[APP][6.0+] NetGuard - No-root firewall

What are you mainly using NetGuard for?

  • Reducing data usage

    Votes: 414 30.8%
  • Saving battery

    Votes: 291 21.6%
  • Increasing privacy

    Votes: 717 53.3%
  • Blocking ads

    Votes: 876 65.1%

  • Total voters
    1,345

iwanttoknow

Senior Member
Jun 21, 2016
423
89
28
That depends:


Hi Marcel,

Thanks for your reply. You will find below informations you requested in your link

https://github.com/M66B/NetGuard/#user-content-compatibility

Provider in France : SFR
MCC : 208
MNC : 08, 09, 10, 11
IP address ranges : there are several of them
https://www.nirsoft.net/countryip/fr.html

Could you add exception for this provider ?


You also wrote :
As an alternative you can enable the option 'Disable on call', which is available since version 2.113.

What are consequences for my privacy if I do that ? Will my device no longer be protected during calls ?
 

M66B

Recognized Developer
Aug 1, 2010
23,513
48,205
263
Hi Marcel,

Thanks for your reply. You will find below informations you requested in your link

https://github.com/M66B/NetGuard/#user-content-compatibility

Provider in France : SFR
MCC : 208
MNC : 08, 09, 10, 11
IP address ranges : there are several of them
https://www.nirsoft.net/countryip/fr.html

Could you add exception for this provider ?


You also wrote :
As an alternative you can enable the option 'Disable on call', which is available since version 2.113.

What are consequences for my privacy if I do that ? Will my device no longer be protected during calls ?
Several of them is an understatement. It are too many to add to NetGuard.

Disable on call means that all traffic will be allowed.
 

iwanttoknow

Senior Member
Jun 21, 2016
423
89
28
Several of them is an understatement. It are too many to add to NetGuard.

Disable on call means that all traffic will be allowed.
"Disable on call means that all traffic will be allowed."

Sorry Marcel, I want to be sure I understood correctly : by doing this, does that mean that NetGuard is disabled during calls, as if it was not installed on my device ?
 

comdx

Member
Dec 23, 2014
9
1
23
Hi,
i do not get call notifications from telegram and signal while display is off and also when the apps are not opened.

Both apps use their own background notification service, because i disabled google play service.

I found out that this problem is caused by the Datatraffic filtering.
When i deactivate Datatraffic filtering, the call notifications work for both apps.

Maybe there are some entries in the hosts file, that block background notification services of telegram and signal.

I tried easylists hosts file, but with same results.

Or maybe there is another reason why it is not working with activated Datatraffic filtering.

Is it somehow possible to get it working, besides deactivating Datatraffic filtering?
Because i still want netguard to block ads, but also working call notifications from telegram and signal at the same time.

Thank you
 

M66B

Recognized Developer
Aug 1, 2010
23,513
48,205
263
Hi,
i do not get call notifications from telegram and signal while display is off and also when the apps are not opened.

Both apps use their own background notification service, because i disabled google play service.

I found out that this problem is caused by the Datatraffic filtering.
When i deactivate Datatraffic filtering, the call notifications work for both apps.

Maybe there are some entries in the hosts file, that block background notification services of telegram and signal.

I tried easylists hosts file, but with same results.

Or maybe there is another reason why it is not working with activated Datatraffic filtering.

Is it somehow possible to get it working, besides deactivating Datatraffic filtering?
Because i still want netguard to block ads, but also working call notifications from telegram and signal at the same time.

Thank you
Please check the global log for things which are blocked and shouldn't be blocked.

Are you very sure that these apps use their own notification service? Basically, this is impossible on standard Android. All apps must use Google Play services for this.
 

comdx

Member
Dec 23, 2014
9
1
23
I can not access the global log, because i do only use the free version from f-droid.
Maybe i am wrong here if support here is only for pro version, but f-droid app linked me to this forum when i clicked on "problem".
If i am wrong here, than please accept my sorry.

I am no expert, so i thought that the services used by telegram and signal are independant from google play service, because they still work with google play service deactivated and i got no error message to activate google play service for them to work.

The Telegram one is called "Push service"
For Signal it is simply called "Backgroundconnection"

Both of them are active even when i do not have the Apps opened.

Again, sorry for taking your time.

Thank you
 

M66B

Recognized Developer
Aug 1, 2010
23,513
48,205
263
I can not access the global log, because i do only use the free version from f-droid.
Maybe i am wrong here if support here is only for pro version, but f-droid app linked me to this forum when i clicked on "problem".
If i am wrong here, than please accept my sorry.

I am no expert, so i thought that the services used by telegram and signal are independant from google play service, because they still work with google play service deactivated and i got no error message to activate google play service for them to work.

The Telegram one is called "Push service"
For Signal it is simply called "Backgroundconnection"

Both of them are active even when i do not have the Apps opened.

Again, sorry for taking your time.

Thank you
There is support for everybody.

Push messages without Play services will work reliable on modified Android versions only.
 
  • Like
Reactions: comdx

comdx

Member
Dec 23, 2014
9
1
23
There is support for everybody.

Push messages without Play services will work reliable on modified Android versions only.
Than maybe that is the problem, i do not use smartphones with modified Android version ( not modified by me).
I have two smartphones and both with Android version provided by the smartphone manufacturers.
Both have the problem i mentioned.

First Smartphone is Asus Zenfone 6 with Android 11 (ZenUI 7)
Second Smartphone is Nokia 5.4 with Android 10 (Android One)

Looks like i will keep Datatraffic filtering disabled, so call notifications for Telegram and Signal will come through.

Thank you for your time and help.
 

giokou

Senior Member
May 19, 2009
495
77
58
Athens
As of yesterday I can't select any of the first 4 settings in backup, because they are greyed out. Any ideas??
I want to import an extended hosts file and the app doesn't let me!! I can only download the app's default hosts file.
 
Last edited:

M66B

Recognized Developer
Aug 1, 2010
23,513
48,205
263
  • Like
Reactions: giokou

tbv2005

Senior Member
Aug 3, 2011
232
84
48
Version 2.292 beta is available on GitHub now and in the Play store test program after Google's approval.

Changelog/download:
https://github.com/M66B/NetGuard/releases
Could someone else please check if Add filtering is still working for him with this version. Just updated and now nothing is blocked anymore (except hopo6 and icmp). Rebooted, still the same. Redownloaded hostfile (standard one), rebooted, still the same. 2 custom dns servers are set (1.1.1.1 and 8.8.8.8)
 

codlord

Member
Nov 13, 2018
12
0
1
Could someone else please check if Add filtering is still working for him with this version. Just updated and now nothing is blocked anymore (except hopo6 and icmp). Rebooted, still the same. Redownloaded hostfile (standard one), rebooted, still the same. 2 custom dns servers are set (1.1.1.1 and 8.8.8.8)
I just updated to 2.292 (sideloaded, not play store) and there does now seem to be a problem with filtering for me. Filtering/logs used to mostly show the dns address but now seemingly most (not all) new addresses just show an IP (ipv4 or ipv6 format) or an address of a CDN like akamaitechnologies or amazonaws.

And as another example of the issue, a website I own has it's DNS name "allowed" in Netguard, but going to it now in a browser shows in Netguard as an attempt on the dns name of the hosting provider, as if it's done a new DNS lookup and found the hosting provider name rather than what it used to do and allow it. Of course the IP addresses of the two dns entries are the same, but this is new behaviour since this release.

It's like it's not doing proper DNS lookups any more. I tried fiddling with settings but could not get it to go back to how it worked (correctly) before.

A summary of my settings:
Android 10:
Private DNS is OFF
Always-on VPN is ON
Block connections without VPN is OFF

NetGuard Network Options:
Subnet routing ON
Allow LAN access ON
Lockdown Wi-Fi ON
Lockdown mobile ON
All other Network options OFF
Netguard Advanced Options:
Track network usage OFF
Use SOCKS5 proxy OFF
All other Advanced Options ON
 

tbv2005

Senior Member
Aug 3, 2011
232
84
48
@tbv2005 @codlord can you please contact me for a test version via here?

https://contact.faircode.eu/?product=netguard+

Edit: can you please try the "a" version from here:

https://github.com/M66B/NetGuard/releases/tag/2.292

Please let me know if it works.
You're too fast as always 😉. A version seems to work fine after a first check of 2min (not sure f it matters I reverted back to 291 before installing the A version).

Thanks for the quick fix (at least seems fixed for me).