[App_rpt-users] Way to use VPN to route IP packets into AT&T hotspot

[Anthony Percy]

Hi there,
I had the same problem in Australia with a local Telco hotspot in that the Telco only allowed outbound IP connections and its global firewall prevented inbound IP connections…
As suggested, one way around this would be to connect the hotspot via a secure IP tunnel to a host that does allow inbound connections. e.g hotspot <——> host SSH/VPN server <—> Internet
One suggestion, would be to use say the smallest Amazon lightsail host (@$USD 3.50 per month) and set that up as a SSH tunnel server or SoftEther VPN server. 
I suggest the SoftEther VPN server as they have a free DNS service for any SoftEther VPN server but SSH tunnel would do if you didn’t need the fixed DNS name. Then you would be able to receive inbound IP on Allstar via the Amazon lightsail host…
It would look like this, Allstar<—>Hotspot<—>SSH/SoftEther VPN tunnel<—> Amazon lightsail host with SSH/SoftEther setup<—>Internet.
You would need to configure some IP routes & NAT on the Amazon lightsail host but the SoftEther configuration tools would make that a bit easier… But if you like command line tools then setting up a SSH tunnel instead would work ok as well.
I have been running SoftEther VPN on a PC Audrino for the last 6 months as the main VPN access server for VK5RDM repeater system and its been rock sold so far!

Best Regards

Anthony, VK5QS


Date: Thu, 9 Apr 2020 09:09:25 -0400
From: Marty <martye at usham.org <mailto:martye at usham.org>>
To: app_rpt-users at lists.keekles.org <mailto:app_rpt-users at lists.keekles.org>
Subject: Re: [App_rpt-users] VPN to forward ports
Message-ID: <492726d4-eed5-2475-ac6c-f43d9a345a79 at usham.org <mailto:492726d4-eed5-2475-ac6c-f43d9a345a79 at usham.org>>
Content-Type: text/plain; charset="utf-8"; Format="flowed"

So far what info I have found out and does not surprise me. The Hotspot 
does have these options to change firewall settings requires a Business 
Account and a Static IP for Firewall to function as it should. Don?t ask 
on how much! Also looking into changing the APN if anyone has any info 
on this. Unless this is a feeble attempt too! Thanks, 73, Marty 28523

Message: 1
Date: Wed, 8 Apr 2020 08:26:20 -0400
From: Marty<martye at usham.org <mailto:martye at usham.org>>
To:app_rpt-users at lists.keekles.org <mailto:app_rpt-users at lists.keekles.org>
Subject: [App_rpt-users] VPN to forward ports
Message-ID:<caac3f79-9961-0864-ada8-823e27ea8e6f at usham.org <mailto:caac3f79-9961-0864-ada8-823e27ea8e6f at usham.org>>
Content-Type: text/plain; charset="utf-8"; Format="flowed"

*I have been using an AT&T Hotspot for my internet for my allstar node.
The Hotspot that has a section to forward ports but does not seem to
work and acts like they are still being blocked even though I port
forward the correct ports to and from the static ip i used I also used
the DMZ to that static IP. It is as if my public IP is virtual and not
going back to my ip or they are blocking viop ports. So I've been trying
to find a way to use a VPN service would help with something like this?
The Hotspot does have a section for APN setting but don't know how to
use that, that's if that could help anyway. **I can only connect to
other nodes, I can not receive connections from outside. Even Echolink
is not working either. I have no outside access to my public IP. * *Use
to work on a regular broadband connection or is there another way around
the issue I'm having with the AT&T Hotspot or is this the nature of
hotspots? * *73, Marty KD4HLV 28523*
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.keekles.org/pipermail/app_rpt-users/attachments/20200411/b5b1f557/attachment.html>