yashsingh1/xdaforums huggingface dataset:
[Xposed Framework Modules] defim:
This is possible...

The doante app generated the files in files/cached/* which is send to main app and saved into files/. This is done by broadcast and file provider. You could check if file are in both places. The sending could fail fore some reasons, eg if the signatures are not okay. There are Xposed modules which could disturb this mechanism.

The hint about greenify i got by mail from a user, i dont know exactly which option is was
[Xposed Framework Modules] w0rinal:
I'm having similar issues with your 3.5.x apps, the ones with version 3.1.x are working fine

I put the donator file to /data but it didn't work and when importing the file manually the 3.5.x apps force stopped

This is a log of BM but the error is the same for the other apps (and the thread preview showed me you were taking about the donator issues so I'm posting it in the LW thread)

android.util.SuperNotCalledException: Activity {de.defim.apk.bootmanager/de.defim.apk.bootmanager.donate.Import} did not call through to super.onCreate()
at android.app.ActivityThread.performLaunchActivity(ActivityThread.java:2153)
at android.app.ActivityThread.handleLaunchActivity(ActivityThread.java:2236)
at android.app.ActivityThread.access$800(ActivityThread.java:138)
at android.app.ActivityThread$H.handleMessage(ActivityThread.java:1199)
at android.os.Handler.dispatchMessage(Handler.java:102)
at android.os.Looper.loop(Looper.java:136)
at android.app.ActivityThread.main(ActivityThread.java:5034)
at java.lang.reflect.Method.invokeNative(Native Method)
at java.lang.reflect.Method.invoke(Method.java:515)
at com.android.internal.os.ZygoteInit$MethodAndArgsCaller.run(ZygoteInit.java:795)
at com.android.internal.os.ZygoteInit.main(ZygoteInit.java:611)
at de.robv.android.xposed.XposedBridge.main(XposedBridge.java:132)
at dalvik.system.NativeStart.main(Native Method)

When clicking the donator file it's asking which app I want it to be opened with. When selecting PA (v3.1.1) the "import file?" dialog pops up but when selecting LW or BM these apps instantly force stop.

Regards

[size=-4]Sent from my Boeffla powered Slim (4.4.4, AOSP based) GT-I9300[/size]

---------- Post added at 12:40 PM ---------- Previous post was at 11:49 AM ----------

I went back to v3.1.x, now every of your apps is pro version again.

Obviously you messed things up a little in 3.5.x :D

[size=-4]Sent from my Boeffla powered Slim (4.4.4, AOSP based) GT-I9300[/size]
[Xposed Framework Modules] defim:
[MENTION=5856428]w0rinal[/MENTION]

- Import dialog is broken :( I dId many internal changes and not noticed it. But if you import with old, new works. Or copy manually and set permssions+user+group+secontext.

- It's possible that /data did not work anymore because you switched to Lollipop? Because enforced SElinux restrictions

[MENTION=303421]Yom[/MENTION]: I've now also reports "Lpatcher" causes problem, could you check its options?
[Xposed Framework Modules] Yom:
Dear sir, I resent the implication that I'd be running such an immoral tool as LuckyPatcher! I am a pilar of my community! A moral bastion of morality in these immoral times, the last defense against moral bankruptcy! I am a very good bad example to follow!

But yes, it is what's causing the problem with the license for your apps ;)

I did a clean flash, only XPosed, your apps and LP. If I enable LP in XPosed, then LW and BM (maybe others) show as non-donator. I disable the LP XPosed module, and voila! your apps are licensed. Any chance you could please look into this and fix please? (previous versions of your apps had no issues with LP)

Thanks for your awesome apps!
[Xposed Framework Modules] defim:
Thanks [MENTION=303421]Yom[/MENTION], most time i get such only be mail, sent with tor-hidden-mail and so on...

You know which option caused the problem? So i could tell it others... The donator says okay and the app did not recognize it?

I think it is something with the app signature handling of Android, because the provider i use can only be accesed by apps.

I've ran Lpatcher only within an emulator, because with root+Xposed it could confuse the whole system and i dont want to factory reset.

I understand its bad that now other apps could not be used the "regular" way. But I think Lpatcher will get an update soon ^^ Afaik the auther is also here on XDA, coding style tells much.

I hope you understand that i needed to change things a little, because the previously 1-touch hack was to easy
[Xposed Framework Modules] Yom:
I tried changing settings on the LP XPosed module and in the app to no avail. The Donator says License Validated/Okay every time I open it. The apps still do not see it. I do understand you need to keep your licenses secure, and your apps are SO GOOD that I had no qualms paying for the full Donator. Maybe there is another way you can have your apps validate the presence of a legitimate Donator app? Is there any data I can get form my phone that will help you debug?

BTW, you can flash XPosed and test with LP's module. When done, just flash your ROM again without wiping data, or you can make a nandroid backup and then just restore the System partition when you are done testing. Either way you will be returning your phone to default state without doing a factory reset.
[Xposed Framework Modules] w0rinal:
I tried copying the file to /sdcard, /sdcard1 (internal and external sdcard) and /data, set permissions to many combinations but none worked.

I went back to KK, eye candy isn't as much important to me as stability is.

I also went away from GApps and to be able to use my paid apps I'm using LP for these one's as well (solid explorer, TB, secure settings, etc) :banghead:

Didn't think this app could have caused these problems, former versions of your apps used to work

Sorry for the inconvenience. I will try the updated versions and report back about the results

[size=-4]Sent from my Boeffla powered Slim (4.4.4, AOSP based) GT-I9300[/size]

---------- Post added at 07:21 PM ---------- Previous post was at 07:06 PM ----------

After Testing a little I now assume LP's xposed feature "support patch for in-app and LVL emulation" is causing the problem.

Import dialog seems to be fixed (only tried it with BM by now)

[size=-4]Sent from my Boeffla powered Slim (4.4.4, AOSP based) GT-I9300[/size]

---------- Post added at 07:32 PM ---------- Previous post was at 07:21 PM ----------

Nah, apparently it's "signature verification status always true".

[size=-4]Sent from my Boeffla powered Slim (4.4.4, AOSP based) GT-I9300[/size]
[Xposed Framework Modules] defim:
Thanks! Seems all reported problems are caused by other things ^^
[Xposed Framework Modules] Yom:
Cool... is there any way you could adjust the donator app so it works along with LP?
[Xposed Framework Modules] defim:
http://xdaforums.com/showpost.php?p=61407365&postcount=393
[Xposed Framework Modules] nicesoni_ash:
Hi [MENTION=4501300]defim[/MENTION]

This is abt lighting wall module. I allowed all system apps and processes along with several other data apps, however whenever I try to download anything from play store or manually from any site or using amy app, progress bar keep showing in process but nothing gets downloaded. Can you suggest what could be wrong?

_____________

Sent from my "GT-I9300/1+1" powered by Carbon Rom & Boeffla/ak Kernel

Fueled by 7000mAh ZeroLemon Battery
[Xposed Framework Modules] defim:
[MENTION=4659955]nicesoni_ash[/MENTION]: You could enable loggin in the app and chekc the logfile
[Xposed Framework Modules] chrisb906:
Would this app along with adaway and unbeloved installed together cause any issues?
[Xposed Framework Modules] nicesoni_ash:
No, it won't. I have been using all three of them.

Sent from my "GT-I9300/1+1" powered by Carbon Rom & Boeffla/ak Kernel

Fueled by 7000mAh ZeroLemon Battery
[Xposed Framework Modules] kiwiman2000:
just installed this.. but I cant see how you block or add custom settings.. not as intuitive as avast firewall with

ticks so im not sure its working.. main reason trying it as avast firewall wont start says need netfilter but

used to work before I change kinguser to supersu on this teclast x98 air II 3g x64 bit tablet

did google to see if had a utube how to.. but didnt find anything.

will keep playing and see if figure it out meantime

UPDATE..

got it.. wasnt very clear... untick template and use custom then tap the incoming and outgoing sections

red block appears

however I tried blocking facebook app as a test.. all RED and hold and load app and its still loads fine

not like its blocking

however tried a slow game and sure thats blocks fine.. very weird?

anyone know whats different from facebook?

I dont see how you get the red circles and green ones.. only yellow.. tablet is in landscape (forced)

i dont see how the templates pops up on those screen snaps.. errrr
[Xposed Framework Modules] defim:
[MENTION=4943339]kiwiman2000[/MENTION]:

Template is what is applied by default, eg you dont want acces by mobile and not to local lan, but internet by wlan.

red/green could be switched per app eg by menu item, menas trusted or not.

Some apps (few) use native parts which dont work on Xposed/Java level (see OP), but there is in settins optional iptables support (root).

Enable logging tells how app is compiled
[Xposed Framework Modules] kiwiman2000:
the UI could do with a revamp.. as for the menu.. I dont see a menu.. and the 3 dots dont do anything when I click on a app

like adway it only shows a tick box next to template and incoming and outgoing connections below

you could have tick boxes on each of those makes it obvious you can tick to disable

but for the likes of me I cant find a menu to turn on trusted app

ive looked in settings and cant see anything there but they are global settings

per app settings cant find from the interface.

is there a secret touch spot? ive tried swiping left and right nothing there,.

does it have to be in portrait mode?
[Xposed Framework Modules] nicesoni_ash:
Some functions are only available after donation.

Sent from my "GT-I9300/1+1" powered by Carbon Rom & Boeffla/ak Kernel

Fueled by 7000mAh ZeroLemon Battery
[Xposed Framework Modules] kiwiman2000:
LOL ok.. what no trial period or dimmed options

still interface could be better

so trust green and red buttons are only paid option

Got it

shame no google play? makes paying easier

I paid or donated for Unbeloved hosts.. does one donation count for all apps?

or have to pay for each?

as unbeloved work but wall not detecting the unlocker from google play

DONT WORRY.. update...

dam its exspenive $18

found a all app donator on his website

so I should get refund for unbeloved hosts separate one? well I did seems to still work

and YES all sorts showing up on menu now.. green blobs etc..

thats makes it much easier to understand now but still could be better

and I see facebook does block.. it seems to load cache items and when swipe down

to load.. it says cant connect..

so its a test to see if really blocks..
[Xposed Framework Modules] defim:
@ kiwiman2000

Most of my apps, even Xposed work also with Android 2.3 (GB) so i take gui elements which are easier to handle for compatibility. 18$ is much, I've set to 10E and google caluclates currency and add tax (depends where you live) and google tax (30%) is included.

But this unlock all my apps (about 15) and upcoming (no promise if/how much follow!).

You have now multiple unlocker? You could send me the id of it

I used before another app as fiewall and did a xposed based because i did not like other gui :D
[Xposed Framework Modules] PhilipTD:
MM?

Lightningwall is not listed here. What's the status, please?
[Xposed Framework Modules] defim:
See my signature: "All my apps are compatible with Android 6."
[Xposed Framework Modules] rockpaperlizard:
Comparing LightningWall with AFWall+

LightningWall looks great. What are the pros/cons when compared with AFWall+?
[Xposed Framework Modules] defim:
[MENTION=5766800]rockpaperlizard[/MENTION]: You are not teh 1st asking this question. Please seearch/read this thread and/or the 1st post
[Xposed Framework Modules] datdirtyscrew:
Is there a way to configure/filter the firewall so a specific app only uses data while on VPN? This way if the VPN fails the app I am filtering will not leak data. Thanks in advance.
[Xposed Framework Modules] defim:
Yes, you could sett allow/deny per connection type like local network, internet wlan, internet mobile, vpn (and some other experimental)
[Xposed Framework Modules] datdirtyscrew:
Thanks for the feedback. I don't have a VPN category. Is there something I need to do or is it my ROM? I am on a Nexus 6P running stock rooted with GravityBox. Thanks again. I appreciate the work you do and your modules are some of the best for Xposed.
[Xposed Framework Modules] defim:
You could enable it at all and could enable it to show on main screen
[Xposed Framework Modules] bombaglad:
works great! any plans on doing a material redesign?
[Xposed Framework Modules] defim:
All my apps are compiled for API23 and so they use material theme...

Maybe you wanted to ask about tablet layout / navigation drawer, swipe down to refesh etc (which is not "material" related)? This is in testing
[Xposed Framework Modules] poo706:
I'm looking for a rather bulletproof method to kill internet over wifi and data. Of course a firewall like this would do the trick. However, a few times in the past, app_process has randomly reverted back to stock and then I had to reapply it with the xposed installer. If this were to happen when using LightningWall, would it stop blocking like it should?

[poo]
[Xposed Framework Modules] defim:
[MENTION=3927368]poo706[/MENTION]: there are still toms which disable Xposed? I'll add an option in next version which enables flightmode if Xposed failed
[Xposed Framework Modules] poo706:
Good idea, thanks!

[poo]
[Xposed Framework Modules] jb91:
Somehow LightningWall doesn't block anything for me. I've blocked everything on Firefox to test it, but it still connects to the internet. Any ideas?
[Xposed Framework Modules] defim:
In-app logging helps to see if its working. Also see OP, some apps use "native" way which could not be handled by Java/Xposed, this works only by linux level/iptables
[Xposed Framework Modules] android404:
Nevermind, I found my mistake.
[Xposed Framework Modules] preetshardoc:
On marshmallow does not block WhatsApp anymore.... Is there a way around?
[Xposed Framework Modules] defim:
WhatsApp is not mor in the log if loggin is enabled? Maybe the app was changed to native access on linux level (i dont have checked, but i dont think so). In this case optional iptables support needs to be enabled (but this does not log)
[Xposed Framework Modules] Wasim E.S:
I see that you did release v3.8.3 with the new flight mode option on your website but the download link is not working. can you please fix it. Thanks...
[Xposed Framework Modules] leechseed:
/edit3

Root prompt is back. Nakedbrowser still cant be blocked, which is ok because it needs access. I just used it to test your module.

Thank you.

Edit/

Hi,

I've tried to use this module but its not working for me. I wanted to use other iptables but the module wont ask for root. Theres also nothing in the logfile.

Any idea?

Im running Marshmallow (B820 - EMUI 4.0) on my Honor 6 (Hawei).

/edit

Ok, some Apps just dont get blocked (Nakedbrowser for example) but the problem with 'no root' is still there.

/edit2

Ok i have a problem with supersu, root apps dont ask for root anymore (no popup). Granted root access still works. So forget about this post.. Sorry.
[Xposed Framework Modules] nickfar2000:
Is Naked Browser, all that? I've heard it is? Other than naked of course ?

Sent from my SAMSUNG-SM-N900A
[Xposed Framework Modules] Newb004:
im feel like a real newb just now, i cant find where to setup the template. I really cant find that, "Set template for unconfigured apps" page in-app. can somebody help me? thanks
[Xposed Framework Modules] nicesoni_ash:
Open options and select template and then configure your options in there.

Sent from my "i9300/1+2" powered by Carbon/RR

Fueled by 7000mAh ZeroLemon Battery
[Xposed Framework Modules] leechseed:
[emoji28] what?

Its just a cool, small browser. [emoji6]
[Xposed Framework Modules] iwanttoknow:
Hi all,

Sorry for this basic question, but I didn't find in the Settings menu of LightningWall, how to access to the Template screen and define custom settings. So, how to access to it ?

Thanks in advance for your answers.

View attachment 3912715
[Xposed Framework Modules] defim:
[MENTION=7545844]iwanttoknow[/MENTION]: Your screenshot shows the template (header). You configure it, and if you set an app to use template, this config is used
[Xposed Framework Modules] iwanttoknow:
[MENTION=4501300]defim[/MENTION]

Thanks for your answer.

I've extracted the screenshot from Play store.

I want to know how to access to this screen, because I don't find how to do it in the app's menu.
[Xposed Framework Modules] defim:
[MENTION=7545844]iwanttoknow[/MENTION]: It's a menu item. But can only be changed with donator. (Most) features are in donator description
[Xposed Framework Modules] iwanttoknow:
[MENTION=4501300]defim[/MENTION]

Thanks for your reply.

BTW, what are the differences between LightningWall and AFWall+ ?

Are the two apps comparable ?

Is one of them brings more security than the other ?

If I don't have to ask these questions here, please tell me. I will not be offended.
[Xposed Framework Modules] Dattorney:
[MENTION=4501300]defim[/MENTION]

Hi!

I've found that Chrome, Brave and other Chromium-based products can evade the firewall (also they can evade iptables) Sent an email to you about it, but as requested in response am cross-posting my report here

.....

Chrome and Brave (and presumably other Chromium derivatives) escape filtering.

They do this using sandboxed Chromium processes they are spawned as bound services running with usernames like u0_i[somenumber] (example: u0_i9) and have uids like 99[three digit number] (example: 99009)

If these processes are spawned, they are not covered by your app firewall (and for that matter by iptables -m owner targeting the original chrome/brave UIDs, obviously due to the sandboxed processes having separate UIDs)

Since my idea was to dynamically block browsers based on whether they are focused or not (based on automagic/tasker), this is kind of important for me.

Steps to reproduce:

* Install LightningWall + LightningWall Donator

* start Brave (or Chrome)

* press Home button

* open Lightning Wall and block Brave (or Chrome)

* come back to the browser

* navigate to any page

Navigation will succeed because of sandboxed slave process doing the connecting

Now in terminal emulator ps | grep brave (or ps | grep chrome , for chrome) will show the browser and its sandboxed processes that are not covered by the firewall.

Unfortunately, UIDs of sandboxed process is different every time (last three digits change) so manual blocking via iptables -m owner is not an option.

As far as I can tell, iptables is completely powerless against such "spawned bound service" thingies, and the only hope is a smart application firewall (like LightningWall ;) ) tracking which "sandboxed" slave processes belong to which browser app (or for that matter other app that uses this "bound service as separate process" trick)

P.S.:

I also have a feature idea/request:

It would be nice to have a third status between "blocked" and "trusted", equivalent to iptables directive of

iptables -w -I OUTPUT -p all -m state --state NEW, RELATED -m owner --uid-owner [target process's UID] -j REJECT

and/or

iptables -w -I OUTPUT -p all -m state --state NEW -m owner --uid-owner [target process's UID] -j REJECT

Use case:

block browser whenever it becomes unfocused (via automagic4android or Tasker) but allow the already established connections and related connections to finish up whatever they are doing (for instance, a download of a large file)

Thank you very much for your wonderful app!
[Xposed Framework Modules] defim:
[MENTION=7545844]iwanttoknow[/MENTION]: The one is Xposed based and the other iptables. You could use both at the same time (but then dont use iptables option in LightninWall)
[MENTION=7844325]Dattorney[/MENTION]: Yes, got your message 3 times... LW should be "related" as it allows to "connect" connections but does not close them. If you switch to dont allow an app, new connections are denied. (Keep in mind, if you switch network or mobile/wifi new connections are needed as your source ip changed).

Most browser apps use a Google cache/compression proxy to speed up (mobile) connections and this is done by native linux (not Java/Xposed) part. This is also so for the Xposed app UnbelovedHosts. You just need a browser without this proxy. Btw, then you also get not tracked by Google ^^
[Xposed Framework Modules] iwanttoknow:
[MENTION=4501300]defim[/MENTION]

Thanks for your reply.

But I don't have answers to my questions, or also I don't understand your reply. I'm a simple user. Could you please develop your answer ?

What are the differences between LightningWall (1) and AFWall+ (2) ?

(1) Xposed and (2) iptables based.

No more explanations ?

Are the two apps comparable ?

Is one of them brings more security than the other ?

Personally, I use LightningWall, because I understand its user interface (thanks for it). I don't know how to use it with iptables option.

Before LightningWall, I was using Noroot Firewall, because my smartphone was not rooted, and had no technical skill. After, I rooted it and installed the Xposed framework, and discovered LightningWall. For a few months LightningWall and Noroot Firewall were running together. Today, only LightningWall.

Is LightningWall sufficient to be sure to filter all apps ?
[Xposed Framework Modules] defim:
[MENTION=7545844]iwanttoknow[/MENTION]: Puh.. iptables is in the linux kernel since version 2.4 or 2.6. It's not only on Android but maybe ony your router, desktop pc etc.

Android is (most) Java and Xposed hooks here. So the both are on different layers or levels in the operating system

Biggest disadvantge of Xposed is that it hooks Java, but not "native" things. So some apps with native parts build with Android NDK are not "seen". To block 100% iptables is needed additionally, thats the reason LW has additional iptables support (i personally dont use it). But another iptables app (afwall) could run also -> different layers, no problems for both (iptables in LW should then be disabled)

Disadvantage of kernel/iptables is it does not know exactly the network states as Android/Java does, because the logic is there

For Xposed is no root needed (except for older 4.x devices to install, 5+ used recovery to flash)

Hope this helps :D
[Xposed Framework Modules] iwanttoknow:
[MENTION=4501300]defim[/MENTION]

Thanks for your reply.

So, if I want to control the traffic exhaustively, I need to create iptables configuration files. Did I understand you correctly ? Is it complicated to create them ? Is there a documentation about it in LW ?

You don't use iptables support, so you accept some apps bypass LW ?

How identify such apps ?

Thanks for your help.

;)
[Xposed Framework Modules] defim:
[MENTION=7545844]iwanttoknow[/MENTION]: If you want to use iptables with LW, just enable the checkbox in the settings (and grant root if requested). Nothing more needed. If you want to check the applied rules, opena a terminal with root permissions and print rules with iptables command.

I think less than 1% of apps used NDK, it need more work and is not developed in Java but C(pp).

This applies to all Xposed modules. There was a "Cydia Substrate" frame work which is also able to hook native code, but nobody uses it ^^