[5.0+][ROOT][3.6.0] AFWall+ IPTables Firewall [28 AUG 2023]

ukanth · Feb 16, 2019

Hello everyone,

I have released stable version of 3.1.0 to playstore and github. Its live on playstore. You can find the changelog along with md5/sha here

https://github.com/ukanth/afwall/releases/tag/v3.1.0

Thank you all for your continuous support in AFWall+ development.

jaydee 77 · Feb 16, 2019

ukanth said:
Thank you all for your continuous support in AFWall+ development.

Thank us? No, thank you!

Spinvis · Feb 16, 2019

ukanth said:
@Spinvis, Thanks ! will check it.

After playing with the rules a bit more I noticed the following in whitelist mode. If I select "Any app, UID -10" and hit apply to allow traffic, that afterwards I still have an internet connection, as opposed to selecting all the apps and applying those rules to allow traffic.

Here is the log.

Below are the ipv4rules.

Hopefully it'll contain some insight into this.

maybeme2 · Feb 16, 2019

I only access AFWall+ when I install some new app or update but I was exploring its settings and noticed that I can't seem to access the full ipv6 controls. (See attached image).
Is this normal?
Why are the ipv6 INPUT/OUTPUT controls grayed out?
Thanks.

ukanth · Feb 17, 2019

Spinvis said:
After playing with the rules a bit more I noticed the following in whitelist mode. If I select "Any app, UID -10" and hit apply to allow traffic, that afterwards I still have an internet connection, as opposed to selecting all the apps and applying those rules to allow traffic.

Here is the log.

Below are the ipv4rules.

Hopefully it'll contain some insight into this.

Try enable ipv6

ukanth · Feb 17, 2019

maybeme2 said:
I only access AFWall+ when I install some new app or update but I was exploring its settings and noticed that I can't seem to access the full ipv6 controls. (See attached image).
Is this normal?
Why are the ipv6 INPUT/OUTPUT controls grayed out?
Thanks.

Either you apply ipv6 for all applications or just control the chains (block/allow) for default chains. It's recommended to enable ipv6.

Spinvis · Feb 17, 2019

ukanth said:
Try enable ipv6

Just tested this, results are the same unfortunately.

ukanth · Feb 18, 2019

Spinvis said:
Just tested this, results are the same unfortunately.

I didn't pay attention on your first question. Are you saying you have selected "any app" ?

any app == allowing all applications. That's useful when you are using profiles/tasker to switch to unrestricted mode.

Spinvis · Feb 18, 2019

ukanth said:
I didn't pay attention on your first question. Are you saying you have selected "any app" ?

any app == allowing all applications. That's useful when you are using profiles/tasker to switch to unrestricted mode.

Correct, what I've tried so far;

Enable IPv6 = no change, no internet access.
Use built-in/system BusyBox/iptables = no change, no internet access.
Allow internet access for every app and service = no change, no internet access.
Allow "Any app" = actually works, got internet access.
Use blacklist instead of whitelist = works, got internet access.

I'm mostly surprised by the difference in results between selecting all the applications, compared to to the "Any apps". Also seeing the results of blacklist, my suspicion is that something get blocked using whitelist, which is allowed by selecting the "Any apps", and it's allowed by default using the blacklist.

This is on Pie, OnePlus 5. Tried latest custom ROMs; CNP (Nitrogen), Omni (Treskmod). Using Magisk 18.1. Latest AFWall. Never had this issue on Oreo.

ukanth · Feb 18, 2019

Spinvis said:
Correct, what I've tried so far;

Enable IPv6 = no change, no internet access.

Use built-in/system BusyBox/iptables = no change, no internet access.

Allow internet access for every app and service = no change, no internet access.

Allow "Any app" = actually works, got internet access.

Use blacklist instead of whitelist = works, got internet access.

I'm mostly surprised by the difference in results between selecting all the applications, compared to to the "Any apps". Also seeing the results of blacklist, my suspicion is that something get blocked using whitelist, which is allowed by selecting the "Any apps", and it's allowed by default using the blacklist.

This is on Pie, OnePlus 5. Tried latest custom ROMs; CNP (Nitrogen), Omni (Treskmod). Using Magisk 18.1. Latest AFWall. Never had this issue on Oreo.

If you face issues in Pie whitelist mode, you need make sure you allow "Android system - UID 1000" to access internet. If you don't want to give access to uid 1000, then you need to disable captive portal using adb. Have you given access to uid 1000 and still unable to access internet ?

Spinvis · Feb 18, 2019

ukanth said:
If you face issues in Pie whitelist mode, you need make sure you allow "Android system - UID 1000" to access internet. If you don't want to give access to uid 1000, then you need to disable captive portal using adb. Have you given access to uid 1000 and still unable to access internet ?

Yes, it's allowed, every app and service is allowed.

Also see screenshot here from a previous reply
click

Like I said, it's a very strange issue, never had this on Oreo.

Seeing the results of blacklist, my suspicion is that something get blocked using whitelist, which is allowed by selecting the "Any apps", and it's allowed by default using the blacklist.

maybeme2 · Feb 18, 2019

ukanth said:
Either you apply ipv6 for all applications or just control the chains (block/allow) for default chains. It's recommended to enable ipv6.

Thank you.
I'm not sure I understand. If I have things as in the screenshot am I doing the "applying IPV6 for all apps"?
If I wanted to a block by app what should I do different?
Thank you.

ukanth · Feb 19, 2019

maybeme2 said:
Thank you.
I'm not sure I understand. If I have things as in the screenshot am I doing the "applying IPV6 for all apps"?
If I wanted to a block by app what should I do different?
Thank you.

Yes. Rules will be applied for both v4 and v6 for the apps selected on the main screen.

ukanth · Feb 19, 2019

Spinvis said:
Yes, it's allowed, every app and service is allowed.

Also see screenshot here from a previous reply
click

Like I said, it's a very strange issue, never had this on Oreo.

Seeing the results of blacklist, my suspicion is that something get blocked using whitelist, which is allowed by selecting the "Any apps", and it's allowed by default using the blacklist.

While in whitelist enable log service and find out what's getting blocked.

LovepreetSinghGill · Feb 20, 2019

Why does applying rules is very slow with SuperSU?

NYLimited · Feb 21, 2019

LovepreetSinghGill said:
Why does applying rules is very slow with SuperSU?

When was your SuperSU last updated?

RobertQc · Feb 21, 2019

-11 App Name: (kernel) - Linux kernel

[-11] (kernel) - Linux kernel

Why does this keep popping up even if I allow it?

AFwall says DENIED, DENIED, but I allowed it.

LovepreetSinghGill · Feb 21, 2019

NYLimited said:
When was your SuperSU last updated?

I fixed it my self

IronTechmonkey · Feb 21, 2019

LovepreetSinghGill said:
I fixed it my self

Your solution might be helpful to other people. Would you mind sharing how you fixed it just so we could know?

maybeme2 · Feb 21, 2019

Can enabling IPv6 support cause the repeated system crashes and bootloops I am now experiencing on my nexus 5 using lineageos 14.1 with xposed?
Or should I look elsewhere?

[5.0+][ROOT][3.6.0] AFWall+ IPTables Firewall [28 AUG 2023]

Recognized Developer

Senior Member

Senior Member

Attachments

Senior Member

Attachments

Recognized Developer

Recognized Developer

Senior Member

Recognized Developer

Senior Member

Recognized Developer

Senior Member

Senior Member

Attachments

Recognized Developer

Recognized Developer

Senior Member

Inactive Recognized Contributor

New member

Senior Member

Recognized Contributor

Senior Member

Top Liked Posts