F17: How to set up VPN for Android?

[Dr. Michael J. Chudobiak]

>> I use ssh tunnels to forward Android imap (port 143), smtp (port 25),
>> and http proxying (port 3128) to my Fedora server, using this app:
>
> What do you use as a proxy on the Fedora server? glype? squid?
>
> On the android you configure a proxy for each browser? Or does SPT just
> send all port 80 requests to the server?
>
> Any details on the config would be very helpful.

Install the SPT app & forward local ports 1043, 1125, and 3128 to remote 
143 (imap), 25 (smtp), 3128 (squid proxy).

In my case, SPT Forwards = 
"L1043=192.168.0.2:143,L1125=192.168.0.2:25,L3128=192.168.0.2:3128"

Here, 192.168.0.2 is the internal address of my server (not its external 
IP).

The forwarded local ports need to be > 1024, IIRC.

You point the email client at localhost for the SMTP/IMAP, using the 
special local forwarding ports 1043 and 1125.

For web use, I use Firefox, and in about:config set:

network.proxy.type = 2
network.proxy.autoconfig_url = http://www.avtechpulse.com/proxy/avtech.pac

That *.pac file says:

function FindProxyForURL(url, host) {
	if (shExpMatch(host, "*.domain.avtechpulse.com"))
		{
		return "PROXY 127.0.0.1:3128";
		}

  	return "DIRECT";
}

That means squid serves the private intranet pages from the private 
squid server, and firefox accesses all other pages in the normal manner 
(not through squid).

Firefox is the only browser that handles this proxy trickery well.

Sounds complicated, but works like a charm.


- Mike