[APP][6.0+] NetGuard - No-root firewall

[M66B]

Version 2.294 is available on GitHub now and in the Play store test program after Google's approval.

Changelog/download:
https://github.com/M66B/NetGuard/releases

@orgshooter I have reverted part of the change in version 2.293, maybe that helps in your case. I am not convinced yet that the changes are the cause for your problem though.

 

[orgshooter]

@M66B
I have the same settings in the 2.290 as with the 2.293 from yesterday.

Now the consumption is better.

 

[M66B]

@M66B
I have the same settings in the 2.290 like with the 2.293 from yesterday
View attachment 5237475
Now the consumtion is better.

I think it is too early to tell this already.

 

[user9999900]

Suggestion:
A - integrate wireguard support, import .conf
B - Block all outbond tcp 80
C - If using secure DNS, block all udp 53

thanks,

 

[M66B]

Suggestion:
A - integrate wireguard support, import .conf
B - Block all outbond tcp 80
C - If using secure DNS, block all udp 53

thanks,

If there was enough support for this project and the average Play store rating wasn't going down about each and every day, I would consider adding this.

 

[AndroAlex]

That is really sad to read, but especially these * beep * reviews from users on the GPS who believe a firewall AND ad blocker would be ready-made for their own needs without their own user-work.
For me, NetGuard is the most informative and therefore the best open source (!) Firewall there is for this * beep * Android, which is owned more and more by Google anyway.

 

[M66B]

That is really sad to read, but especially these * beep * reviews from users on the GPS who believe a firewall AND ad blocker would be ready-made for their own needs without their own user-work.
For me, NetGuard is the most informative and therefore the best open source (!) Firewall there is for this * beep * Android, which is owned more and more by Google anyway.

I am afraid it will get worse first, until the EU, etc are going to enforce things, but this is unfortunately a very slow process.

I am afraid more independent developers will give up because developing apps this way is rather frustrating.

I will keep maintaining and supporting NetGuard, as I have been doing for over 5 years already, but I am currently not motivated to put energy in new features.

 

[xdawallah]

Can you please help me to understand Netguard's output and behaviour?
I am trying to use the Eddy app from eddy-sharing.de
I can load the map, but the login fails with "unknown error occurred". The password works on another phone with this app.

My questions:
1. Why does the URL eddy-sharing.frontend.fleetbird.eu occur in the protocol (first screenshot), but the rule is green (second screenshot)? Is the URL now allowed or not?
2. T4 android.googleapis.com is shown in red ,but with a green checkmark. Is it now allowed or not?
3. T4 connectivitycheck.gstatic.com is shown in red, though I selected the WiFiin green in the upper right corner. Why? Is it now allowed or not?
4. Is it an issue that the phone currently has only WiFi enabled, but no sim card inserted?

Looking forward to some enlightenment.
Thanks.

Xdawallah

 

[M66B]

Can you please help me to understand Netguard's output and behaviour?
I am trying to use the Eddy app from eddy-sharing.de
I can load the map, but the login fails with "unknown error occurred". The password works on another phone with this app.

My questions:
1. Why does the URL eddy-sharing.frontend.fleetbird.eu occur in the protocol (first screenshot), but the rule is green (second screenshot)? Is the URL now allowed or not?
2. T4 android.googleapis.com is shown in red ,but with a green checkmark. Is it now allowed or not?
3. T4 connectivitycheck.gstatic.com is shown in red, though I selected the WiFiin green in the upper right corner. Why? Is it now allowed or not?
4. Is it an issue that the phone currently has only WiFi enabled, but no sim card inserted?

Looking forward to some enlightenment.
Thanks.

Xdawallah

Please see this FAQ for an explanation:

M66B/NetGuard

A simple way to block access to the internet per app - M66B/NetGuard

github.com

 

[brwgamer]

Hi, I'm facing a network problem on Android 10 that happens only randomly:

java.net.SocketTimeoutException: failed to connect to www.mydomain.com/81.NN.NN.NN (port 443) from /10.9.1.178 (port 49640) after 10000ms

In my Android App, in the method that performs the https connection I have this line of code:

java.security.Security.setProperty("networkaddress.cache.ttl" , "0");

With my previous phone with Android 6 the same code works without problems.

I've done lots efforts to try to discover the reason of that error.
Recently I tried to run my code after disabled NetGuard: sometimes my app immediately works, sometimes it works after some minutes, sometimes after reinstalling my app (always from Android Studio), sometimes while NetGuard is active normally.

Today while the problem was happening I tried to leave NetGuard active, I activated the airplane mode, then disabled airplane mode and my app successes on connecting without the need to reopen/reinstall it and without closing NetGuard.

Maybe the problem is related to the caching DNS TTL? Does my line of code is ignored or wrong?

How can I set properly NetGuard?

I'm using NetGuard to block all traffic for applications that I cannot uninstall, so I need it, I'll use it since years and it worked always fine!

Here you can find lots other info:
https://stackoverflow.com/questions/66303303/http-request-fails-even-if-the-connection-is-active

Thanks for your work and for your support!

 

[M66B]

Hi, I'm facing a network problem on Android 10 that happens only randomly:

java.net.SocketTimeoutException: failed to connect to www.mydomain.com/81.NN.NN.NN (port 443) from /10.9.1.178 (port 49640) after 10000ms

In my Android App, in the method that performs the https connection I have this line of code:

java.security.Security.setProperty("networkaddress.cache.ttl" , "0");

With my previous phone with Android 6 the same code works without problems.

I've done lots efforts to try to discover the reason of that error.
Recently I tried to run my code after disabled NetGuard: sometimes my app immediately works, sometimes it works after some minutes, sometimes after reinstalling my app (always from Android Studio), sometimes while NetGuard is active normally.

Today while the problem was happening I tried to leave NetGuard active, I activated the airplane mode, then disabled airplane mode and my app successes on connecting without the need to reopen/reinstall it and without closing NetGuard.

Maybe the problem is related to the caching DNS TTL? Does my line of code is ignored or wrong?

How can I set properly NetGuard?

I'm using NetGuard to block all traffic for applications that I cannot uninstall, so I need it, I'll use it since years and it worked always fine!

Here you can find lots other info:
https://stackoverflow.com/questions/66303303/http-request-fails-even-if-the-connection-is-active

Thanks for your work and for your support!

Sorry, this forum is not for helping you with development problems.
Android resolves domain names on behalf of all apps, so this is not related to NetGuard.

 

[penroid]

I'm having issues when using netguard vpn dns 1.1.1.1 and 8.8.8.8. All cellular netguard filtered traffic will not work but on wifi everything works. Otherwise removing 8.8.8.8 it also works.

 

[xdawallah]

Please see this FAQ for an explanation:

M66B/NetGuard

A simple way to block access to the internet per app - M66B/NetGuard

github.com

Hi Marcel,

the Text in the FAQ

NetGuard blocks traffic based on the IP addresses an application is trying to connect to. If more than one domain name is on the same IP, they cannot be distinguished. If you set different rules for 2 domains which resolve to the same IP, both will be blocked.

refers to rules for a single appID, right?
So, if I block firebase for my app, googleapis.com might also be blocked. But it is still independent of blocking firebase for other apps.
I now allowed all Google related URLs, but the eddy-sharing.frontend.fleetbird.eu has no IP range in common with the rest of ruled for this app.
I still do not understand the log entry for this URL in the protocol.
And this seems to be the main reason for the failure.

Question 4, I answered by myself. Of course, there was no difference, after adding a SIM to the phone. The WiFi rules apply.

 

[M66B]

I'm having issues when using netguard vpn dns 1.1.1.1 and 8.8.8.8. All cellular netguard filtered traffic will not work but on wifi everything works. Otherwise removing 8.8.8.8 it also works.

Your mobile internet provider doesn't seem to allow these DNS servers.

 

[M66B]

Hi Marcel,

the Text in the FAQ



refers to rules for a single appID, right?
So, if I block firebase for my app, googleapis.com might also be blocked. But it is still independent of blocking firebase for other apps.
I now allowed all Google related URLs, but the eddy-sharing.frontend.fleetbird.eu has no IP range in common with the rest of ruled for this app.
I still do not understand the log entry for this URL in the protocol.
And this seems to be the main reason for the failure.

Question 4, I answered by myself. Of course, there was no difference, after adding a SIM to the phone. The WiFi rules apply.

Looking again at the screenshots I don't understand your problem. eddy-sharing.frontend.fleetbird.eu is just allowed on both screenshots.

 

[brwgamer]

Sorry, this forum is not for helping you with development problems.
Android resolves domain names on behalf of all apps, so this is not related to NetGuard.

If NetGuard show a notify saying this:

Tentativo di accesso internet
05 19:06 mil04s41-in-f10.1e100.net
05 19:06 myuser.webapps.net

It means that NetGuard block these connections?

 

[M66B]

If NetGuard show a notify saying this:


It means that NetGuard block these connections?

I can't tell because there is more information shown, which is needed for an answer.

 

[brwgamer]

I can't tell because there is more information shown, which is needed for an answer.

What do you mean?

Besides my app name, these are the only lines of text shown in the notification.

 

[M66B]

What do you mean?

Besides my app name, these are the only lines of text shown in the notification.

View attachment 5241063

Red = blocked.

 

[brwgamer]

Red = blocked.

Then there may be a problem because my app is not one of those blocked on NetGuard at all. I've already read the FAQ and have already checked that NetGuard isn't set to whitelist and other checks.