[APP][6.0+] NetGuard - No-root firewall

What are you mainly using NetGuard for?

  • Reducing data usage

    Votes: 420 30.8%
  • Saving battery

    Votes: 293 21.5%
  • Increasing privacy

    Votes: 731 53.6%
  • Blocking ads

    Votes: 884 64.8%

  • Total voters
    1,364
Search This thread

jawz101

Senior Member
Jun 4, 2009
1,551
797
Samsung Galaxy Tab S
ZTE Axon 7
How does the private dns work? Is it if I configure private DNS in regular Android, disable Internet filtering in NetGuard, then it just automatically routes through Android Private DNS but still gives me the ability to restrict per app network usage?

That may be the perfect setup. If I use NextDNS as my Android Private DNS provider I could use the Play Store version of NetGuard and still get ad blocking.
 

M66B

Recognized Developer
Aug 1, 2010
23,757
48,663
How does the private dns work? Is it if I configure private DNS in regular Android, disable Internet filtering in NetGuard, then it just automatically routes through Android Private DNS but still gives me the ability to restrict per app network usage?

That may be the perfect setup. If I use NextDNS as my Android Private DNS provider I could use the Play Store version of NetGuard and still get ad blocking.
Yes, this is possible with the latest version.
 

M66B

Recognized Developer
Aug 1, 2010
23,757
48,663
Thanks. It sounded like that's how it would work.

You may make an pop-up when you check the Internet filtering which says "Internet filtering overrides Android Private DNS.". That may make it easy to notice the change.
Let's first see if this works properly.
 

svendsvin

Senior Member
Oct 21, 2013
177
35
Lost in space
Please make sure you install the GitHub version. Ad blocking, etc is not available in the Play store version.

It's GitHub version. I never used Play Store.
Edit: I restored a GitHub version but apparently that's not good enough. I downloaded the GitHub version again and installed and now everything is back.
 
Last edited:

LoveWins

New member
Feb 25, 2021
4
0
Hello, Supporting user here, been using NetGuard for over a year and it's a perfect tool for controlling network access and filtering ads.

Something I've been noticing, when Filter Traffic is enabled, my Google Voice notifications seem to be delayed quite a bit, sometimes for 30 minutes for example. If I have a incoming message pending, I'll disable Filter Traffic and Voice will then immediately show the notification.

The filter is a necessity for ad blocking but I don't like the fact that my notifications are delayed. Is three a workaround for this issue?
 

M66B

Recognized Developer
Aug 1, 2010
23,757
48,663
Hello, Supporting user here, been using NetGuard for over a year and it's a perfect tool for controlling network access and filtering ads.

Something I've been noticing, when Filter Traffic is enabled, my Google Voice notifications seem to be delayed quite a bit, sometimes for 30 minutes for example. If I have a incoming message pending, I'll disable Filter Traffic and Voice will then immediately show the notification.

The filter is a necessity for ad blocking but I don't like the fact that my notifications are delayed. Is three a workaround for this issue?
Please make sure Google Play services isn't blocked, also not by an entry in the hosts file.
 

halilb1978

Member
Apr 7, 2018
24
0
@M66B Can you share your settings as an exported file here? For the ones who use stock rom ( no root). We just need push notifications,updates and sync work. I guess many people do not know what to block safely, must block or must not block things. Or it will be nice to see your block list as screen shots. Thank you.
 

DrummerMuppet

Senior Member
Jan 3, 2012
651
534
Caracas
@M66B Can you share your settings as an exported file here? For the ones who use stock rom ( no root). We just need push notifications,updates and sync work. I guess many people do not know what to block safely, must block or must not block things. Or it will be nice to see your block list as screen shots. Thank you.

As a rule of thumb: avoid blocking system apps unless you know what you're doing.
 
  • Like
Reactions: lukval and Ines*

M66B

Recognized Developer
Aug 1, 2010
23,757
48,663
@M66B Can you share your settings as an exported file here? For the ones who use stock rom ( no root). We just need push notifications,updates and sync work. I guess many people do not know what to block safely, must block or must not block things. Or it will be nice to see your block list as screen shots. Thank you.
Which apps I use is personal.
 
  • Like
Reactions: halilb1978

halilb1978

Member
Apr 7, 2018
24
0
Which apps I use is personal.
I only use google playstore, framework and services. All other google apps,options are removed,disabled,blocked. Everthing works fine. I blocked many apps and service packs on Netguard. 318 allowed and 107 blocked on Netguard. Traffic filter on. I wanted to learn what more i can block safely from system services. Try and learn???
 

LoveWins

New member
Feb 25, 2021
4
0
The hosts file is not managed by me:


Try to disable ad blocking.
I think that was my original inquiry if I'm understanding NetGuard options correctly, "Filter Traffic" is ad blocking?
When Filter Traffic is disabled notifications are instantaneous, with Filter Traffic enabled, notifications are delayed.

Hope I'm explaining this correctly.
 

DrummerMuppet

Senior Member
Jan 3, 2012
651
534
Caracas
Trying to learn more :)
I only use google playstore, framework and services. All other google apps,options are removed,disabled,blocked. Everthing works fine. (...) I wanted to learn what more i can block safely from system services. Try and learn???

There's nothing wrong with wanting to learn how stuff works. That's perfectly fine. You can start by checking the FAQ section to know what can be blocked and what should be left alone (there are at least 3 FAQs that address this in one way or another.)

You could also just block things at random / everything, see what breaks and then undo whatever you did to get things working again. "Try and learn" as you said, that's a completely valid strategy too.

We can't tell you exactly what to block because we don't know how you use your phone, what your goal is (is it more privacy? Experimentation? Reduce data usage?), nor which apps you have installed on it.
 

halilb1978

Member
Apr 7, 2018
24
0
There's nothing wrong with wanting to learn how stuff works. That's perfectly fine. You can start by checking the FAQ section to know what can be blocked and what should be left alone (there are at least 3 FAQs that address this in one way or another.)

You could also just block things at random / everything, see what breaks and then undo whatever you did to get things working again. "Try and learn" as you said, that's a completely valid strategy too.

We can't tell you exactly what to block because we don't know how you use your phone, what your goal is (is it more privacy? Experimentation? Reduce data usage?), nor which apps you have installed on it.
I do not use lot apps. I only need notifications and updates work. Telegram,Signal,Outlook,Excell,Twitter,Bixby Routines,Newpipe,Netguard,Samsung İnternet Browser,Duckduckgo,F-droid,Proton Vpn, Torrent Client,Google Play Store,Galaxy Store. If theses notifications and updates work stabil, i do not need more. I want to have more battery time.i even deleted my facebook,instagram and whatsapp accounts after their privacy update.
 

Top Liked Posts

  • There are no posts matching your filters.
  • 2
    I don't see that setting in Network Settings, unless the Lockdown Wi-Fi setting actually allows LAN access over the WiFi?
    You must first enable Subnet routing to be able to enable LAN access. Both settings are in the Network settings.
    1
    Hi Marcel,

    I've a problem with the import of a hosts file.
    The app seems to not accept rows with more than one alias inside.

    If there is only one site per line, it works fine.
    Es:
    0.0.0.0 n2019cov.000webhostapp.com

    This is an example of not working rows:
    0.0.0.0 n2019cov.000webhostapp.com webmail-who-int.000webhostapp.com 010sec.com 01mspmd5yalky8.com 0byv9mgbn0.com ns6.0pendns.org dns.0pengl.com ios.0pengl.com 0x4fc271.tk
    0.0.0.0 login.yahoo.com.0x4fc271.tk 0xf4a5.tk user-id.0xf4a5.tk change-password.yahoo.user-id.0xf4a5.tk login.yahoo.user-id.0xf4a5.tk 0xf4a54cf56.tk login.yahoo.user-id.0xf4a54cf56.tk 12724.xyz 15438.xyz

    It would be nice if it could accept multi-aliased lines as well.

    Thanks very much!
    Kira

    I will put this on my to do list, but it will be low priority.
    1
    Hello Marcel, I have been seeing issues with One UI 3.1 (Android 11) in conjunction with NetGuard 2.295. Not sure if it has to do with NetGuard, Android, or how NetGuard runs on Android. Please take a look at the adb logs attached.

    In particular, two extra lines are spammed several times per second, from the package
    com.google.android.permissioncontroller (uid 10266 in this case).

    Code:
    04-01 11:55:44.030   614  1836 E audit   : avc:  denied  { find } for pid=29989 uid=10266 name=tethering scontext=u:r:permissioncontroller_app:s0:c10,c257,c512,c768 tcontext=u:object_r:tethering_service:s0 tclass=service_manager permissive=0
    04-01 11:55:44.030   614  1836 I servicemanager: tethering : getService has failed, permission denied.

    Once the firewall is enabled, these lines in the log do not stop spamming even if the firewall is disabled afterwards.

    I have also seen this in One UI 2.1 (Android 10), as well as Google's Android 11 on a Pixel 3.
    Do you know what causes this?
    This is not directly related to NetGuard.
    1
    Hi all,

    Do you think that we can trust Android functionality allowing us to forbid directly Wi-Fi and Data connections for each application in settings ?

    Can we compare it with NetGuard ? It seems to be similar but can we trust Android as an outgoing firewall ?

    Thanks in advance for your replies.
    Standard Android doesn't have this.

    I can't say if it is reliable because I don't know how it works.
    1
    Did you enable filtering in the advanced settings.

    Please see also this FAQ:

    https://github.com/M66B/NetGuard/blob/master/FAQ.md#user-content-faq54
    Many thanks for the info, after enabling filtering, the SOCKS5 proxy options got enabled.
    In fact I had read that link before but didn't find the "enable filtering" option mentioned there,

    Thanks again.

    Also another detail that's not mentioned is do I need to enable VPN mode in Orbot after opening it and pressing the start button, or just leave it in "non vpn" mode?

    I was running with only Orbot in VPN mode since I couldn't get Netguard to use the SOCKS5 options.
    Now I would use it with Netguard (Socks5 Proxy) + Orbot (listening on 9050)

    in this mode will all system requests go thru Tor?
    Are there any chances of an IP or DNS leak?

    Can I set the Android VPN setting to Netguard and also there is another setting for "VPN always on"?
  • 339
    ic_launcher.png


    NetGuard provides simple and advanced ways to block access to the internet - no root required.
    Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection.

    Blocking access to the internet can help:
    • reduce your data usage
    • save your battery
    • increase your privacy

    Features:
    • Simple to use
    • No root required
    • 100% open source
    • No calling home
    • No tracking or analytics
    • No advertisements
    • Actively developed and supported
    • Android 5.1 and later supported
    • IPv4/IPv6 TCP/UDP supported
    • Tethering supported
    • Optionally allow when screen on
    • Optionally block when roaming
    • Optionally block system applications
    • Optionally forward ports, also to external addresses (not available if installed from the Play store)
    • Optionally notify when an application accesses the internet
    • Optionally record network usage per application per address
    • Optionally block ads using a hosts file (not available if installed from the Play store)
    • Material design theme with light and dark theme

    PRO features
    • Log all outgoing traffic; search and filter access attempts; export PCAP files to analyze traffic
    • Allow/block individual addresses per application
    • New application notifications; configure NetGuard directly from the notification
    • Display network speed graph in a status bar notification
    • Select from five additional themes in both light and dark version

    There is no other no-root firewall, except for clones, offering all these features.

    This XDA thread is about using the latest version of NetGuard.
    Off topic comments are allowed as long they are related to NetGuard and are in the general interest of the followers of this thread.

    Discussion of purchases is not allowed here, please contact me via here instead.

    NetGuard is being maintained and supported, but new features won't be added anymore.

    For ad blocking, see here. Ad blocking is provide "as-is".

    More information on Github:

    Downloads:

    Screenshots:
    101-main.png
    102-main-details.png

    103-main-access.png
    108-notifications.png


    For more screenshots, see here.






    XDA:DevDB Information
    NetGuard, App for all devices (see above for details)

    Contributors
    M66B
    Source Code: https://github.com/M66B/NetGuard/


    Version Information
    Status: Stable

    Created 2015-10-25
    Last Updated 2020-03-11
    25
    25
    I have just released stable version 2.39.

    Changelog/download
    https://github.com/M66B/NetGuard/releases/tag/2.39

    This version will be available in the Play store after Google's approval.

    Usage data sharing has been removed from this version.

    The future of this project depends on the general support for this project. You can for example write something positive here or in the Play store, press the thanks button, donate something, purchase a pro feature or contribute translations or source code.
    17
    I have just released beta version 2.268

    Changelog/download:
    https://github.com/M66B/NetGuard/releases

    This version adds a setting for a domain name to use to validate the internet connection. The default is www.google.com. You could for example change this into www.opendns.com.
    17
    I have just released beta version 2.21.

    Changelog/download:
    https://github.com/M66B/NetGuard/releases/tag/2.21

    This version will be available as beta version in the Play store after Google's approval.
Our Apps
Get our official app!
The best way to access XDA on your phone
Nav Gestures
Add swipe gestures to any Android
One Handed Mode
Eases uses one hand with your phone