[Security Discussion] unclefab:
At the time I noticed that despite my Firewall my kernel was connecting to Google and stuff I didn't know about Firewall scripts yet .

Then, after I found out about it I never had that issue anymore since I allways used AF+Firewall's built in iptables, they work on both inbound and outbound connections but I'm on 4.2.2.

As I already wrote, the higher the Android version the more difficult it is to tame it.

Google says that it has patched this or that security flaw, experts say that one should update one's phone to the latest Android version, and?

One's phone is patched against a security flaw that is more or less harmless (cuz if one doesn't download apps from shaddy sources and doesn't click on suspicious sms' or links chances to get hacked are close to zero), and at the same time one has a more invasive, more abusive and more intrusive OS.

A few pages back I explained why I think it's not a good idea to upgrade one's Android version past 4.1 or 4.2 , if someone feels to read:

most vulnerabilities (except one or two) only work if one has installed a doddgy app or opened a nasty sms through WAP push (WAP is anyway uninstalled if one has followed OP).

If you are the type of guy that installs apps from shaddy sources, and that clicks on any link on any sms that promises to increase your d...k's size to 25 inches then I agree, you should stick to later Android versions.

But as for me I'm not that type of guy, and anyway, what are those bad apps using those vulnerabilities we are talking about?

They are a few nasty bits, flooded amongst millions of Android apps on board over one billion Android devices, and those nasty bits account for something like 0.01%.

http://www.greenbot.com/article/2148...tching-it.html

OTOH, google's tracking on Android is on 100 % of newly bought smartphones and wifi tablets, and its tracking becomes more and more sophisticated and harder and harder to remove as the Android version rises.

Then one has to ask oneself what one chooses.

0.01% (actually even less if one only installs from trusted sources and doesn't click on 25 inches offer sms') or 100%?

After having tried KK 4.4.2 for a few weeks everything became clear, I went back to JB 4.2.2 and I intend to stick with it.

Back to the firewall topic, by using the built in tables I don't have any inbound or outbound unwanted connections, according to Network Log, but for some stubborn web sites the firewall script didn't work and I had to use a host file.

Some couln't be blocked even with the host file because the host name their IP was poiting at was too generic, so I used BlockIt! app to find out about their real host name and I eventually managed to block them. Some of those sites are:

apis.google.com

ajax.googleapis.com

www.googletagservices.com

fonts.googleapis.com

[MENTION=5075064]optimumpro[/MENTION]:

I had never thought about changing the system/bin iptables with the Firewall's and it's a very good idea (even if one uses the Firewall along its built in iptables), just to be on the safe side.

Thanks for the tip, I will add it to OP, with due credits of course;)

Regarding the ping file that is in system/bin, I have removed suid from it with the following command:

busybox chmod -s /system/bin/ping

And I chmodded it 750.

Today I have chmodded it 000 and internet still works, but I have to do a bit of research to see if it hasn't any negative side effects.