yashsingh1/xdaforums huggingface dataset:
[Xposed Framework Modules] :
AFWall+ has a problem : it doesn't block background data.

I didn't tried but i think it will be block here, even if it can't be allow or block on demand like in mobiwol.

The perfect firewall is not born yet (or i haven't find it), so we should be grateful for ppl working on it.
[Xposed Framework Modules] defim:
Background data should not be a problem, try to enable logging, should be visible.

The "perfect" firewall should be LighningWall + AFwall (i used before). Both have advantages and disadvantages, together helps if one fails
[Xposed Framework Modules] :
Personally, i like mobiwol too. The problem with it is that it's slow to start, and that you can't use it together with a vpn.

How can you know if an application has native library? Only with trying?

One thing that could really be nice too is to show latest installed apps first.

Thanks anyway, I'll try your solution which look pretty good.
[Xposed Framework Modules] defim:
Note: Not yet compatible with the new Xposed beta!

EDIT: Fixed for Xposed 2.6 beta

I've planned some sort of filtering, but not sure how/which kind
[Xposed Framework Modules] mermaidkiller:
Well, it does. It works on a per-app basis, foreground or background. Normally I have enabled a profile which blocks *all* Google services (including Google Play) and at that time when I click on *install* in the browser on a computer (or the device itself) it does *not* download until I enable the profile with Google Play (services) enabled.
[Xposed Framework Modules] defim:
Thanks, in this case you have to block with LighnintWall "com.google.preocess.gapps", that's the shared uid
[Xposed Framework Modules] :
Well, let's not talk about another firewall here because it's the wrong thread, but i have a proof on my side that it doesn't :)

Let's keep this in PM if you wish.
[Xposed Framework Modules] oldman20:
It doesn't work. I try block everything of gg chrome. It still connect internet! Why? This module seems not working. Hope it will fied in next versions
[Xposed Framework Modules] defim:
Please try to enable log to see what's happen
[Xposed Framework Modules] oldman20:
Sure, i will try tonight! But this module works with you?
[Xposed Framework Modules] defim:
No, logs only connections to "clients*.google.com". Chrome seems to use native acces/libs/binaries. Maybe it would be better if i add iptables, if possible with packet tagging or so
[Xposed Framework Modules] Pons:
Just a thought, do you have the option in Chrome for reduce data usage under bandwidth management? That routes everything through Google's servers.
[Xposed Framework Modules] oXid_FoX:
Hi defim!

I'm currently working on FR translation.

maybe you could divide apps in 2 panels: user apps & native apps (like you did with CustomShare ; but if I think it would be better with horizontal swipe than a toggle button. Same thought to CustomShare)

and if you know some apps you can't block (com.google.process.gapps ?), maybe you could remove it from app list? or even put a toggle (in options) to show/hide them.
[Xposed Framework Modules] defim:
I'm atm not sure what to do...
[Xposed Framework Modules] jaibar:
I think the most straight forward is to do something similar to afwall and similar- freshly installed apps on top, then apps that have been modified, and below the ones that were deliberately left untouched.

On top of that one can add a simple user/system/both checkbox.
[Xposed Framework Modules] an0n981:
With IPTables and open source code (a man can dream, right?) this has the potential to become an amazing security app
[Xposed Framework Modules] oldman20:
so whats the method to control protocol connect internet of application? Why this is hard? any way to do that
[Xposed Framework Modules] Pons:
You never answered my question. Do you have the bandwidth management option enabled that I talked about above, in Chrome.
[Xposed Framework Modules] oldman20:
sorry, i remiss :(. No, i had flash rom, then install they, so i did enable bandwidth yet!
[Xposed Framework Modules] wbedard:
Hi [MENTION=4501300]defim[/MENTION],

After struggling for a couple of days to get LW to work with my VPN, I was glad to find in XDA that it might be a known issue. Basically, LW is detecting the switch from the "physical" interface (i.e. W-Lan or Mobile) to VPN but it keeps detecting address-change events which cause it to think the device has switched back to the physical interface. This is more of a nuisance than anything, since it means I have to modify my rules to include the physical interfaces, even though that traffic still leaves over the VPN. I am only having this issue with a Nexus 5 phone (latest Lineage 14.1, XPosed v88.2, most of your apps...:laugh:) All my other Android devices have only WiFi interfaces (and the VPN) and don't show this issue.

I would like to help you troubleshoot this but I was unable to find the option for "hidden" logging you recently mentioned. Please indicate what logging configuration would best support your efforts and what events you would like captured (i.e. boot-time detection, VPN connect/disconnect, etc.). Thanks in advance for all your time and effort to support LW!

R/

wbedard
[Xposed Framework Modules] defim:
[MENTION=2769491]wbedard[/MENTION]: The detection also does not work wiht the other detection metod in the settings ("compat detection", or so)?

To enable more logging options: In the settings 2 times a long touch on the last line (loggin is enabled/disabled). Now close the settings and open it again. Then there are more options for logging
[MENTION=5305387]alxtorrentazos[/MENTION]: This app does not know the host name, but the name of the ip address (ip->name, ptr) eg if enabled logging. It hooks on connection establishment. To block hostnames eg tracking etc im using my other app UnbelovedHosts (not on Play Store, only Repo) which hooks name resolution (name->ip)
[Xposed Framework Modules] wbedard:
Thanks for the reply! I don't recall if I've tried "compat mode" before but I'll enable it and monitor the logs for a few days. Thanks also for the logging advice, I was able to enable the add'l settings.

R/

wbedard
[Xposed Framework Modules] defim:
[MENTION=2769491]wbedard[/MENTION]: Just checked my todo list, there i've yet noticed 3rd way for vpn detection .. will add this additional option in the next version
[Xposed Framework Modules] SJD Ayy:
This and bootmanager are two must-haves for me. I hope you'll update these two modules for Oreo when you can.
[Xposed Framework Modules] vulkahn89:
Hi to everyone.

I have a question about the iptables function:

I would like to change my DNS server using my own iptables rules. When using AFWall you can use your own bash script to activate your own rules. Is it also possible to integrate such rules with LW?

Here are the two iptables lines:

$IPTABLES -t nat -I OUTPUT -p tcp --dport 53 -j DNAT --to-destination 213.73.91.35:53

$IPTABLES -t nat -I OUTPUT -p udp --dport 53 -j DNAT --to-destination 213.73.91.35:53

And is it possible to activate these lines on every boot of the device within the use of LW?

Thanks
[Xposed Framework Modules] Magissia:
Hello, is lighting wall blocking based on package name or UID ?
[Xposed Framework Modules] defim:
[MENTION=4634775]Magissia[/MENTION]: Package name, because the UID could change if you install a new row.
[MENTION=7534936]vulkahn89[/MENTION]: Own iptables rules are not implemented (maybe later when Oreo is fully working). But the app does not remove lines not created by itself. So you could use another app which does it at startup. But why does not change it in network settings?
[MENTION=8741601]SJD Ayy[/MENTION]: Update is planned
[Xposed Framework Modules] SJD Ayy:
You could easily achieve this with init.d if your kernel supports it.
[Xposed Framework Modules] Magissia:
Does it means it will apply to all users on the device ?
[Xposed Framework Modules] pwag:
I am using xposed version 90.2-beta3 systemless and have the module installed but lightning wall isn't see the module... keeps telling me it is not installed. Any thoughts? I'm on oreo 8.1 64bit
[Xposed Framework Modules] davidred7697:
Does not seem to work on my LG V20 via Magisk Xposed, Android 7.0. I disable all connections on certain apps, force close them reopen and they load internet content as if nothing ever happened.

I believe the same applies to the boot manager app. I see last updates were in 2017. Is that the reason? Or maybe I'm just doing something wrong.
[Xposed Framework Modules] apeofgod:
Defim Donator

[MENTION=4501300]defim[/MENTION]

Defim Donator stopped working after I removed Google Play Services (will not use it anymore). Do you have a Defim Donator that doesn't need Play Services?

Please, I need that with urgency, my apps turned free again. :crying:
[Xposed Framework Modules] inguna:
Could you update it to support Oreo? Thanks a lot in advance
[Xposed Framework Modules] Atrate:
(Mods, please say if I am breaking the rules, though I guess not)

Seen as you have purchased the donation app, I'd see it as completely ethical to use one of the various patching apps to patch Lightning Wall and other apps so that they'll be pro and won't have licence checks.
[Xposed Framework Modules] .:Addicted:.:
Any chance this will get oreo or pie support
[Xposed Framework Modules] inguna:
defim replied to my email. He's got plans to update it. According to him he is still on Marshmallow. When he gets his hands on an Oreo device he will update it.
[Xposed Framework Modules] apeofgod:
[MENTION=4501300]defim[/MENTION] replied to me too, there's no way to keep the license of the paid apps without Google Play Services, very sad.
[Xposed Framework Modules] alxtorrentazos:
Defim, would you please be so kind to update this great firewall tool to Android Pie to be used with Magisk/ED Xposed? Thank you so much in advance!!!
[Xposed Framework Modules] aenews:
True yeah this module was amazing back in the day. Hope it gets updated, and the dev is incredible.
[Xposed Framework Modules] alxtorrentazos:
Latest message from defim, dated 2018-4-11, we should lose any hope
[Xposed Framework Modules] NeriL:
How do I configure template?

I want to deny incoming and outgoing connections on mobile network for all apps except for whatsapp and browser.. All apps should work normally on wifi..
[Xposed Framework Modules] defim:
There's a new interface for translate most of my apps: http://tinyurl.com/okycacj

A free account of www.oneskyapp.com is required to edit.

Set in the template the connections you want to deny (mobile, maybe roaming) to red. This is then used for all unconfigured apps / apps to set to use template.

The set Whatsapp & Brwoser to custom settings and allow mobile
[Xposed Framework Modules] NeriL:
I can't find template settings
[Xposed Framework Modules] badkill:
how I can translate this module to Spanish?
[Xposed Framework Modules] defim:
It's a menu item. Btw, does you use donate version?

I'm new to this translation site, but it seems I have to enable languages on request, didn't find an option to allow others yet.

It's now enabled
[Xposed Framework Modules] badkill:
I now work in translation, thanks:good:
[Xposed Framework Modules] NeriL:
I downloaded it from xposed installer.. I guess it's the free version..

Template settings isn't there! (look at attached screenshot)

Sent from NeriL.device using NeriL.preferredApp
[Xposed Framework Modules] defim:
See 1st poste here or Xposed Repository description for "Donation:"...
[Xposed Framework Modules] oXid_FoX:
Can you enable French?
[Xposed Framework Modules] defim:
Enabled for all apps
[Xposed Framework Modules] badkill:
i finished all translation, except one that was not available to translate to spanish. thanks for your work and apps
[Xposed Framework Modules] MIKEMON:
Czech translation is possible?

thank you

Very impressive and beautifully processed applications
[Xposed Framework Modules] defim:
Thx. I added it
[Xposed Framework Modules] KTownGT:
Excuse my ignorance, but is a firewall useful for normal android users? I've never considered using one for phones or seen much discussion on the subject. Lol
[Xposed Framework Modules] defim:
//please delete
[Xposed Framework Modules] defim:
Maybe you are using an app but it should not be allowed the internet, or only if connected by wifi (save mobil traffic), or only if not roaming.

A good example is a "flashlight app" which phones home: http://www.techrepublic.com/blog/it...ow-where-you-are-probing-android-permissions/.
[Xposed Framework Modules] Depressed T.Bear:
Hi Defim, I really like your lightningwall but I'm missing a widget to easily block & unblock a specific app!

Can you maybe add this?

Greetings from Germany

Gesendet von meinem GT-I9300 mit Tapatalk
[Xposed Framework Modules] defim:
I've not planned a widget. Why would you enable internet access sometimes for an app and sometimes not? Rules for different network connections could be set.

If oyu dont trust soem app and dont want it sends some data, only a single successuflly connection is enough...
[Xposed Framework Modules] jaibar:
What about adding multiple select? For example if someone wants to block roaming for lots of applications, say 100+, it can be tedious going one by one... Unless I'm missing some settings, I couldn't find a way to so it
[Xposed Framework Modules] Depressed T.Bear:
I mainly want it to hide my last seen status on various chat applications like whatsapp or telegram and so on ;)

Other established firewalls like afwall+ also have such widgets :)

Gesendet von meinem GT-I9300 mit Tapatalk
[Xposed Framework Modules] defim:
Hide chat status ^^ then you will also not get new messages

But to prevent an chat app to do anything, just kill the app, eg with a long press on "back" or a TaskManager (with my app, use "hard" kill)

I used before also afwall+, but some things i dont like, as that it sometime does nothing or the many tiny checkboxes :D

There is in the donator version a template, this is used for all apps which have no custom settings or trusted or blocked. By myself i use it this way: set "roaming" to disable in template, and hide it. So i have not to care about it
[Xposed Framework Modules] Depressed T.Bear:
Don't get me wrong, I just want to push the widget -> app cant access internet -> I can read and reply, then I'll close the app & push the widget again - thats it! :) :D

Yes afwall+ is very susceptible to interference... so sometimes it doesnt block anything and thats way I wanna switch to your awesome lightningwall!
[Xposed Framework Modules] defim:
There is one problem with the "block app on request": If the app has yet established a connection, this will not be cancelled f you block it! This is so for the xposed and iptables, because the "establish connection" is observed.

So, if you open the app to receive a message, and the blocks it, it could still communicate. So force-close is more reliable...

Btw, maybe you noticed, i added iptables support to latest version

- the xposed way fails for native files accessing network. I think thats not more than 5% of apps

- iptables (like afwall) fails sometimes completely and does noting.

There's someting wrong with iptables and Android. If it fails, it tells "iptables: Try again.", and maybe it works the next try - or not. If you have enabled iptables in LighningWall and iptables fails, "retry" is logged.

So LightningWall with iptables enabled should be the best way i think...
[Xposed Framework Modules] prodigiez:
does it support function like block outgoing and allow incoming ?
[Xposed Framework Modules] defim:
Yes, you could configure it separately
[Xposed Framework Modules] bsimpson1:
On my Verizon Samsung Galaxy S4 (sch-i545) the app does not block data on the mobile network. I haven't tried it with the iptables mode enabled.
[Xposed Framework Modules] defim:
Iptables is for most not required.

Please enable logging in the appp and check it
[Xposed Framework Modules] kic:
Hi,

is there a reason why the new version requires "full access rights for all device functions and memory"? I understand these rights as allowing the app to do everything! Or does this come from the PlayPermissionsExposed module displaying wrong rights? Because I am not sure how the app could work previously with only these 4 already granted rights:

de.defim.apk.permission.LICENSE

USB-Speicherinhalte lesen

Vibrationsalarm steuern

Tasker Tasks

Sorry if I seem to be a bit too paranoid :)

Best regards,

Kic
[Xposed Framework Modules] defim:
The name shows is bad, the new permission is "android.permission.ACCESS_SUPERUSER". Common known as "root permission".

This is only used if you enable "iptables" in the app, but is not required. Additionally your supueruser/supersu app will ask you to allow or not
[Xposed Framework Modules] bonanza123:
Hi defim,

I seem to have some problems with saving my settings in version 1.15, please see the screen recoding attached.
[Xposed Framework Modules] defim:
Hallo,

thx for the video. I tryied it by myself, could not find any problem saving settings. Btw, the settings save fix of 1.1.5 was only for the "retry" option of iptables.

Maybe it's related to other apps you installed, like the "Lucky Patcher" visible on you homescreen?!
[Xposed Framework Modules] bonanza123:
Actually, I don't know, I haven't patched lightningwall or something else related to xposed. Moreover, I have the same problem on my other device ( Galaxy nexus / maguro). Unfortunately, the xposed log and the catlog is either empty or doesn't contain some hints on problems in lightningwall. Is there any way to acquire some verbose information?
[Xposed Framework Modules] kic:
Thanks a lot for clarifying... since I never accepted the permission so far, I did not reach the SuperSU prompt... will do so later.

Great support, great tools!!!

Best regards,

Kic
[Xposed Framework Modules] defim:
If you enable "iptables" but deny root, iptables will not be applied

Settings saving has no debug infos :(

Can you send me your config of the app? It contains the names of the apps you installed, in case this is privacy related for you.

You could simply pack it with "tar cvf /sdcard/config.tar /data/data/de.defim.apk.lightningwall/"

In fact all the cached *jpg are not needed, they could be 1 mb or 2. I think also the logfiles are not needed in this case.
[Xposed Framework Modules] bonanza123:
sorry for the delay, I hope here is the one you need.
[Xposed Framework Modules] defim:
In the file is the "files" directory missing. Does it exist on your device? If not, it could be the cause the app could not save it's data

Please checkt it with

ls -al /data/data/de.defim.apk.lightningwall/

If it does not exist create it

mkdir /data/data/de.defim.apk.lightningwall/files

And then set the correct owner (a99 is on my device, pleae use the same as /data/data/de.defim.apk.lightningwall/)

chown u0_a99:u0_a99 /data/data/de.defim.apk.lightningwall/files
[Xposed Framework Modules] bonanza123:
thanks! now its working! :)
[Xposed Framework Modules] defim:
[MENTION=686947]bonanza123[/MENTION]: The files/, cache/ etc directories are created by android during the installation of the app, LightningWall does not create them.

So maybe there's a problem with your device/rom and other apps could not save files
[Xposed Framework Modules] bonanza123:
Thanks for the info. Will there be in a future version also an option to backup / export the current settings? Or is it 'safe' to use titaniumbackup for this?
[Xposed Framework Modules] defim:
Titanium Backup works great with my apps, i'm using it myself to backup the settings of all installed apps daily.

As for all Xposed modules no force-close of the app is possible, a reboot after restoring files is needed to apply old settings
[Xposed Framework Modules] bonanza123:
Thanks for the info. Will there be, in a future version, some search functionality for the installed packages and some notification for new installed apps (just like in Afwall+)?
[Xposed Framework Modules] defim:
Some search is planned for all my apps, but do not know what/how. The lastest versions have now a index & fastscroll.

New apps: The app is listening for newly installed apps and does reapply rules then. I think a notification is not required, for not configured apps (=new installed) the template is used
[Xposed Framework Modules] super_extreme:
Feature Request

Thanks for this firewall app, it is really nice. :)

But for me life would be easier if it would be possible to block/reenable just everything of one app with a single click.

Moreover a mode where everything is blocked at first and single apps can be ticked as trusted would be nice.

Or am I just to stupid to find something like this?
[Xposed Framework Modules] pranjal18:
Hi! Nice work dev! Thumbs up!

One question...will this app work fine if I place it in /system/app/?
[Xposed Framework Modules] defim:
I've never tried it. If xposed modules have no problems with this path it shoud be okay. But if there will be a update, it will be saved somewhere.

Which problems have other apps with this path?

Donate version has some more features (see OP)

In the app details view, in action bar are red/green dots for allow app/dont trust app.

Also there is a configurable template, it is used for not-configured apps -> dont allow everything in template, set apps later to allow/deny/custom,
[Xposed Framework Modules] pranjal18:
I have placed it in system/app. The module is unable to log, but seems to work fine except once when I detected a data leak on WiFi.

I also use GB and tinted status bar and XuiMod and Boot manager...all are placed in system/app and seem to work fine.
[Xposed Framework Modules] defim:
Hm, how you did detect the leak? It does not occur if not on /system?

There where sever reports of problems with logging, but not yet sure what caused it. I think it's because of Xprivacy. enabel logging there and allow writing the file (it will not be written in the context of the app!)
[Xposed Framework Modules] pranjal18:
I was using an app which was cut off from all the connections and found out that it was able to connect to the internet. I checked the settings in Lightening Wall and it showed or was blocked. Then I activated the logging, but it showed "Logging is disabled"

I do not use xPrivacy module.
[Xposed Framework Modules] defim:
"Logging is disabled": You have to select at least 2 options for logging incomming/outggoing allowed/rejected

Example 1: Only "incomming" -> nothing

Example 2: Only "incomming"+"allowed"+"rejected" -> all incomming

"leak": Oh, i thought a memory leak :D Some apps does native acces internet. Native = not with Java methods. Xposed is only able to hook Java methods. For this, iptables rules could also be applied. Check settings page for to enable it & options

iptables has known restrictions, as on some devices it is not available or rules applying fails. Also reapplying rules on network interface changes are needed. With my devices: Problems with my Defy, but works great with the S4active
[Xposed Framework Modules] pranjal18:
Oh...thanks man! My bad..I thought otherwise. Plus I checked...it was not a leak by this app. Logging also works in accordance with what you claimed. But I have 3 questions...

1. The game (coach memory) connects to google play game leaderboard successfully even if the game does not have access to any connection. How and why? It is not only with this firewall, but happens with all.

2. What is the difference between java and native methods which you were talking about?

3. Should I enable iptables option or leave it as it is?