ANSWERED tunnel special programs

[superameise 0]

hello everyone,

 

i used this awesome guide

https://airvpn.org/topic/9549-traffic-splitting-guide-to-setting-up-vpn-only-for-torrenting-on-windows-thanks-to-nadre/

 

it works perfect but i have a question, is it possible to force other programs to use the vpn gateway instead of my default non vpn gateway ?

utorrent has a setting to bind to the airvpn ip and it works wonderfull, but i have another program that does not give me an option to define the gateway or interface.

with the setup of the guide given is there a easy way to force this program to the vpn gateway ?

 

thanks for the help,

ameise

 

[Staff 10118]

Hello!

 

When the program does not have a bind option the matter gets more complex.

 

ForceBindIP (a program that through injections forces other programs to bind to an interface or an IP address) would be a solution, but it does not work properly on newest Windows 64 bit versions.

 

In order to evaluate the best approach (if possible), can you please tell us your Windows version and which program you would need to be "un-tunneled"?

 

Kind regards

[superameise 0]

Thank you for the fast answer, i use Windows 7 64bit and the program i would like to tunnel is honorbuddy.

 

Best regards

[Staff 10118]

Hello!

 

Do you know what servers IP addresses that program connects to? We ask because if it connects to a definite range of IP addresses, the solution is simple, it's enough to modify the routing table, see also https://airvpn.org/topic/3024-can-i-bypass-the-vpn-with-a-browser/?do=findComment&comment=3025

 

Kind regards

[superameise 0]

great it worked, thank you for the help

 

best regards

[NaDre 159]

  On 9/5/2013 at 7:31 PM, superameise said:

hello everyone,

 

i used this awesome guide

https://airvpn.org/topic/9549-traffic-splitting-guide-to-setting-up-vpn-only-for-torrenting-on-windows-thanks-to-nadre/

 

it works perfect ...

 

I am glad you found the guide useful.

 

I guess you set up a bat file to make the routing changes for this enhancement you have made? So you have the VPN gateway address in these? Then when you change servers, you will have to change this. If you end up with VPN addresses all over the place, changing servers can become a nuisance.

 

If you are willing to go even further down the techie road, then you may want to do (all or part of) what I do in order to always "see" the same VPN IP addresses:

 

https://airvpn.org/topic/9518-faking-static-local-vpn-addess-using-client-nat-and-ifconfig/?do=findComment&comment=10449

 

I am afraid that post is not quite as thorough at explaining as the guide you read.

[superameise 0]

  On 9/7/2013 at 5:30 PM, NaDre said:

 

  On 9/5/2013 at 7:31 PM, superameise said:

hello everyone,

 

i used this awesome guide

https://airvpn.org/topic/9549-traffic-splitting-guide-to-setting-up-vpn-only-for-torrenting-on-windows-thanks-to-nadre/

 

it works perfect ...

 

I am glad you found the guide useful.

 

I guess you set up a bat file to make the routing changes for this enhancement you have made? So you have the VPN gateway address in these? Then when you change servers, you will have to change this. If you end up with VPN addresses all over the place, changing servers can become a nuisance.

 

yes i used bat files like the ones you made, with the airvpn gateway i use.

 

  On 9/7/2013 at 5:30 PM, NaDre said:

If you are willing to go even further down the techie road, then you may want to do (all or part of) what I do in order to always "see" the same VPN IP addresses:

 

https://airvpn.org/topic/9518-faking-static-local-vpn-addess-using-client-nat-and-ifconfig/?do=findComment&comment=10449

 

I am afraid that post is not quite as thorough at explaining as the guide you read.

 

i learned some networking stuff a few years ago but sadly it is not that much left but it is a good reason to refresh that knowledge and learn some new things.

 

but one question Nadre if you noticed the same, i used http://www.checkmytorrentip.com to see my torrent ip and after adding the routes

 

route add 0.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 64.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 128.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 192.0.0.0 mask 192.0.0.0 %GATEWAY%

 

it showed me my real IP i wanted to hide, it happens with utorrent and with vuze. i bound the right IP/interface with both clients, so i am not sure at the moment how the tracker recognizes the real IP.

 

best regards

[NaDre 159]

  On 9/8/2013 at 2:25 PM, superameise said:

...

but one question Nadre if you noticed the same, i used http://www.checkmytorrentip.com to see my torrent ip and after adding the routes

 

route add 0.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 64.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 128.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 192.0.0.0 mask 192.0.0.0 %GATEWAY%

 

it showed me my real IP i wanted to hide, it happens with utorrent and with vuze. i bound the right IP/interface with both clients, so i am not sure at the moment how the tracker recognizes the real IP.

...

 

I just checked this myself to make sure, and it sees my VPN exit point as my IP address.

 

Are you sure that you configured uTorrent to use the correct (VPN) IP address?

 

Did you firewall uTorrent from using the real gateway? Firewall it first, and test (see below) without the VPN running, before going further. Make sure that nothing gets out while the VPN is down. This way you can to be sure that if it is managing to connect to the outside when the VPN is up, it can only be through the VPN.

 

Did you try downloading ubuntu and watching with Process Explorer (as suggested) to see what connections uTorrent is making? What does the AirVPN "Client Area" say while you are downloading ubuntu?

[superameise 0]

  On 9/8/2013 at 5:16 PM, NaDre said:

 

  On 9/8/2013 at 2:25 PM, superameise said:

...

but one question Nadre if you noticed the same, i used http://www.checkmytorrentip.com to see my torrent ip and after adding the routes

 

route add 0.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 64.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 128.0.0.0 mask 192.0.0.0 %GATEWAY%

route add 192.0.0.0 mask 192.0.0.0 %GATEWAY%

 

it showed me my real IP i wanted to hide, it happens with utorrent and with vuze. i bound the right IP/interface with both clients, so i am not sure at the moment how the tracker recognizes the real IP.

...

 

I just checked this myself to make sure, and it sees my VPN exit point as my IP address.

 

Are you sure that you configured uTorrent to use the correct (VPN) IP address?

yes i double checked it

 

  On 9/8/2013 at 5:16 PM, NaDre said:

Did you firewall uTorrent from using the real gateway? Firewall it first, and test (see below) without the VPN running, before going further. Make sure that nothing gets out while the VPN is down. This way you can to be sure that if it is managing to connect to the outside when the VPN is up, it can only be through the VPN.

everything is set up and it works, the moment i disconnect the vpn it stops transfering data.

 

  On 9/8/2013 at 5:16 PM, NaDre said:

Did you try downloading ubuntu and watching with Process Explorer (as suggested) to see what connections uTorrent is making? What does the AirVPN "Client Area" say while you are downloading ubuntu?

 

yes the remote connections of utorrent connect with my vpn ip, it is really strange. i am pretty sure it is somewhere some minor detail i did wrong but at the moment i dont get it.

 

but it is not a big problem, i changed to using vpn for everything and only route some games and stuff i wanted to have the best latency to my real gateway. it works fine, of course it takes a few minutes to make new routes but i am happy with it. i use the bat files with this routes in my autostart folder, so after they are setup it work automatically.

 

thanks for the help NaDre and AirVPN Staff

[Staff 10118]

@superameise
@NaDre

It's very puzzling. There is a key information missing, and source-code-closeness does not help, that is how uTorrent IP binding works? If uTorrent is firewalled, how come that the checkmytorrentip tracker gets the ISP IPv4 address of superameise's device? If everything stated is true, the only explanation that comes to mind is that uTorrent announces to the tracker the ISP IP address, but how? We know that this can happen when connecting uTorrent to a proxy (https://blog.torproject.org/blog/bittorrent-over-tor-isnt-good-idea) but this situation seems completely different.

First of all, however, it would be important to replicate the problem. Without certain reproducibility under controlled conditions, it's problematic even to contact uTorrent community.

@superameise
Just an additional information, does your ISP IP address is diplayed in any of your network cards (if in doubt type ipconfig /all from a command prompt), or is the system which runs uTorent behind a router NAT? Also, can you please check carefully if there's any value into the "IP/Hostname to report to tracker" uTorrent field?

Kind regards

 

[NaDre 159]

  On 9/10/2013 at 12:11 AM, Staff said:

...

If everything stated is true, the only explanation that comes to mind is that uTorrent announces to the tracker the ISP IP address, but how?

....

 

The first question would be: How would uTorrent find out the external IP address? Does UPnP allow uTorrent to ask the router for the external IP address? I do not know. I would have to look at the protocol documents. And would all routers implement it? In my setup UPnP has been disabled both in uTorrent and also in the router. Perhaps superameise could check this?

 

EDIT:

 

Silly me. It could just ignore the binding of course. Nothing else occurs to me right now.

 

EDIT 2:

 

I suppose there could be an issue with the release of uTorrent superameise is using. I am using release 2.2.1. A lot of people feel that this was the last stable release of uTorrent. There are a few problems that many people have reported with later releases that uTorrent support will not even acknowledge. I gave up on later uTorrent releases after experiencing too many problems and too much frustration with the attitude of the support people.

 

@superameise

 

What release of uTorrent are you using?

 

EDIT 3:

 

  On 9/10/2013 at 2:48 AM, NaDre said:

...

Silly me. It could just ignore the binding of course. Nothing else occurs to me right now.

...

 

I should have added that uTorrent would have to be finding a way around the firewall.

 

As staff said, without being able to recreate this, there is not much that can be done. If uTorrent is somehow getting around the firewall, then perhaps one could try having uTorrent use a fixed port for outgoing traffic (there is an option for this), and then block outgoing traffic based on the port number too.

 

EDIT 4:

 

  On 9/10/2013 at 2:48 AM, NaDre said:

...

The first question would be: How would uTorrent find out the external IP address? Does UPnP allow uTorrent to ask the router for the external IP address?

...

 

Apparently UPnP can be used to query the external IP address. Microsoft provides a sample VBScript for this:

 

http://gallery.technet.microsoft.com/scriptcenter/Read-or-Change-the-16a1bffe

 

I have not tried this.

 

I wonder if it can get past a firewall block. At first glance it seems to use SOAP, and so HTTP. So I would hope not. But I have to wonder if a program such could escape the block briefly by invoking a VBScript internally? What program would have to be blocked to block a VBScript?

 

EDIT 5:

 

  On 9/10/2013 at 2:48 AM, NaDre said:

...

I wonder if it can get past a firewall block. At first glance it seems to use SOAP, and so HTTP. So I would hope not.

...

 

Again, silly me. If the firewall does not block access to the HTTP GUI for the router, then I would think that it is not blocking any HTTP access to the router.

 

If I was younger, more energetic, and more curious, I might explore this. But I will probably just content myself with having disabled UPnP in my router.