SSH and VPN connection from a Bouygues 4G mobile

matio777 Posted messages 7 Status Member -  
brupala Posted messages 111155 Registration date   Status Member Last intervention   -
Hello,

I'm trying to connect unsuccessfully to an SSH and VPN server hosted at home from my smartphone.

No problem from another box, I connect without issues.

I also tried with IPV6 but it doesn't seem to change much.

What reasons could there be for me not to be able to connect? I know that mobile networks work differently from regular networks, but I don't know the exact differences.

Can you help me understand where the problem might come from?

My mobile plan is with Bouygues and my phone is a Xiaomi.

Thank you in advance

Configuration: Linux / Firefox 78.0

4 answers

  1. brupala Posted messages 111155 Registration date   Status Member Last intervention   14 451
     
    Hi,
    Do you want to connect to the VPN (which one?) or via SSH?
    The VPN is not necessary for SSH,
    Please provide details about your situation.

    --
    And ... Here you go!
    0
  2. matio777 Posted messages 7 Status Member
     
    Hi, thanks for looking into my problem.

    It's a VPN based on OpenVPN on a PC at home. I also have SSH access to it.

    I have two ports open on my router, one for SSH and one for the VPN on the server side.

    I can't connect to the VPN or SSH to the PC via the 4G network, but there's no problem when using another standard router. I can connect without issues with my phone when it's connected to the Wi-Fi of the standard client router.

    My problem seems to be either with the 4G network functioning (more likely) or with the phone (less likely). There may be some settings to configure that I'm missing.

    I don't think it comes from OpenVPN since I have the same problem with SSH.
    0
    1. brupala Posted messages 111155 Registration date   Status Member Last intervention   14 451
       
      Indeed, you are right,
      it's more about a blocking of the source IP, however, at what level, remains to be determined.
      What is your ISP on the server side?
      I see that you are on Linux, is that the server?
      0
      1. matio777 Posted messages 7 Status Member > brupala Posted messages 111155 Registration date   Status Member Last intervention  
         
        No, Linux is the OS on my PC that I'm using to post here.

        For the ISP on the server side, I tested with Bouygues and SFR, and it's the same problem.

        The issue seems to be on the client side.

        On the client side, I'm with Bouygues and I have no way to test with another operator.

        I'm wondering if other people have tried to connect in the same way I did and if they succeeded. Is the problem coming from my operator? Are SSH and VPN protocols blocked by Bouygues in any way? Or is it a blockage between the 4G network and the IP of my fixed network? (I'd rather say it's that)

        What do you think?
        0
  3. brupala Posted messages 111155 Registration date   Status Member Last intervention   14 451
     
    I have a VPN server at OVH at this address: vpn.brupala.fr you can test it if you want.
    I connect to it with my mobile without any problem I'm not with Bouygues, but with EI (NRJ mobile) which is a subsidiary of Bouygues now.
    I could check if your connections are arriving.
    You are using ipv4, I suppose?

    0
  4. matio777 Posted messages 7 Status Member
     
    That's nice, but I'd rather avoid it.

    So I tried with my server from OVH, but the same problem... No logs or requests on the server side.
    On the client side, the last message from Wireshark is: "Destination unreachable (Network Unreachable)."

    Needless to say, my connection works normally aside from that.
    0
    1. brupala Posted messages 111155 Registration date   Status Member Last intervention   14 451
       
      They’re a bit weird over at Bouygues
      Wireshark message? Are you sure it’s him putting that up?
      Plus, Wireshark on mobile?
      0
    2. matio777 Posted messages 7 Status Member > brupala Posted messages 111155 Registration date   Status Member Last intervention  
       
      Yes...

      For Wireshark, I set my phone as a hotspot and tried to connect from my PC.

      I'll check the Bouygues forums then. It seems operator-specific.

      Thanks anyway, you confirmed that it wasn't normal.
      0
    3. matio777 Posted messages 7 Status Member > brupala Posted messages 111155 Registration date   Status Member Last intervention  
       
      Ah, one thing I didn't mention but I think is very important:

      I have changed the default ports... I am using port 32000 for both protocols.

      I searched the Bouygues forum and apparently if there are issues with VPN and SSH, it might be related to the APN.
      0
    4. brupala Posted messages 111155 Registration date   Status Member Last intervention   14 451 > matio777 Posted messages 7 Status Member
       
      We already knew that mobile networks are not the internet, but now they're going too far :-(
      For openvpn, have you tried using TCP on 443?
      In principle, they shouldn't be able to filter that, otherwise nothing would work.
      0
    5. brupala Posted messages 111155 Registration date   Status Member Last intervention   14 451 > matio777 Posted messages 7 Status Member
       
      oh yeah ...
      indeed that could complicate the task for their proxies.
      But on an open internet, that shouldn't be an issue, once again the answer is with them, in their mess.
      0