[APP][6.0+] NetGuard - No-root firewall

What are you mainly using NetGuard for?

  • Reducing data usage

    Votes: 414 30.9%
  • Saving battery

    Votes: 290 21.6%
  • Increasing privacy

    Votes: 713 53.2%
  • Blocking ads

    Votes: 873 65.1%

  • Total voters
    1,340

Fyensta

Member
Jan 27, 2016
20
7
33
Could you please tell me what does port forwarding under advanced options do, when "nobody" is selected for destination app?

Can I use this to forward a port to an application on Windows computer that is using phone's internet connection by Mobile Hotspot?
 

M66B

Recognized Developer
Aug 1, 2010
23,409
48,019
263
Could you please tell me what does port forwarding under advanced options do, when "nobody" is selected for destination app?

Can I use this to forward a port to an application on Windows computer that is using phone's internet connection by Mobile Hotspot?
You can use it for forwarding on the device only.
 

elsquare

Member
Dec 22, 2014
36
7
28
@M66B - Hi Marcel, once again : so much thanks for your app!
On the issue of netguard not working /blocking all traffic on (some if not most, if not all) LineageOS ROMs as per your FAQ#51, there might be some hope.

it has just now been addressed and apparently resolved for klte and hlte devices.

I took the liberty to alert the devs behind the devices I'm dealing with (ks01ltexxx / S4 and gts210xxx / Tab S2) of this development. Hope they can bring it over to their roms.

So just that you've heard of... in case you had not, and / or they might get in touch.
 

iwanttoknow

Senior Member
Jun 21, 2016
421
89
28
Hi all,

I have nowhere found any indication that Karma firewall was open source... ;-)

It's up to you. My choice has been made for a long time and thanks to Marcel.
 

ignoramous

Member
Sep 22, 2012
33
11
28
I was wondering if it was imaginable to use a domain name for the SOCKS tunnel, as many VPN providers balance load across different IPs behind a domain name, therefore also increasing anonymity.
Unsure if this approach increases anonymity, but there do exists new-age dVPNs that support such a use-case. A couple that I know of (not an endorsement):

1. https://orchid.com/

2. https://mysterium.network/
 

M66B

Recognized Developer
Aug 1, 2010
23,409
48,019
263
I shouldn't do that, but I have been reading Play store reviews of NetGuard. Too many reviews are pretty disappointing to say the least. People are often harsh and even rude and don't give me any chance.

There are good reasons why independent developers are giving up, which also means that big companies are slowly taking over. Big companies that often don't take you and your privacy seriously. Cause and effect ...
 
  • Like
Reactions: Primokorn

Primokorn

Recognized Contributor / Themer
Nov 17, 2012
11,418
7,672
253
Hello Marcel,
Hope you are doing well 👍
Could you add an option to let us decide if the notification actions ALWAYS allow/block the connections or ONLY when the screen is on.
I notice that I often only allow when the screen is on.
 

M66B

Recognized Developer
Aug 1, 2010
23,409
48,019
263
Hello Marcel,
Hope you are doing well 👍
Could you add an option to let us decide if the notification actions ALWAYS allow/block the connections or ONLY when the screen is on.
I notice that I often only allow when the screen is on.
I am generally fine, thanks.

Given the limited support for this project and the daily decreasing average Play store rating, I am not really motivated to add new features, sorry.
 
  • Like
Reactions: fraschi51

elsquare

Member
Dec 22, 2014
36
7
28
@M66B - Hi Marcel, once again : so much thanks for your app!
On the issue of netguard not working /blocking all traffic on (some if not most, if not all) LineageOS ROMs as per your FAQ#51, there might be some hope.

it has just now been addressed and apparently resolved for klte and hlte devices.

...
Tested an updated LOS 18.1 build for my ks01ltexx/S4 for which kyasu said mentioned changes from the klte*/hlte* were also applied. Can confirm that with that most recent LOS for those S4, Netguard now works (at least as long "filter traffic" in "advanced options" is OFF. If ON, it breaks.

What is odd, too (?): in the log in netguard, I do not see any UUIDs or app icons and only ever-repeating entries from one or two sources apparently repeating over and over again on different ports. I once had app icons and uuids for a moment, but when I went back into the log a few moments later it was gone again. Can't reproduce how I managed to get it to show app icons/uuids, no clue. Any thoughts?
 

testoviron2

New member
Feb 16, 2021
1
0
1
Hey dear @M66B

I have some Xiaomi phone with MIUI 11.05 and there, there is a option to clone app.
I did this and this app doesn't have internet connection obviously due to my NetGuard settings.
If I put an option to inform me about particular app internet access, the notification correctly shows the app name, tho when I click it, the Netguards opens with the ID of the app putted already in the search bar, tho the list of app is blank and therefore I can't allow this app to have access to the internet.
This app also can't be found on the list by any means.
Any ideas?
 

M66B

Recognized Developer
Aug 1, 2010
23,409
48,019
263
Hey dear @M66B

I have some Xiaomi phone with MIUI 11.05 and there, there is a option to clone app.
I did this and this app doesn't have internet connection obviously due to my NetGuard settings.
If I put an option to inform me about particular app internet access, the notification correctly shows the app name, tho when I click it, the Netguards opens with the ID of the app putted already in the search bar, tho the list of app is blank and therefore I can't allow this app to have access to the internet.
This app also can't be found on the list by any means.
Any ideas?
Try to clone NetGuard too.

Note that this is not a supported use case:

https://github.com/M66B/NetGuard#user-content-compatibility
 

dev_amol

New member
Feb 18, 2021
2
0
11
HI @M66B,
I am using netguard on Google pixel 2 (Android 11). Netguard does not allow to use only mobile data for specific apps when WiFi is connected but wifi interface is blocked in netguard app.

I have checked out Netguard repository from github and trying to understand the design. I see when WiFi is enable and WiFi is allowed through Netguard, Netguard simply adds it to disallowed app list. Same applies when only mobile data is enabled and mobile data is allowed through netguard app.

However when both the interfaces [mobile and wifi] is enabled it does not work as expected.
 

svendsvin

Senior Member
Oct 21, 2013
164
30
58
Lost in space
Filtering traffic is indeed a very effective way to handle apps. Unfortunately I can not send MMS when Filter Traffic is enabled. The only workaround I found is to install Karma Firewall with everything blocked except messaging and when I need to send an MMS I enable KF. This of course disables NetGuard but everything is blocked and when the MMS is send I enable NG which in turn disables KF and nothing has left my phone that should not. It all works quite smooth but a wee elaborate.
It is unfortunate that Karma Firewall is not open source as someone has pointed out. I removed it not because of this but because I found out that the culprit here is not NetGuard but MIUI’s messaging app. After changing messaging app there is no issue with sending MMS.
 

M66B

Recognized Developer
Aug 1, 2010
23,409
48,019
263
HI @M66B,
I am using netguard on Google pixel 2 (Android 11). Netguard does not allow to use only mobile data for specific apps when WiFi is connected but wifi interface is blocked in netguard app.

I have checked out Netguard repository from github and trying to understand the design. I see when WiFi is enable and WiFi is allowed through Netguard, Netguard simply adds it to disallowed app list. Same applies when only mobile data is enabled and mobile data is allowed through netguard app.

However when both the interfaces [mobile and wifi] is enabled it does not work as expected.
You cannot direct apps to use WiFi or mobile data. Although that isn't entirely true anymore, there is basically just one data connection for all apps on Android.

You can block/allow this specific connection for individual apps only.
 

dev_amol

New member
Feb 18, 2021
2
0
11
You cannot direct apps to use WiFi or mobile data. Although that isn't entirely true anymore, there is basically just one data connection for all apps on Android.

You can block/allow this specific connection for individual apps only.
Thanks for the quick response @M66B . I can see there are apps e.g. Speedify which claims that they achieve the routing via mobile data or WiFi as per user choice even if both the WiFi and mobile interfaces are enabled. How true is that?