Attend XDA's Second Annual Developer Conference, XDA:DevCon 2014!
5,741,535 Members 39,923 Now Online
XDA Developers Android and Mobile Development Forum

[APP][4.0.3+][XPOSED] LightningWall

Tip us?
 
defim
Old
(Last edited by defim; 16th June 2014 at 08:18 AM.)
#1  
Senior Member - OP
Thanks Meter 691
Posts: 1,377
Join Date: Feb 2012
Default [APP][4.0.3+][XPOSED] LightningWall

Xposed app firewall.

This app is an firewall for the installed apps. Only apps with permission "android.permission.INTERNET" are
shown. IPv4 and IPv6 are supported together with TCP and UDP. You could configure outgoing and incomming
connections independent from each other.
The rules could be applied for each network: W-Lan, local network, mobile, roaming, unknown.
Logging is configurable for incomming/outgoing and allowed/denied connections.

Colors:
  • Blue: Template is used.
  • Yellow: Custom settings.
  • Green: The app is trusted.
  • Red: The app is blocked.
Features:
  • No iptables required, the kernel doesn't need to support it.
  • The firewall is active when Android starts, no startup data leak.
  • The rules are always active, no re-apply on connection change is needed.
Limitiation:
  • Host names in the log file are PTR entries.
Donation:
  • No self-promotion in the app.
  • You could trust or block an app (Menu/ActionBar)
  • You could use a template for not configured apps
  • Additional (experimental) networks: Bluetooth, WiMAX, Ethernet
  • Tasker support, per App
  • You support this app and further development!
Permissions:
  • ACCESS_SUPERUSER: apply iptables rules

This app does not connect itself to any websites or hosts!

Important:
This app needs the Xposed Framework. The framework requires root access for installation. Don't forget to enable the module in Xposed. You can grab it here: Xposed Installer

Website: http://tinyurl.com/l5bpv23
Play Store: http://tinyurl.com/ome2pvc
Xposed Repository: http://tinyurl.com/ksc6plz
Changelog: http://tinyurl.com/n8gsqja

Why this app? No firewall for Xposed exists yet

Translation:
You could find here a interface to translate the english strings: http://tinyurl.com/okycacj
A free account of www.oneskyapp.com is required to edit. Additional, please attach your email address or send it via PM
Attached Thumbnails
Click image for larger version

Name:	lightningwall0.png
Views:	3861
Size:	154.2 KB
ID:	2734611   Click image for larger version

Name:	lightningwall1.png
Views:	2924
Size:	176.9 KB
ID:	2734612   Click image for larger version

Name:	lightningwall2.png
Views:	2217
Size:	105.1 KB
ID:	2734613   Click image for larger version

Name:	lightningwall3.png
Views:	1970
Size:	113.8 KB
ID:	2734614   Click image for larger version

Name:	lightningwall4.png
Views:	1855
Size:	149.1 KB
ID:	2734619  

Click image for larger version

Name:	lightningwall5.png
Views:	1780
Size:	113.9 KB
ID:	2734621   Click image for larger version

Name:	lightningwall6.png
Views:	1742
Size:	154.6 KB
ID:	2734622  
Motorola Defy+ aka MB526 Android 4.4.4 Cyanogen Mod
Samsung S4a aka GT-i9295 Android 4.2.2 Google Edition
My Android apps / Xposed modules: show Threads
The Following 22 Users Say Thank You to defim For This Useful Post: [ Click to Expand ]
 
shivadow
Old
#2  
Senior Member
Thanks Meter 29
Posts: 143
Join Date: Jan 2012
Insane.. I was looking for something like this about 12 hours ago.. its almost like you read my mind and made it just for me!.

I like your style. Nice and simple and keeping it in line with your others.

Sent from my GT-I9300 using Tapatalk
 
greatdaneduke
Old
#3  
greatdaneduke's Avatar
Senior Member
Thanks Meter 154
Posts: 449
Join Date: Apr 2012
Downloading now.

Sent from my SCH-I535 using XDA Premium 4 mobile app
 
defim
Old
#4  
Senior Member - OP
Thanks Meter 691
Posts: 1,377
Join Date: Feb 2012
Quote:
Originally Posted by shivadow View Post
Insane.. I was looking for something like this about 12 hours ago.. its almost like you read my mind and made it just for me!.

I like your style. Nice and simple and keeping it in line with your others.

Sent from my GT-I9300 using Tapatalk
Maybe you head me thinking loud 6 weeks after starting this app: "i will release today, if there are still error, i'll fix them later"
Motorola Defy+ aka MB526 Android 4.4.4 Cyanogen Mod
Samsung S4a aka GT-i9295 Android 4.2.2 Google Edition
My Android apps / Xposed modules: show Threads
 
an0n981
Old
#5  
an0n981's Avatar
Senior Member
Thanks Meter 614
Posts: 877
Join Date: Jul 2013
Am I correct in assuming this is not open source?
The Following User Says Thank You to an0n981 For This Useful Post: [ Click to Expand ]
 
defim
Old
(Last edited by defim; 10th May 2014 at 01:20 PM.)
#6  
Senior Member - OP
Thanks Meter 691
Posts: 1,377
Join Date: Feb 2012
I got a question about incoming/outgoing connections, maybe somone else want to know:
Incoming connections are used by less than 1% of all apps. This is used if the app is a "server", like BubbleUPnP. So most time incoming conections could be blocked, i think for mobile network 100%.
An outgoing connection is like a phone call: You call someone (outgoing connection), and can talk (send "data") and hear (receive "data")

Wifi Internet and Network:
If you want to control eg your local tv-receiver, xbmc device or avm router (with FreetzMobil), only connections to the local network are required. This prevents app to send data to the internet.
The "local network" are all "private" IPv4 and IPv6, they will not be forwarded by internet routers. Additionally, if you use "public" IPs they are local if it is in the same subnet as a ip of your device. Uncommon for IPv4 usage, but public IPv6 are the common usage (public IPv6 for every device)


Quote:
Originally Posted by an0n981 View Post
Am I correct in assuming this is not open source?
As usual i send source only to people i know
Motorola Defy+ aka MB526 Android 4.4.4 Cyanogen Mod
Samsung S4a aka GT-i9295 Android 4.2.2 Google Edition
My Android apps / Xposed modules: show Threads
The Following User Says Thank You to defim For This Useful Post: [ Click to Expand ]
 
an0n981
Old
#7  
an0n981's Avatar
Senior Member
Thanks Meter 614
Posts: 877
Join Date: Jul 2013
I took this mod for a quick test drive, a little feedback:
-Is it not possible to restrict kernel?
-Could it be that apps that use native libraries to connect to the internet cannot be restricted? Firefox and Mega (both use native libraries) were able to connect even when completely restricted.
Also a little cosmetic issue com.android.process.gapps showed completely green at all times. However restrictions were applied properly
The Following User Says Thank You to an0n981 For This Useful Post: [ Click to Expand ]
 
defim
Old
#8  
Senior Member - OP
Thanks Meter 691
Posts: 1,377
Join Date: Feb 2012
Quote:
Originally Posted by an0n981 View Post
I took this mod for a quick test drive, a little feedback:
-Is it not possible to restrict kernel?
-Could it be that apps that use native libraries to connect to the internet cannot be restricted? Firefox and Mega (both use native libraries) were able to connect even when completely restricted.
Also a little cosmetic issue com.android.process.gapps showed completely green at all times. However restrictions were applied properly
Yes, see OP: "Limitiation: ... no native binaries." This is because the design of Xposed
Isn't it "com.google.process.gapps"? Onyl this one app has the wrong colors? Has it a green dot for "trusted app"? What did you configured for it?
Motorola Defy+ aka MB526 Android 4.4.4 Cyanogen Mod
Samsung S4a aka GT-i9295 Android 4.2.2 Google Edition
My Android apps / Xposed modules: show Threads
 
an0n981
Old
#9  
an0n981's Avatar
Senior Member
Thanks Meter 614
Posts: 877
Join Date: Jul 2013
Yes I meant com.google....
I set it from template to custom, blocked everything, however in the app overview it still showed as all green. When it was restricted GCM was blocked and the log showed blocked connections to mtalk.google.com:5228. Then I unrestricted outgoing mobile and wifi and GCM was available and the log correctly showed allowed connections but the colors in the app overview didn't change
 
defim
Old
#10  
Senior Member - OP
Thanks Meter 691
Posts: 1,377
Join Date: Feb 2012
Version 1.0.1 uploaded
- fix "incoming" thx @w0rinal
- also an error related to coloring, @an0n981 can you check if it fixes your problem? Toggling options could be required
Motorola Defy+ aka MB526 Android 4.4.4 Cyanogen Mod
Samsung S4a aka GT-i9295 Android 4.2.2 Google Edition
My Android apps / Xposed modules: show Threads

Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes