ultraiwconfig eth0 mode master
Click to expand...
Click to collapse
would it be possible you could post the binary for your custom configurated iwconfig?
it'd be great for the advanced users (hence the dev section) to get access to your amazing work.
thanks for this discovery and hard work to bring it about!
to clarify steps, start wifi tether, unload, reload _ap.bin firmware with insmod, start iwconfig wtih ./ultraiwconfig eth0 mode master, assign ip information and bring up the interface.
did i catch everything? thanks again!
Omfg I have been waiting on this for ever thank you
This was the only thing that made me want the hotbot app now I can tether my June and download music from the market place anywhere and regress my drm
-------------------------------------
Sent via the XDA Tapatalk App
Awesome work. I was wondering when you were going to get this working I knew that ad-hoc wasn't not good enough from your perspective.
Thanks for the great work!!
Right on! Looking forward to this being integrated into Harold's Wireless Tether!
would it be easy/possible to change the security to WPA2-AES?
joeykrim said:
would it be possible you could post the binary for your custom configurated iwconfig?
it'd be great for the advanced users (hence the dev section) to get access to your amazing work.
thanks for this discovery and hard work to bring it about!
to clarify steps, start wifi tether, unload, reload _ap.bin firmware with insmod, start iwconfig wtih ./ultraiwconfig eth0 mode master, assign ip information and bring up the interface.
did i catch everything? thanks again!
Click to expand...
Click to collapse
Here you go dude, it's rough.
I will not answer questions on this binary. It's a hack for sure. Here are my notes on it:
Turn off WiFi (not necessary, just being consistant)
Start WiFi Tether and start tethering
Issue the following commands:
rmmod bcm4329
insmod /system/lib/modules/bcm4329.ko firmware_path=/etc/firmware/fw_bcm4329_ap.bin
./ultraiwconfig eth0 mode master
ifconfig eth0 192.168.2.254 netmask 255.255.255.0
ifconfig eth0 up
You should have a fully functional wifi hotspot! I understand some of those commands are redundant but I haven't worked on them yet. The ultraiwconfig utility will be cleaned up in the final version, right now it does not take any parameters. Your AP will be called AndrewsAndroidAP and the wpa pass is 0123456789.
andrew500 said:
Here you go dude, it's rough.
I will not answer questions on this binary. It's a hack for sure. Here are my notes on it:
Turn off WiFi (not necessary, just being consistant)
Start WiFi Tether and start tethering
Issue the following commands:
rmmod bcm4329
insmod /system/lib/modules/bcm4329.ko firmware_path=/etc/firmware/fw_bcm4329_ap.bin
./ultraiwconfig eth0 mode master
ifconfig eth0 192.168.2.254 netmask 255.255.255.0
ifconfig eth0 up
You should have a fully functional wifi hotspot! I understand some of those commands are redundant but I haven't worked on them yet. The ultraiwconfig utility will be cleaned up in the final version, right now it does not take any parameters. Your AP will be called AndrewsAndroidAP and the wpa pass is 0123456789.
Click to expand...
Click to collapse
been following your posts on the progress, so it all makes sense. just was missing the actual binary you tweaked. thanks, it looks good!
getting a permission denied error on
./ultraiwconfig eth0 mode master
i guess it doesn't work on unrevoked rooted phones

[Q] Proxy Support

I'm stumped and am trying to find a way to connect to our work network using my Gtab... problem is most corporate networks use proxy's. I don't have an option in the browser nor networking settings to assign a proxy. Has anyone did this already? How?
Supposedly pressing menu from the wifi menu brings up advanced which should have proxy on it. My advanced menu doens't show it - I am using VegaN-tab beta 5 and the Clemsyn Kernel.
I too need to get this working. I tried TransProxy and AnyCut to access the proxy settings. AnyCut gave me a short cut that doesn't appear to work.
TransProxy always fails with the message "Failed to start redirect.sh (FIX ME! implement getprotobyname() bionic/libs/bionic/stubs.c:378 iptables v1.3.7: can't initialize iptables table `nat': iptables who? (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded.
There is more but it goes out of the message box.
I found a link at comments.gmane.org/gmane.comp.handhelds.android.kernel/1082 which seems to indicate the kernel needs to be rebuilt with CONFIG_NETFILTER. There might be a manual way too but it requires a bunch of .ko files I don't have.
Should we move this thread to G Tablet Android Development in an effort to actually get it resolved? This is something I really need to figure out. I don't know enough about Android development to make this my first project to tackle.
gksmith said:
Should we move this thread to G Tablet Android Development in an effort to actually get it resolved? This is something I really need to figure out. I don't know enough about Android development to make this my first project to tackle.
Click to expand...
Click to collapse
I have the kernel ready for this. What build (TNT, VEGAN, ZPAD) do you want me to make for this kernel? LMK.
I wanted to post an update to this. Clemsyn's kernel work's great. However, you still need a way to enable the proxy.
I ended up using two programs. TransparentProxy and ASProxy. TransparentProxy is ideal if you have one proxy and always want it on. I also use it specifically when connecting via the docking station LAN at work.
However, if you are more mobile and move between WiFiconnections, you want ASProxy. It lets you configure proxies based on the SSID of the WiFi connection. This is what I use at work when I'm roaming. It's also great because I don't have to do anything special to disable Proxy when I leave the corporate network.
I plan to send an email to the ASProxy developers to see if they'd add eth0 support too. This way I could just use one program instead of two.
Also, I'd like the see the WiFi advanced network settings get the proxy UI. This isn't a big deal - just usefull.
clemsyn said:
I have the kernel ready for this. What build (TNT, VEGAN, ZPAD) do you want me to make for this kernel? LMK.
Click to expand...
Click to collapse
Kool, thanks man, any chance of a link please ?
Both programs should be on the market.
*Update - I couldn't find transparent proxy in the market. I post a link later. The Asproxy dev is already working on the wired lan issue.
Sent from my G-Tablet running Vega-Nb5.1
Great work, can you post a link for the kernal for a VEGAn 5.1 build? Thanks in advance, really need proxy support!
Here you go - this is Clemsyn's Kerenl - http://forum.xda-developers.com/showthread.php?t=895825
@clemsyn
Hi is there any chance you could provide a little more infor on proxy support from within your kernel? I've installed your latest kernel on a Vegan b5.1 (it shows up correctly on sys info) but I cant seem to find how you connect via the proxy (or enter any proxy info)
Maybe I'm missing an obvious step...?
Thanks in advance...
You need AnyCut or TransProxy3.08Beta, or ASProxy - basically, any piece of software that lets you enter the proxy settings. Several of the roms I tried didn't have the WiFi advanced menu options so I needed one of these 3 programs.
TransProxy I found via Google and AnyCut and ASProxy are available via the Market.
thanks, much appreciated. I've got TransProxy running and it seems to work fine, even authentication whcih is great. Unfortunately it requires a manualy start each time the tablet boots, I can't seem to find a way to get it to default to enabled after a reboot. Any thoughts on how to achive this..? The tablets are going to be used in an environment where users will have limited abilities and having them enable the proxy first is not really an option. Thanks
ASProxy will auto start and you can have per SSID proxies.
Sent from my G-Tablet running Vega-Nb5.1

[APP] ProxyDroid - http(s), socks proxy for android [2.6.3 - Nov. 18 2012]

ProxyDroid is an app that can help you to set the proxy (http / socks4 / socks5) on your android devices.
PLEASE ROOT YOUR DEVICES FIRST AND MAKE SURE YOUR KERNEL SUPPORT IPTABLES (NAT)
TIPS: Press MENU button to find a "Recover" option that would help you to recover / reset the proxy settings when you get something wrong.
** FEATURES **
1. Support HTTP / HTTPS / SOCKS4 / SOCKS5 proxy
2. Support basic / NTLM / NTLMv2 authentication methods
3. Individual proxy for only one or several apps
4. Multiple profiles support
5. Bind configuration to WIFI's SSID / Mobile Network (2G / 3G)
6. Widgets for quickly switching on/off proxy
7. Low battery and memory consumption (written in C and compiled as native binary)
8. Bypass custom IP address
9. DNS proxy for guys behind the firewall that disallows to resolve external addresses
10. PAC file support (only basic support, thanks to Rhino)
ProxyDroid is an open source software and distributed with many other open source projects, here is a list of them:
* cntlm - Authentication Proxy: http://cntlm.sourceforge.net/
* redsocks - transparent socks redirector: http://darkk.net.ru/redsocks/
* netfilter/iptables - http://www.netfilter.org/
* transproxy - transparently proxy for HTTP requests: http://sourceforge.net/projects/transproxy/
* stunnel - multiplatform SSL tunneling proxy: http://www.stunnel.org/
You can check out all source codes from our project site: https://github.com/madeye/proxydroid
Also Available on Android Market: https://market.android.com/details?id=org.proxydroid
BTW, I decide to post this app on XDA because I have found some similar apps are violating GPL here.
What's new:
2.6.3
1. FIX: Android 4.2 compatibility issues
2.6.2 r2
1. FIX: a FC on JB
2.6.2
1. UPDATE: add HTTP-Tunnel mode, users from Iran with proxifier working on their PC can try this mode.
2.6.1
1. FIX: some UI bugs
2.6.0
1. UPDATE: new DNS cache module
2. UPDATE: enhanced UI for ICS
3. FIX: problems with auto connecting function
2.5.2
1. UPDATE: enhanced bypass function
2.5.1
1. UPDATE: enhancement in auto connecting function
2.5.0
1. FIX: some bugs fixed
2.4.5
1. UPDATE: A new option for bypassing selected apps instead of proxying them
2.4.4
1. FIX: try to fix a issue reported by Andrea
2.4.3
1. UPDATE: new stunnel binary
1. FIX: some UI bugs
2.4.2
1. FIX: some bugs introduced in the last two versions.
2.4.1
1. UPDATE: HTTPS proxy support (still only for testing now)
2.4.0 (Only for testing, need several updates to become stable)
1. UPDATE: PAC file support
2.3.2
1. UPDATE: the latest cntlm binary
2.3.1
1. FIX: bugs in the individual proxy mode
2.3.0
1. HOTFIX: NTLM related issues in 2.2.2
2. UPDATE: Optimized DNS Proxy (patch from gaeproxy)
3. FIX: Some known issues on ICS
2.2.2 (Thanks to Bob)
1. UPDATE: Russian translations
2. FIX: some spell and grammar mistakes (Sorry for my poor english )
2.2.1
1. FIX: password issue reported by Leonardo
2.2.0
1. UPDATE: custom bypass addresses
2. FIX: some bugs with multiple profiles
2.1.0
1. UPDATE: new root permission and iptables detection method
2. UPDATE: latest redsocks built with libevent2
2.0.6
1. FIX: FC problems in App Chooser
2. UPDATE: A new troubleshooting option in MENU (use system's iptables)
2.0.5
1. Some bug fixes
2. Optimize for app manager
2.0.0
UPDATES (Thanks to @kafkasmaze's patch)
1. Rewrite profile function
2. Multi WIFI bind
FIXES:
1. Problems when converting profiles
1.9.1
FIXES:
1. Update old profile structure automatically
2. Avoid error intranet addr format
Many thanks for their generous donation:
Du Duong([email protected])
2.2.0
1. UPDATE: custom bypass addresses
How to fill in custom bypass addresses?
for ex. if I want to by pass local 127.0.0.1 but the entry format x.x.x.x/x
what should I fill with the latest entry /x ?
best proxy app. THanks it really help me dealing with proxy in my job.
dony71 said:
2.2.0
1. UPDATE: custom bypass addresses
How to fill in custom bypass addresses?
for ex. if I want to by pass local 127.0.0.1 but the entry format x.x.x.x/x
what should I fill with the latest entry /x ?
Click to expand...
Click to collapse
You can input addresses with or without netmask. So, 127.0.0.1/8 and 127.0.0.1 are both acceptable.
Best app!
Is support of PAC file is planned?
ValeraVi said:
Best app!
Is support of PAC file is planned?
Click to expand...
Click to collapse
It is almost impossible to implement a full PAC file support with transparent proxy and iptables. So, I have to suggest you to get proxy info from PAC files manually.
But still I will try to add some very basic support for PAC file in the future edition.
看到了“上海”,所以决定用中文回复
最近试了gae,不是很好,试试这个怎么样。
谢谢!
Hi!
I've been using this app for a few days and I like it, this is the best proxy app I've tried.
But I noticed a excessive battery drain during the same time. After inspecting what was happening I discovered that now the wifi sleep policy is always set to never, even if I change it to another option. It just changes to never sleep.
Is this app the culprit? If so, can it be fixed?
Thanks in advance.
Kierrok said:
Hi!
I've been using this app for a few days and I like it, this is the best proxy app I've tried.
But I noticed a excessive battery drain during the same time. After inspecting what was happening I discovered that now the wifi sleep policy is always set to never, even if I change it to another option. It just changes to never sleep.
Is this app the culprit? If so, can it be fixed?
Thanks in advance.
Click to expand...
Click to collapse
We don't change anything about WIFI sleep policy. Since it's a open source software, you can check it in our codes
BTW, I guess it's something wrong with your ROM or other apps you installed.
cmadeye said:
We don't change anything about WIFI sleep policy. Since it's a open source software, you can check it in our codes
BTW, I guess it's something wrong with your ROM or other apps you installed.
Click to expand...
Click to collapse
I didn't install any other new app around the time I noticed the battery drain, just this one.
But I did update some and I found the culprit, it was Winamp. It's frozen until the developers fix it.
Sorry about nagging and thanks for this very useful app. Keep up the good work!
Use this app for a while. Love the new icon design instead of the single P.
cmadeye, is it possible to add configurable ports to redirect?
Looking at the sources it just redirects connections to ports 80, 443 and 5228.
But like Market (5228) many other apps use non-standard ports to connect to HTTP or HTTPS servers. If we could add those ports and choose HTTP or HTTPS type it would be great.
Kierrok said:
cmadeye, is it possible to add configurable ports to redirect?
Looking at the sources it just redirects connections to ports 80, 443 and 5228.
But like Market (5228) many other apps use non-standard ports to connect to HTTP or HTTPS servers. If we could add those ports and choose HTTP or HTTPS type it would be great.
Click to expand...
Click to collapse
About months ago, we had considered to add this feature. But then, we began to realize that most users (99%) just cannot figure out what exactly ports they should configure, especially for some apps using special ports.
So, we have to suggest you add custom port forwarding manually to the source codes and build your own app.
Anyway, thanks for your feedback very much!
cmadeye said:
About months ago, we had considered to add this feature. But then, we began to realize that most users (99%) just cannot figure out what exactly ports they should configure, especially for some apps using special ports.
So, we have to suggest you add custom port forwarding manually to the source codes and build your own app.
Anyway, thanks for your feedback very much!
Click to expand...
Click to collapse
I was afraid you'd say that!
No problem, I've been planning to start programming for android for a while. This is a good way to start.
Proxydroid worked well for me with DarkyRom [email protected]
Yesterday i flashed the latest version of MyUI based on OneCosmic 4.0.3 and it dont work anymore.
Are there some known issues with ICS?
Hi!
This app is very useful for me , i need to use a proxy for the university network but after the vacations the market and other apps except for browsers (that actually works without proxydroid) stopped working for no reason. I'm using a Nexus S with a 4.0.3 rom and custom kernel and the proxy is an isa 3 server with autentication (not sure if ntlm), any advices? Is there any way to post a log?
Thanks in advance
EDIT: Ok resolved simply removing the proxy settings in the wifi options , now everything works like a charm
I have a problem
hope you can help me...
let me explain...
I live in a restricted area with heavy filteration and censorship
I can't even use a vpn for bypassing it
I use socks5 system for bypassing it with PC
I just add some info(s) in proxifier program then I can reach everythings
I want to do it with my android phone too
it's galaxy S 2.3.5
and also a gal tab 10.1 3g with 3.1
I have a server name like: pt.server.com
a port like:910
a 4 letters username and password
in proxifier PC application I choose Https type and it connects properly
but in ur app I tried all options and it just connects but wont open anything,
with some preferences it can open non-restricted websites and it changes the IP but it still cant open restricted ones...
can u help me bro?
tnx anyway
covntdracvla said:
I have a problem
hope you can help me...
let me explain...
I live in a restricted area with heavy filteration and censorship
I can't even use a vpn for bypassing it
I use socks5 system for bypassing it with PC
I just add some info(s) in proxifier program then I can reach everythings
I want to do it with my android phone too
it's galaxy S 2.3.5
and also a gal tab 10.1 3g with 3.1
I have a server name like: pt.server.com
a port like:910
a 4 letters username and password
in proxifier PC application I choose Https type and it connects properly
but in ur app I tried all options and it just connects but wont open anything,
with some preferences it can open non-restricted websites and it changes the IP but it still cant open restricted ones...
can u help me bro?
tnx anyway
Click to expand...
Click to collapse
Try to enable DNS proxy option, it may be a DNS pollution problem in your area (for example, in China)
SvenGWK said:
Proxydroid worked well for me with DarkyRom [email protected]
Yesterday i flashed the latest version of MyUI based on OneCosmic 4.0.3 and it dont work anymore.
Are there some known issues with ICS?
Click to expand...
Click to collapse
ProxyDroid should work without problems on ICS (tested with Nexus S and official ICS ROM). So, we think it may be a issue in the custom kernel of your ROM.
Zeratul91 said:
Hi!
This app is very useful for me , i need to use a proxy for the university network but after the vacations the market and other apps except for browsers (that actually works without proxydroid) stopped working for no reason. I'm using a Nexus S with a 4.0.3 rom and custom kernel and the proxy is an isa 3 server with autentication (not sure if ntlm), any advices? Is there any way to post a log?
Thanks in advance
EDIT: Ok resolved simply removing the proxy settings in the wifi options , now everything works like a charm
Click to expand...
Click to collapse
Thanks for your feedback, maybe we should add your issue into the FAQ

DNS change doesn't happen

Hi,
I'm rooted and I've tried all the apps, Set Dns, Dns changer, etc...
It simply doesn't seem to work.
Any ideas?
P.S.: I don't know if this has something to do with it but a couple of months ago the dns settings on my main pc didn't seem to do it anymore.
I found out that my provider switched me over to ipv6, once I added google ipv6 dns adresses it worked again
What app did you use to change it?
Dns
dJ_Turfie said:
Hi,
I'm rooted and I've tried all the apps, Set Dns, Dns changer, etc...
It simply doesn't seem to work.
Any ideas?
P.S.: I don't know if this has something to do with it but a couple of months ago the dns settings on my main pc didn't seem to do it anymore.
I found out that my provider switched me over to ipv6, once I added google ipv6 dns adresses it worked again
Click to expand...
Click to collapse
Go through this once, hope it will help you out.
http://www.site-helper.com/dns.html
Kindly reply.
PainfulLover said:
What app did you use to change it?
Click to expand...
Click to collapse
I used practically all the DNS apps there are.
I've come a little further since I've made this post.
I have a /etc/resolv.conf file with the 2 google dns servers in there.
Now I'm trying to get the ipv6 dns servers in there aswell.
However, I cannot get permission.
I tried to chmod the file, with no avail, still no permissions for me to change the file.
Then i learned about lchattr and chattr, that didn't work aswel.
Now I'm looking for a way to edit the file... (That is if android actually uses the file)
dJ_Turfie said:
I used practically all the DNS apps there are.
I've come a little further since I've made this post.
I have a /etc/resolv.conf file with the 2 google dns servers in there.
Now I'm trying to get the ipv6 dns servers in there aswell.
However, I cannot get permission.
I tried to chmod the file, with no avail, still no permissions for me to change the file.
Then i learned about lchattr and chattr, that didn't work aswel.
Now I'm looking for a way to edit the file... (That is if android actually uses the file)
Click to expand...
Click to collapse
So did I, it just occurred to me that you meant you figured it out on the pc (you know you're on xda, right?!).
It's sad there's no app for dns changing on kitkat.
Let us know if you figure it out.
PainfulLover said:
So did I, it just occurred to me that you meant you figured it out on the pc (you know you're on xda, right?!).
It's sad there's no app for dns changing on kitkat.
Let us know if you figure it out.
Click to expand...
Click to collapse
No I'm still trying to figure it out on 4.4 KitKat.
I've managed to make a resolv.conf file now ( Simply mounted r/w in file explorer, silly me)
But it seems to me that android doesn't even use that file...
Now I have no idea what to do
Override DNS for KitKat
dJ_Turfie said:
No I'm still trying to figure it out on 4.4 KitKat.
I've managed to make a resolv.conf file now ( Simply mounted r/w in file explorer, silly me)
But it seems to me that android doesn't even use that file...
Now I have no idea what to do
Click to expand...
Click to collapse
Hi, I feel your pain because I was on the same situation.
Many things dealing with name resolution have changed in Android 4.4 KitKat and so all the Play Store apps suddenly stopped working.
Changing the "resolv.conf" file does not affect anything because it's simply ignored by the "netd" daemon which now takes care of the task.
The classical "setprop" method used by all the DNS changer apps does not work anymore. Those values, when changed, get simply ignored by the "netd" daemon, too.
It’s necessary to communicate directly to the daemon via socket.
I created an app which automatically guesses the network device name and applies the right commands each time a mobile network gets activated.
I think it's the only one which works for KitKat (at the time of writing). You need a rooted phone (which is your case).
You can find the app on the Play Store, it's called "Override DNS for KitKat".
Hope it helps.

[Q] Implementing A Manual DNS In My ROM For My Users

Hey guys! So I'm trying to bring into my ROM OpenDNS's speed DNS.
DNS 1: 208.67.222.222
DNS 2: 208.67.220.220
So what I'm trying to do is make it so that no matter what WiFi they connect to it sets it automatically to static and has the above DNS in it. Reason why? Duh... It's fast!!! LOL. Don't say it's not. I have full proof of the speed difference. Anyways. What file, what do I change, WHERE IS IT!
Thank you
Also! In ROM Toolbox Pro, it has a DNS Changer built in which overrides the WiFi AND Mobile network! I need to find out where it implements it or what it does, where it goes, etc. I want to be able to do what it does without having to have that app (obviously because they'd have to get the pro version and can't give them mine because of warez)

Categories

Resources