[2.2+][ROOT][1.2.5] AFWall+ IPTables Firewall [22 MAY 2013]

---

Welcome to official support page for AFWall+

AFWall+ is an improved version of DroidWall(front-end application for the powerful iptables Linux firewall). It allows you to restrict which applications are permitted to access your data networks (2G/3G and/or Wi-Fi and while in roaming).Since the original author of Droidwall discontinued the project, I decided to keep the app instead of Avast Firewall. I'll continue to add more features as I can.

Current Version - 1.2.5 

Free Version  
Donate Version  
F-Droid 
XDA Dropbox

AFWall+ is an free & opensource application

AFWall+ Source Code(Github)

Log an issue

Frequently Asked Questions
Many Thanks to @CHEF-KOCH !

Translations - Please help me with translations in your language.

http://crowdin.net/project/afwall


Credits
-----------
German          - chef@xda, user_99@xda , Gronkdalonka@xda
French            - GermainZ@xda , Looki75@xda
Russian          - Kirhe@xda
Spanish          - spezzino@crowdin 
Dutch               - DutchWaG@crowdin
Japanese       - nnnn@crowdin
Ukrainian        - andriykopanytsia@crowdin
Slovenian       - bunga bunga@crowdin
Polish              - tst,Piotr Kowalski@crowdin
Swedish          - CreepyLinguist@crowdin
Greek              - mpqo@crowdin
Portuguese    - lemor2008@xda
Chinese Simplified - tianchaoren@crowdin

-> It's not working on my device or Can I get this feature/that feature ?
    Please log an issue on github.

-> How can I donate to you ?
     I don't have paypal account. you can buy donate version to support my work.

-> Logs are not displaying anything/always empty
     AFWall+ logs are depend on dmesg (kernel logs). Either your kernel disabled dmesg or it's getting overwritten quickly. Also it does not work on latest devices. I'm on it.

Cheers,
ukanth

Changelog and Details

---

Version 1.2.5

* Added Tether support. (Thanks to cernekee)
* Added LAN/WAN support. (Thanks to cernekee)
* Added Import from DroidWall (from Donate Version !)
* Fixed issue with special applications not showing in different color(system apps) (Thanks to cernekee)
* Fixed issue with preferences for defauly system application picker (Thanks to cernekee)
* Fixed issue with Language preferences default(Thanks to cernekee)
* Lots of code refactor/bug fixes (Thanks to cernekee!)
* Fixed issue with multiline in search text.
* Minor UI changes on the application list.
* Added selectable iptables/busybox binary
* Added new translations (chinese/greek etc.,)

Version 1.2.4.1
* Fixed issue with cleanup afwall rules on disable
* Fixed issue with OUTPUT chain not removed for afwall on disable

Version 1.2.4(bump version to match Donate version)
* Support IPv6 (Enable it in preference)
* Tasker support enable/disable of AFWall+
* Improved performance of applying rules and application list.
* Improved application loading progress dialog.
* Show keyboard automatically on password protected dialogs
* Fixed issue with custom script hangs.
* Improved translations strings.
* Fixed issue with multiple password request (in beta testing)
* Improved detection logic for data leak prevention script (Thanks GermainZ)
* Improved multiple profile performance while loading applications. It will no longer apply rules on switching
profiles. You need to manually apply rules after profile switch.
* Added translations for Greek,Produguese languages.

Version 1.2.1
* Minor issue fixed for "Media Server" not apply properly after reboot
* Fixed iptables rules which breaks wifi/Mobile data limit.
* Updated translations for German/Chineese
* Added Swedish Translation - Many Thanks to CreepyLinguist@Crowdin

Version 1.2.0
* [Feature]
- Added change app language from the preferences (default is system lang)
- Added device admin feature - Extra protection to AFWall+, so that it can't be uninstalled from any other app.
- Added Tasker/Locale plugin (from donate version) with bug fixes.
- Added VPN Support (enable/disable it preferences) - Tested with DroidVPN and works fine !
- Added new widget with quick toggle (enable/disable/profiles)
- Added option to import from DroidWall (only for Donate version for now !)
- Added Active defense ( Make sure only AFWall+ able to control to internet) - Not an optional !
- Added new super user permission ( koush's superuser permission)
- Added ability to enable/disable roaming feature

* [Enhancements]
- New logic to apply rules - Performance improvement
- Removed deprecated API's for Notification. Going forward this will be improved for ICS/JB
- Improved preferences - Added summary for each preferences and rearranged order
- New menu icons ( white icons !)
- Removed all inline style alert messages and alert boxes. Now it just display toast messages.
- Fixed data leak on boot for devices REQUIRES init.d support/S-OFF (enable it in preferences - EXPERIMENTAL !)
( to enable init.d support use this app -> https://play.google.com/store/apps/d...k.initdtoggler)
- New log rule to get the logs from dmesg and enable logs by default
- Enable/Disable logs now from "Firewall Logs" menu.

* [BUG Fix]
- Fixed issue with iptable rules are not applying after reboot, mainly CM 10.1 devices (Enable it in preferences - EXPERIMENTAL !)
- Various UI glitches in multi profiles/icons & UID
- Fixed hang/rules issue on startup
- Fixed issue with profiles where the default profile is applied after restart instead of selected one.
- FC issue when using app menu (ActionBarSherlock - NPE)
- Fixed issue with Media Server/VPN not applying properly.


* [Translations]
- Simplified Chinese - Thanks to wufei0513 & tianchaoren@Crowdin
- Czech Translations - Thanks to syk3s@Crowdin
- Turkish Translations - Many Thanks to metah@Crowdin
- Ukrainian Translations - Many Thanks to andriykopanytsia,igor@Crowdin


Version 1.1.9
* Added invert selection for apps ( useful when switching whitelist <-> blacklist )
* Fixed issue with special apps (root/shell/media server) not applying
* Fixed issue with new lockpattern not working properly.
* Added MDPI images for icons.
* Code cleanup, mainly strings.xml ( removed version from strings.xml etc.,)

Version 1.1.8
* Fixed FC on new lockpattern option.

Version 1.1.7
* Added lockpattern ( you can still use the old style password protection ) with SHA1 protection
* Fixed force close issue while adding system apps.
* Fixed issue with select All/none. it wroks properly and doesn't require scroll. Thanks to Pragma !
* Significant improvements while loading applications( hope not a placebo ?)
* Fixed issue with search case sensitive and expand search will show the keyboard ( no more two press !)
* Disable notification when the firewall is disabled.
* Added new language translations
- Spanish translations by spezzino@crowdin
- Dutch translations by DutchWaG@crowdin
- Japanese translation by nnnn@crowdin
- Ukrainian translation by andriykopanytsia@crowdin


Version: 1.1.6
* Back to Chainfire's SU library. More stable but little slower compare to RootTools. Performance will be improved going forward.
I'm planning to rewrite the entire code to make it faster and stable. But for now, it will be continue as it is.
* Fixed issue with rules were not applied after system reboot for couple of devices.
* Fixed issue with custom rules were broken completely.
* Fixed issue with Notification icon size is huge.
* Fixed Force Close of some devices when alert message is displayed.


Version: 1.1.5
* New Busybox binary (atleast I feel little faster loading on logs ) compiled from latest busybox source . This is packed with handpicked additional and useful busybox commands which will be used in the future versions of AFWall+ to build more advance features ! Stay tuned
* Fixed issue with widget size 1x1 on newer devices
* Fixed issue with firewall rules not applying before shutdown to prevent leak.
* Fixed Force close on many devices while opening application.
* Fixed Force close on some devices when alert message is displayed.

Version: 1.1.4
* Replace su library with RootTools, much faster and stable!
* Improved detection logic for iptables for ICS/JS devices and removed EXPERIMENTAL option from preferences.
* Now disable icons will free up space on the main view
* Added option to show UID for applications ( like DroidWall )
* Fixed Issue with tf201 devices with su permisssions.
* Fixed constant force close on some devices while applying rules.
* Fixes issue with packages reset to root when importing.
* Improved Russian Translations - Many thanks to Kirhe@xda!
* Fixed issue with custom script not applying properly after uid (github issue #89)
* Removed Disable 3G when USB connected preference because of some bugs.I'll put that back after fixing it.

Version: 1.1.3
* Critical bugfix: Rules are not applied after device reboot/start. Please update to this version.

Version: 1.1.2
* Minor bug fix for FC on alerts !

Version: 1.1.1
* Feature : Tasker/Locale Plugin! (Only for donate version for now)
* Feature : Now allow customize names for profiles.(from preferences)
* Feature : Replace alert/toasts with appmsg(displays within the app) - enable it in preference
* Feature : Initial simple improvements for view logs. It will be improved further!
* Preference : Added new preference to enable confirmbox on firewall disable
* FC : Replaced old style deprecated Thread implementation with AsyncTask.(faster and safer)
* FC : NullPointer exception while reading preferences.
* Bug Fix : Shutdown Custom Rule doesn't work.
* Bug Fix : Refresh issue of mode on the multiple profiles switching.
* Bug Fix : Fixed two identical profile names on multiple profiles.
* i18n : Completed french/Germen translations.
* i18n : Added russian language support(Thanks : Google translator toolkit )
* and many small fixes

Version: 1.1.0
* Initial Playstore version.

Version: 1.0.7a
* Multiple Profiles ( Currently limited to 4 )
* Added support for Epic 4g Touch( Thanks JoshMiers !)
* Unified Preferences (https://github.com/saik0/UnifiedPreference/)
* Translations added (french/german) - (Thanks GermainZ/CHEF!)
* New Icon for AFWall ( Thanks hush66 !)
* Fixed multiple menu on ActionBar with staticbar ( no more two menu items on some devices )
* Enable/Disable logs now moved to preferences and log menu will be hidden if disabled
* Bug Fix : Update of application packages will not be notified with AFwall.
* Bug Fix : Uninstalling app will reset rule for root application to default.

Version 1.0.6.1a
* Bug Fix - Rules were not saving for special apps like root/gps/media/kernel !

Version: 1.0.6a
* Now uses Chainfire's SU library, This will get rid of old shell script approach. I feel it's faster and better approach and helps to enable profiles ! Please Note: If you use afwall.sh outside, starting this version it will not work !
* Improved menubar and confirmation dialogs
* Fixed bug with logging
* Fixed bug on some ICS/JB devices
* Added new EXPERIMENTAL option for ICS/JB devices ( uses extra rules )
* Enabled fast scrolling on lists ( main list )
* German Translation ( Thanks to CHEF !)
* Support for 4.2 JB

Version 1.0.5a
* Enhanced Rules view with additional actions like copy, flush, export to sdcard and network interfaces.
* Moved flush rules from main menu to enhanced rules view
* Enhanced Log view with additional copy & clear action
* Moved clear log from main menu to enhanced log view
* Fixed FC issues from 1.0.4.x

Version 1.0.4.2a
* Fixed force close on Set Password dialog

Version 1.0.4.1a
* Fixed force close on Show logs and show rules menu.

Version 1.0.4a
* Import/Export Rules ( for now it's just a single import&export to External storage)
* Integrated search bar ( application search )
* Revamped Log & IPTables rules view ( you can now view the logs and rules in a clear view and copy them !)
* Added reenter password confirmation dialog.
* Added additional ifaces to support more devices ( working on another solution which will identity interfaces on the particular device)
* Fixed force close when scrolling for some devices
* and many.

Version 1.0.3a
* Fix for some apps can "bypass" the firewall by just using UDP port 53. Disable port 53
* Added 3g ifaces to support more devices ( should solve issues with firewall for some devices )
* Fixed Widget on/off issue ( First enable firewall and then add the widget will do the trick !)
* Fixed Widget size for 4.0+ devices
* Prepared for i18n Support
* Prepared support for XHDPI devices

Version 1.0.2a
* Roaming Option ( not tested !)
* Added Shutdown broadcast and applied rule to block all the connections ( this should solve the leakage
when phone is rebooted/started before afwall can start !!!) - Not tested !
* Added option to disable application icon ( faster loading )
* Added option to disable 3g rules when connected via Wired USB (droidwall issue)
* Added support for more ifaces for 3G ( support multiple devices )
* Added clear Rules option in menu (now the iptables will be saved as afwall-3g,afwall-wifi, to solve the issue when both droidwall & afwall installed )
* Fixed bug in reload applications
* Fixed bug in applying rules in clear/select all
* Fixed the issue with save/discard rules when press back button.

Version 1.0.1a
* Improved install notification( only notify when app has internet permission )
* Select All Wifi / 3G or Clean All option ! ( HUGE FIX ) - No Invert select this time. just click on the 3g/wifi icons will do the trick !
* Fixed dangerous file permissions issues ( reported in original droidwall issue )

Version 1.0.0a
* Based on DroidWall 1.5.7
* ICS style menubar and theme
* New install notifications
* New preferences options
* Force reload Applications
* Highlight System applications using custom color from preferences

Planning Features !

* TAB interface to separate system apps & user apps
* Roaming option ( like avast firewall )
* Support for XHDPI
* Support for only within LAN
* Flush/Reset iptables rules from UI
* View iptables rules in a clear view
* View logs in a clear view
* Bug fixes - Continue
* i18n support - Moved all the strings to string.xml - on going
* Save & Load Profiles
* Tasker/Locale support
* Integrate with Network Log ?
* Uninstall application from list window ( or open manage application from list)
* Extra protection - adminstrator
* Detailed Log statistics - On going
* Update busybox to the latest version !
* Update iptables to the latest version !
* Support for ipV6
* Advance IPtables rules builder ( based on network interfaces/ individual ip & hostname level )

Great, I have been waiting for someone to take over and update best firewall for our phones. Anything that we should now about this release in particular?

Sent from my HTC Sensation Z710e using Tapatalk 2

Originally Posted by vault1965

Great, I have been waiting for someone to take over and update best firewall for our phones. Anything that we should now about this release in particular?

Sent from my HTC Sensation Z710e using Tapatalk 2

Thanks for feedback... I've updated the second post for changelog.
Please check the same.


Sent from my HTC Desire

It works fine, but highlights in red makes it difficult to read. Maybe it would be better just to have red font for system apps without highlight. Of course, this is only cosmetics. Will post further as I use it now as main firewall.

Sent from my HTC Sensation Z710e using Tapatalk 2

Ok,thats correct. I'll make that change, even with custom color option.

Thanks for the feedback

Sent from my HTC Desire

Great man, and all thanks goes to you. Avast was killing my phone with firewall enabled. Let me know if you need any particular feature tested.

Sent from my HTC Sensation Z710e using Tapatalk 2

@vault1965, Added custom color options to highlight system apps from preferences and removed the RED background. Hope that helps. Thanks for your inputs.

here are some fr

---

Hey, very good app. I like apps that doesn't consume much resources on my devices and that's why i prefer this app here.

Here are some feature requests, i know the list is pretty big but most of them are important:

* translation support (e.g. to translate the app into german)
* google play store support (when the app are nearly "final")
* saving/loading profiles
* select all / select none / invert selection
* backup and restore rules (the most important point for me)
* IPv6 support (also vey important)
* Tasker/Locale Integration
* Orbot (Tor) support (because of some problems to connect into it)
* an Option for SSL/TLS only connection
* tablet interface support
* special rules for VPN



Here are some bugs or problems i found (some of theme are small and easy to fix i think)
* Apps can bypass droidwalls whitelist if started before droidwall upon boot
* On Jelly Bean the user interface looks different (a picture above explain it better), maybe remove the black background and the red one, and make it so that only the text have different colors and not the background
* The Widget needs to much space, the icon takes 4x1 for me (see screenshot)
* The notification about new apps only show one, but if you install right after that another app nothing was shown up
* In the help dialog there is an google code link, seems that that link does not work maybe you change this to the github repro

Thank you for that great app!

Well Koch beat me to it, but I stand behind all the points that he made. If you can make all of this happen I will be a happy camper.

Sent from my HTC Sensation Z710e using Tapatalk 2