[5.0+][ROOT][3.6.0] AFWall+ IPTables Firewall [28 AUG 2023]

Search This thread

pathologo

Senior Member
Jul 26, 2008
658
49

justthefacts

Senior Member
Feb 21, 2011
1,880
845
Regarding Android OS leak.
I installed Network Log app just to see if I can investigate this further and it turned out that all the leaks happen during the start up.
Android OS does not pass the Afwall after the start up.

I have Nexus 4 and have "fix Device Start Rules" checked


Edit: Android OS DOES pass Afwall after start up. So does Root.
Edit 2: I have to start all over again because I did not have the correct settings in Network Log. It showed all attempted transmissions. Now I have it on the transmissions that do pass the firewall. My bad. I will report my results.
Edit 3: Network Log no longer registers any trafic through Afwall but again that don't mean anything because by the time it gets loaded at start up the damage has already been done.
I am assuming that All the leaking happens during the start up. Sorry for the useless post....:laugh:
I will let you know if Network Log will catch any Android OS leaks while the phone is up and running

Edit 4: While Data traffic in the phone settings shows the Android OS has used 5 KB after the start up, Network Log shows no leaks through the Firewall. i can not assume that phone setting is showing the attempted and the actual traffic because if that was the case then it should show all other apps attempted which it is not...:confused:
Started Maps which could not connect because it is blocked in AFwall. The phone settings says that maps has transmitted 572 KB of data but network Log says that it has not transmitted any data.
started the browser which is allowed by AFwall and Network log reported it along with the root and the kernel accessing the internet.
Is the data usage in the phone settings showing all attempted and successful access?


.
 
Last edited:

GermainZ

Inactive Recognized Developer / Retired Forum Mod
Aug 3, 2012
6,170
8,805
If you're trying to see what is connecting, just read what's in /proc/uid_stat/. It resets every boot and you can be sure it's accurate.
 
  • Like
Reactions: justthefacts

justthefacts

Senior Member
Feb 21, 2011
1,880
845
If you're trying to see what is connecting, just read what's in /proc/uid_stat/. It resets every boot and you can be sure it's accurate.
Thanks for the info. It matches the info I get from Network Log
The only thing that I have enabled in AFwall is the browser. but when I launch Maps, it shows that Maps has used 36 KB. does it mean that there is a leak? Although Network Log does not show any usage from the Maps.
 
Last edited:

zman519

Senior Member
Oct 27, 2010
2,240
255
the Land of Beer & Cheese
I am having problems with torrents. utorrent and bittorrent apps don't seem to work with the firewall on.

Can any one help? What kinda logs should I post.

Sent from my oversized ComBadge
 

Pons

Senior Member
Sep 2, 2010
3,932
2,067
It could be because of the required port is blocked ( whitelist ). Is it working in the blacklist mode ?

It didn't because the app wasn't declaring the use internet permission, so I couldn't allow/deny it.

Basically the app queries Google Play and Google Play queries Google and the response is being cached with the app's data.
If a LVL proxy is involved things get more complicated.

But more important: Did you also allow the kernel?

Yes, I allowed the kernel. I figured that's how it works, but was just checking. But now they've added the use internet permission (so I've added it to be allowed in AFWall+), and everything is now working as expected.

Trickster MOD: About the new internet permission
 

ukanth

Recognized Developer
Nov 30, 2010
1,543
5,412
Nexus 7 (2013)
OnePlus X
Hello All,

Here is the quick preview of the upcoming version of AFWall+ v1.2.5

* Added Tether support. (Thanks to cernekee)
* Added LAN/WAN support. (Thanks to cernekee)
* Added Import from DroidWall (from Donate Version !)
* Fixed issue with special applications not showing in different color(system apps) (Thanks to cernekee)
* Fixed issue with preferences for defauly system application picker (Thanks to cernekee)
* Fixed issue with Language preferences default(Thanks to cernekee)
* Lots of code refactor/bug fixes (Again Thanks to cernekee!)
* Fixed issue with multiline in search text.
* Minor UI changes on the application list
* Fixed issue with application loading

I'm still working on customizable iptables/busybox binary along with NFLOG for newer devices. It might take one or 2 weeks.

Google introduced new alpha/beta testing feature on playstore. I'll create a afwall google+ group, so that if any one interest, you can join to get alpha/beta preview version.


Also in the new version INTERNET_PERMISSIONS will be added because of API limitation to get interfaces for older devices.
 
Last edited:

ukanth

Recognized Developer
Nov 30, 2010
1,543
5,412
Nexus 7 (2013)
OnePlus X
Last edited:

ukanth

Recognized Developer
Nov 30, 2010
1,543
5,412
Nexus 7 (2013)
OnePlus X
Hello,
I chose this app so it can catch new app installs and give me easy access to firewall, but if I install an app that contain Arabic letters mixed with English letters in it's name then the app don't show in app list and the catch new install feature doesn't work.
like this one:
https://play.google.com/store/apps/details?id=info.qamos.www
Thanks.

Afwall+ only shows and notify apps which has internet permission. The,app in your example doesn't need internet

Sent from my HTC Desire using xda app-developers app
 
  • Like
Reactions: Ultramanoid

Top Liked Posts

  • 1
    What is needed to be enabled to use Android Auto in my car?
    I'm not sure what you're asking, but AFWall is meant to block traffic based on certain rules. Why would you want to use AFWall in order to enable AA? Are you rooted? Custom ROM? What's your environment? Are you currently able to use AA in your car?
    1
    I'm not sure what you're asking, but AFWall is meant to block traffic based on certain rules. Why would you want to use AFWall in order to enable AA? Are you rooted? Custom ROM? What's your environment? Are you currently able to use AA in your car?

    Perhaps they are having trouble using Android auto with the Firewall, e.g., maybe AFwall is blocking Android Auto.

    +1 to your question/suggestion about whether or not Android Auto works okay when AFwall is not enabled.
    1
    What is needed to be enabled to use Android Auto in my car?
    this sounds like you are using afwall in whitelist mode (blocks everything, and you select what gets access)?

    if you run it in the recommended blacklist mode (allows everything, and you select what gets blocked) you should not have this issue - assuming you don't of course block android auto or some crucial system app.
    1
    What is needed to be enabled to use Android Auto in my car?
    I had to enable traffic for a bunch of XIAOMI system "apps" (they bundle a bunch of apps together so that you don't disable them) that disabled network if they didn't phone home successfully after a couple of minutes. Never buying anything from that underhanded manufacturer EVER AGAIN.
    1
    What is needed to be enabled to use Android Auto in my car?
    What device you are using? OS and app version? What the default filtering mode? There's any logs while your device try to attempt any connection? More info please.
  • 1
    What is needed to be enabled to use Android Auto in my car?
    I'm not sure what you're asking, but AFWall is meant to block traffic based on certain rules. Why would you want to use AFWall in order to enable AA? Are you rooted? Custom ROM? What's your environment? Are you currently able to use AA in your car?
    1
    I'm not sure what you're asking, but AFWall is meant to block traffic based on certain rules. Why would you want to use AFWall in order to enable AA? Are you rooted? Custom ROM? What's your environment? Are you currently able to use AA in your car?

    Perhaps they are having trouble using Android auto with the Firewall, e.g., maybe AFwall is blocking Android Auto.

    +1 to your question/suggestion about whether or not Android Auto works okay when AFwall is not enabled.
    1
    What is needed to be enabled to use Android Auto in my car?
    this sounds like you are using afwall in whitelist mode (blocks everything, and you select what gets access)?

    if you run it in the recommended blacklist mode (allows everything, and you select what gets blocked) you should not have this issue - assuming you don't of course block android auto or some crucial system app.
    1
    What is needed to be enabled to use Android Auto in my car?
    I had to enable traffic for a bunch of XIAOMI system "apps" (they bundle a bunch of apps together so that you don't disable them) that disabled network if they didn't phone home successfully after a couple of minutes. Never buying anything from that underhanded manufacturer EVER AGAIN.
    1
    What is needed to be enabled to use Android Auto in my car?
    What device you are using? OS and app version? What the default filtering mode? There's any logs while your device try to attempt any connection? More info please.
  • 404
    Welcome to official support page for AFWall+

    Disclaimer - As Usual. I'll not take any responsible if something goes wrong when using AFWall+

    Introduction
    AFWall+ is an improved version of DroidWall(front-end application for the powerful iptables Linux firewall). It allows you to restrict which applications are permitted to access your data networks (2G/3G/4G/LTE and/or Wi-Fi and while in roaming).Since the original author of Droidwall
    discontinued the project, I decided to keep the app instead of Avast Firewall. I'll continue to add more features as I can.


    Features
    - Supports 5.x to 13.x
    - Import/Export Rules to external storage
    - Search Applications
    - Multiple Profiles with custom names
    - Tasker/Locale support
    - Select All/None/Invert/Clear applications with single click
    - Revamped Rules/Logs Viewer with copy/export to external storage
    - Ability to view the network interfaces
    - Highlight system applications with custom color
    - Notify on new installations
    - Ability to hide application icons( faster loading )
    - Use LockPattern for application protection.
    - Show/Hide application ID.
    - Roaming Control for 3G/Edge
    - VPN Control
    - LAN Control
    - Tether Control
    - IPV6 Control
    - Tor Control
    - Choose able languages
    - Choose able iptables/busybox binary
    - Supports MIPS/x86/ARM
    - DNS Hostname

    Changelog - See third Post
    Current Version - 3.6.0

    To get Unlocker without Google services - Please follow the instructions here

    AFWall+ BETA Program
    1) AFWall+ opt-in for beta program
    2) Install AFWall+ and If you have any issues, just send email from (Menu -> Firewall Rules - > Send error report)

    Source Code/Wiki/FAQ
    AFWall+ is an free & opensource application
    Github
    Log an issue
    Frequently Asked Questions
    Many Thanks to @CHEF-KOCH

    Translations
    Translations - Please help me with translations in your language.
    http://crowdin.net/project/afwall

    Thanks To/Credits
    - German translations by chef@xda & user_99@xda & Gronkdalonka@xda
    - French translations by GermainZ@xda & Looki75@xda
    - Russian translations by Kirhe@xda & YaroslavKa78
    - Spanish translations by spezzino@crowdin
    - Dutch translations by DutchWaG@crowdin
    - Japanese translation by nnnn@crowdin
    - Ukrainian translation by andriykopanytsia@crowdin
    - Slovenian translation by bunga bunga@crowdin
    - Chinese Simplified translation by tianchaoren@crowdin
    - Polish translations by tst,Piotr Kowalski@crowdin
    - Swedish translations by CreepyLinguist@crowdin
    - Greek Translations by mpqo@crowdin
    - Portuguese translations by lemor2008@xda
    - Chinese Traditional by shiuan@crowdin
    - Chinese Simplified by wuwufei,tianchaoren @ crowdin
    - Italian translations by benzo@crowdin
    - Romanian tranlations by mysterys3by-facebook@crowdin
    - Czech translations by Syk3s

    Cheers,
    ukanth

    XDA:DevDB Information
    AFWall+ [ IPTables Firewall ], App for the Android General

    Contributors
    ukanth
    Source Code: https://github.com/ukanth/afwall


    Version Information
    Status:
    Stable
    Current Stable Version: 3.5.3
    Stable Release Date: 2022-06-28
    Current Beta Version:
    3.5.3
    Beta Release Date: 2022-06-28

    Created 2013-12-03
    Last Updated 2020-09-05
    70
    Version 3.0.1

    * Fix: Status toggle widget 1x1
    * Fix: Ability to hide ongoing notification (Stop firewall and restart to hide after disable it in preferences)
    * Fix: Firewall error notification on oreo and above
    * Security: Tile toggle checks for password
    * User reported crashes
    * Updated translations

    Previous version 3.0.0

    Features:
    * Better support for nougat/oreo and pie.
    * Firewall toggle tile
    * Adaptive Icons
    * Notification channels
    * Tor support

    Bugs:
    * General bug fixes and crash reports.
    * Language selection bug
    * Filter selection bug
    * Compatible with magisk 17.x
    * Better handling of background process
    * Drops support for 4.x devices
    * Update languages
    * Updated libraries

    Complete Changelog

    41
    Hello All,

    After careful analysis and testing, I decided not to rewrite the way rules are being applied due to lot of under hood changes required. Instead added few enhancements. Now applying rules from menu will show how many rules are getting applied with progress status. Also when adding/removing few rules , it will apply only those related rules instead of full apply.

    Also fixed couple of bugs and enhancements. You can get the full changelog from https://github.com/ukanth/afwall/blob/beta/Changelog.md

    This is BETA Version which is not released on playstore. I have been using this for past week and it's stable. But there might be bugs which I haven't encountered. Please test it and report it in case of any issues.

    Also I have been following XPrivacy thread on the decision by it's author. Just as FYI, I might fix it for my own usage when I update to nougat, I will share it here if anybody uses it here.

    BETA Link - https://www.dropbox.com/s/isvi413qyx6vb4d/AFWall+ 2.9.7-BETA-TESTER.apk?dl=0
    40
    Hello everyone,

    I have released 3.0.0 stable on playstore today. It's been a crazy month so far. After going through lot of dilemma of whether to support the existing afwall or write a new one from scratch, finally able to pull myself and release stable version of afwall with lots of bug fixes and new features along with pie support. Since I don't do full time Android development, it was hard to keep track of what's going on with sdk level changes.

    Thank you all for your support in AFWall+ development. Without your support it would simply not possible to pull through this.

    I will be out for couple of days ( taking off to spend time with my family ) and hopefully will be able to reply to questions once back.

    Thanks again and have a great day.
    35
    Hello everyone,

    I have released stable version of 3.1.0 to playstore and github. Its live on playstore. You can find the changelog along with md5/sha here

    https://github.com/ukanth/afwall/releases/tag/v3.1.0

    Thank you all for your continuous support in AFWall+ development.