yashsingh1/xdaforums huggingface dataset:
[Paid Software Announcement and Discussion] Loader009:
Yes, I tried this the first time and also right now.

It didn't help. Probably because the problem was not a problem of your app...

It works again, I force closed Play Store (did this before but nothing changed). Now it shows everything again... probably something on googles side.
[Paid Software Announcement and Discussion] Droidphilev:
Hi Marcel,

On N "always-on" can be chosen using the gear behind the VPN name. On my M rom there is a separate menu for this. Sadly enough Sentry doesn't show up so that it can be chosen.
[Paid Software Announcement and Discussion] M66B:
Android M doesn't support Always-on for user installed VPN apps, only for Android built-in VPNs.
[Paid Software Announcement and Discussion] M66B:
I have simplified the way in which rules will be applied. Blocking rules do not longer precede allowing rules, so there is now just an order in which rules are being applied and nothing else. This is simpler to understand. The end result is almost the same, but you might need to revise some rules.

The FAQ about this has been updated as well: https://www.vpnsentry.net/faq#FAQ23
[Paid Software Announcement and Discussion] M66B:
I have just released

beta

version 0.35.

It may take Google's servers a few hours to make this release available everywhere.

Besides a few minor improvements, this version fixes a crash.
[Paid Software Announcement and Discussion] Loader009:
How about to make the app a device administrator?

AFWall+ uses this feature so it can't be easily uninstalled.
[Paid Software Announcement and Discussion] M66B:
It is easy to add, but it doesn't add anything significant, since there is no way to prevent the VPN from being disabled through the Android settings.
[Paid Software Announcement and Discussion] Loader009:
Hm... I don't know how useful it is.

It is told that malware with root can easily uninstall apps. But your app can be uninstalled while being active (just tested, with always-on setting). And if I remember correctly, you can uninstall apps with adb. (But since you need to accept the connection to your computer, there is no real threat... except for apps which are able to use adb?)

So, I still have no idea if it is useful, just wanted to point at it as the other time.
[Paid Software Announcement and Discussion] Licaon_Kter:
if you have developer settings enabled

and if you have USB debugging enable

and if you've setup wireless access to adb via "adb tcpip <portnumber>" on a PC

and if you've used the default port (5037)

and if you grant access to adb for the app when you're asked by the dialogue

then, and only then, an app, can use adb to do (bad) stuff

too many IFs though, right?
[Paid Software Announcement and Discussion] Loader009:
Yes, that's right...

But who does not use adb (over USB or WiFi) in this forum?

I use it, although, I need it for TitaniumBackup.
[Paid Software Announcement and Discussion] RBJ26:
I just installed version .35 and its not working for me.

Is the server down?

I noticed in the faq that it needs certain permissions to operate, but the app did not request any, nor can I grant any.
[Paid Software Announcement and Discussion] M66B:
The server is up and running. It hasn't been down unplanned so far.

Android grants all permissions automatically, because none of them is considered to be dangerous.

What is exactly not working? What happens when you enable the switch in the action bar? Do you have a notification with a cloud icon? Does the app list show?
[Paid Software Announcement and Discussion] M66B:
I have just released

beta

version 0.36.

It may take Google's servers a few hours to make this release available everywhere.

The rule type in the real-time log will now be indicated by icons, see also the help.

Thanks [MENTION=4958579]Primokorn[/MENTION] for providing the icons!
[Paid Software Announcement and Discussion] RBJ26:
No Internet connection.

When the switch is enabled, the notification (cloud symbol) shows as disconnected.

In the initial startup screen, there's an error message, but quickly disappears. I'll try to get a screen shot, and post it.

Btw, phone is a Nexus 5x running 7.1.2

Netguard works fine, and was switched off prior to starting vpn sentry.
[Paid Software Announcement and Discussion] M66B:
Did you also disable the Android Always-on VPN setting?

Unfortunately there is no way to check this from the app :(

Edit: I have found an undocumented way for this
[Paid Software Announcement and Discussion] RBJ26:
Yes, always-on is disabled in netguard and vpn/sentry.
[Paid Software Announcement and Discussion] M66B:
Please open VPN/Sentry, disable and enable the VPN using the switch in the action bar and send me the debug info by tapping seven times on the title of the 'about' dialog and I will look into it soon.
[Paid Software Announcement and Discussion] Loader009:
I've got a bug also...

It seems that I can't block specific (wildcard also) domains.

Global rules show no blocked rules.

I can access facebook but I blocked it earlier in the global rules.

If I tap on one domain, set to block and then ok, I see it for a moment in orange, with the two arrows, then it's white again.
[Paid Software Announcement and Discussion] Loader009:
Your debug log, if it helps.

edit: updated to the current version didn't help.
[Paid Software Announcement and Discussion] M66B:
I hate bugs (as any developer should), but I cannot reproduce this problem.

Can you please create a screen cast showing this problem?
[Paid Software Announcement and Discussion] Loader009:
Uh... sure, but I never did one, so I have to figure out first how to do that.

---------- Post added at 03:09 PM ---------- Previous post was at 02:57 PM ----------

@M66B, here it is... in my opinion there is nothing helpful.

--- link removed ---

(Link is valid 'til tomorrow. Please let me know if you can't access the file. You need to accept the ssl certificate.)

A note; I yesterday set the main default rules to block WiFi and mobile connections. I had to reconfigure every app but I didn't spent attention if my block rules were still there.
[Paid Software Announcement and Discussion] M66B:
I have no idea why this is happening.

Try to export and import your rules (without clearing data or re-installing) to see if this solves the problem.
[Paid Software Announcement and Discussion] Loader009:
Problem persists, force closed didn't help.
[Paid Software Announcement and Discussion] M66B:
I have just sent you a personal message through XDA containing my e-mail address.

Can you please send me your exported settings file after trying to block the address?

Please include the uid of the app and the domain name you tried to block.

Edit: I already know why this is happening: the profile is already set to blocking, so VPN/Sentry considers the rule not relevant. This is indeed a bug I will fix right now.
[Paid Software Announcement and Discussion] Loader009:
[MENTION=2799345]M66B[/MENTION]

Again something else, as someone suggested to use "Island" for more privacy, I am trying to set this up.

I copied WhatsApp to this app but it doesn't have an internet connection. Island uses work profiles (I first heard of this feature with the mentioned app).

Can you say if work profiles/Island are/is supported?
[Paid Software Announcement and Discussion] M66B:
Work profiles are supported, but older Android versions had bugs in the work profile implementation in relation to the Android VPN service.

So, if it works it works and else it doesn't work and it can't be fixed.
[Paid Software Announcement and Discussion] Loader009:
AFWall+ was activated and probably blocked something. After disabling it WhatsApp inside of Island worked... kind of (no contacts synced, dunno why).

Hm... I use a current version of Ressurection Remix (Android 7.1.2 - build date 8. october; exactly one week ago).

So it should work... but I have the feeling that the traffic of the work profile isn't routed through your VPN.

"WhatsApp Work" isn't listed in VPN/Sentry and "Island" inside of VPN/Sentry does not show any addresses, like it never connects to the internet.

Or should I copy VPN/Sentry to Island? (Does this make any problems with rules which are probably per account/device?)
[Paid Software Announcement and Discussion] M66B:
I have just released

beta

version 0.37.

It may take Google's server a few hours to make this release available everywhere.

This version fixes the problem [MENTION=4724631]Loader009[/MENTION] reported, adds support for remote management (in development) and allows the VPN to be set as always-on VPN with the option 'Block connections without VPN' enabled (Android Oreo only). [MENTION=4958579]Primokorn[/MENTION] the hosts rule icon has been updated in this version.

The privacy policy has been updated for remote management (nothing changes if you don't enable this option).
[Paid Software Announcement and Discussion] M66B:
The work profile has a separate contact database, which is likely empty.

You should install and activate VPN/Sentry in the work profile.
[Paid Software Announcement and Discussion] Bojan79M:
It is posible to lock down traffic like in NetGuard and allowing only specific app?

I like that lock.
[Paid Software Announcement and Discussion] Loader009:
I know, I already populated it but it still shows me phone-numbers instead of the names... I will do some checks but this is no problem on which you have to work on.

I will do that and report back.
[Paid Software Announcement and Discussion] M66B:
Unlike NetGuard, VPN/Sentry has profiles, so you can create your own lockdown profile. At the upper left you can select profiles. Select one and tap on the top Wi-Fi or mobile data icon and set the default to block everything. You might want to change the profile name to 'Lockdown' or something. Press 'OK' and allow only the apps you want.
[Paid Software Announcement and Discussion] Loader009:
Ok, copy VPN/Sentry to Island works but you have to login in "Island Play Store" to be authenticated for unlimited traffic.

Still, two VPNs on one devices looks a bit overpowered.

But better than nothing. I am going to uninstall WhatsApp in nearly 9 month, so this is (for me at least) only a temporary solution for WhatsApp.
[Paid Software Announcement and Discussion] RBJ26:
Updated to .37 and still the same.

I tried to send a log, but it won't save, as it's "greyed out"

I was able to save a screen shot of the error message, and it

Says: connect ssl success -1 error 5: error: 0000005:lib (0):DH lib

Hope this helps.
[Paid Software Announcement and Discussion] M66B:
Only one of the profiles will be active, so no worries about two VPNs running simultaneously.
[Paid Software Announcement and Discussion] M66B:
SSL_connect returning -1 means: "The TLS/SSL handshake was not successful, because a fatal error occurred either at the protocol level or a connection failure occurred." (https://www.openssl.org/docs/man1.1.0/ssl/SSL_connect.html)

It looks like the DH key exchange fails.

Are you sure you have a "clean" connection? So, no proxies, man-in-the-middle, etc.

Which device / Android version are you using?
[Paid Software Announcement and Discussion] Loader009:
Just to be sure, meaning that if I setup all the rules on one VPN/Sentry (mainland), they are also working for the other instance (island)?
[Paid Software Announcement and Discussion] M66B:
No, they are completely separated. Think of a profile as another device.
[Paid Software Announcement and Discussion] RBJ26:
Yes, connection is clean. I get the same result with wifi or t-mobiles network.

The device is a Nexus 5x and I'm running PureNexus ROM 7.1.2 with Franco kernel ver #43

No problems with Netguard.
[Paid Software Announcement and Discussion] M66B:
NetGuard doesn't connect to a remote VPN server, so you cannot really compare VPN/Sentry with NetGuard in this regard.

In any case something on your device or on the path to the VPN server is blocking a secure connection to the VPN server as this works for many others without problems.

Try to capture a logcat using adb from you PC. It seems your ROM doesn't include the Storage Access Framework, which is odd.
[Paid Software Announcement and Discussion] RBJ26:
Ok, thanks for looking into it. I'll mess with it some more,

And when time permits, I'll try and get a log.

I've got a LG G3 lying around,and just for the heck of it, I'll try it on that and see if I've got any issues with my network.

Cheers
[Paid Software Announcement and Discussion] M66B:
If I were you, I would also check with the LG G3 to make sure there is nothing strange going on.
[Paid Software Announcement and Discussion] RBJ26:
Installed on the G3 with no issues. Hmmmm.
[Paid Software Announcement and Discussion] M66B:
You don't need to worry about your internet anymore in any case.

Now the question is, what is wrong with the ROM? Why does the TLS handshake fail?

Edit: VPN/Sentry comes bundled with the latest version of OpenSLL, so it doesn't depend on the SSL implementation of the ROM.
[Paid Software Announcement and Discussion] Loader009:
There is something I don't understand, like something is going completely wrong...

I installed VPN/Sentry on island.

I did (as on mainland) set default main profile to deny connections for WiFi and mobile.

Then (while everything is blocked) I allowed WhatsApp, Google Play Store and Google Play services to connect to the wild.

But now everything is still denied, the UI shows that the named apps are free to connect.

Real-time log shows another story, it shows (the symbol for) WiFi blocked but allowed when screen is on...

WhatsApp seems to not be able to connect, I tried to change my "about" (silly name for status in my profile) but it doesn't do anything.

edit: same to google play store, shows me a not connected message.

I am confused, I don't know what is going on, export and import settings didn't help.
[Paid Software Announcement and Discussion] M66B:
I guess you'll have to look into this "but allowed when screen is on...".

Post a screenshot, maybe that helps.
[Paid Software Announcement and Discussion] RBJ26:
That's a good question. Should the app have any permission(s)?

In the app info screen it shows as: no permissions requested, and is greyed out.
[Paid Software Announcement and Discussion] M66B:
See here for all the permission details: https://www.vpnsentry.net/faq/#FAQ25
[Paid Software Announcement and Discussion] RBJ26:
Yeah, I saw that but I was just asking.

Must be something with my ROM.

Thanks for trying Sir.
[Paid Software Announcement and Discussion] Loader009:
It's the first thing I checked.

Meanwhile I froze WhatsApp, checking everything with the Play Store, maybe later with a browser.
[Paid Software Announcement and Discussion] M66B:
The real-time log screenshot shows a profile rule was applied, which is not consistent with the rules screenshot, because the profile show blocked as default and the app shows allowed.

Where do you end up (and especially which uid is being searched on) if you tap on the real-time log entry?

To be sure I have tried with a profile default blocked and an app allowed and for me that works as it should.
[Paid Software Announcement and Discussion] Loader009:
Look at the screenshots, actually the first one is the real-time log and the second one after tapping on the entry.
[Paid Software Announcement and Discussion] M66B:
Although I was not able to reproduce the problem, I believe the problem was caused by a bug in caching things on the server. This should be fixed now. Could you please try again and let me know if it works correctly now?
[Paid Software Announcement and Discussion] Loader009:
Problem solved.
[Paid Software Announcement and Discussion] ik8vwa:
Does vpn/sentry provide ads filtering like netguard? And what's the exit ip location?

Thanks
[Paid Software Announcement and Discussion] M66B:
Yes, VPN/Sentry provides ad blocking. This can be enabled in the profiles (tap on the top WiFi or mobile data icon).

There is currently one server in France, but I am planning to add one in Canada and later in Singapore too, depending on the interest in VPN/Sentry.
[Paid Software Announcement and Discussion] sotoLOTO-:
A question from the NetGuard forum, which is also applicable here - I have blocked and disabled the Google Play app since I use something else. In that regard I'd like to ask if there is any way to sign up to a mailing list or a service (or just about anything) that notifies upon new releases and updates of VPN/sentry. If the answer is again GitHub, then at least in NetGuard I didn't see any toggle or setting for update notification. So is there just none or how does it work?
[Paid Software Announcement and Discussion] M66B:
VPN/Sentry is not supported outside the Play store.
[Paid Software Announcement and Discussion] Droidphilev:
Hi,

Would it be possible that the app doesn't start after importing some settings?

It would be very nice to have some kind of sorting TBH. For example: bypassing apps at end of the list.
[Paid Software Announcement and Discussion] M66B:
Export your settings with VPN/Sentry disabled to import without enabling. This way everybody can choose what should happen on import.

Sorting on changed has a disadvantage that has been discussed here not too long ago.
[Paid Software Announcement and Discussion] Droidphilev:
OK, i understand about exporting.

About the sorting: it was there before i have read. Still i have read but don't understand the reason why it's changed. I don't see the link between a long list of apps and sorting TBH.
[Paid Software Announcement and Discussion] M66B:
The problem is that items change places on changing settings. This makes it difficult to do the initial setup.

I want to keep VPN/Sentry as simple as possible, which means I want to keep the number of UI elements to a minimum.
[Paid Software Announcement and Discussion] Droidphilev:
Hmm, ok. What if initial setup is done while the VPN isn't connected? I mean: the sorting would be done after (first) sync with server.
[Paid Software Announcement and Discussion] M66B:
Syncing is done in real time.
[Paid Software Announcement and Discussion] Droidphilev:
Yes, i know but i set things up with the app disabled. No syncing at that moment.
[Paid Software Announcement and Discussion] M66B:
Another reason why encrypting your connection is more than a good idea:

https://www.krackattacks.com
[Paid Software Announcement and Discussion] Bojan79M:
Block adds like in NetGuard? It is possible?
[Paid Software Announcement and Discussion] Primokorn:
You can apply a hosts file for each profile and WiFi and/or mobile data. Same source as NetGuard: https://github.com/StevenBlack
[Paid Software Announcement and Discussion] M66B:
Please read a few comments back where I explained in detail how to enable this.
[Paid Software Announcement and Discussion] RBJ26:
Ok, did some testing, and I've found that it may be Franco kernel.

I flashed the stock kernel, and the problem seems to be fixed.

I'm going to run the stock kernel for a while and see if it stays working.
[Paid Software Announcement and Discussion] M66B:
VPN/Sentry just sets up a standard TLS connection, so this is odd. Other apps might have trouble connecting too.

Although I have developed and published my own custom kernels, I am not a fan of custom kernels anymore. There is hardly a need for them anymore nowadays.
[Paid Software Announcement and Discussion] RBJ26:
Well in my case, I need color control for my Nexus.

It looks terrible without it.

I tried using some of the older versions, and all did not work, only stock.

I'm currently looking for another kernel that might work with this app, and give me color control.

Edit: VPN/sentry is now working properly.

Edit 2: Elemental kernel is working fine, Color control

works as well. Guess I'm all set.
[Paid Software Announcement and Discussion] Loader009:
I've got a suggestion.

If you think it isn't too much, you could add a whois button (which opens a link to a whois page with a browser) at the window of Block/Accept/default of an address.

I know you want it to keep simple, so even any unnecessary feature might not have a chance.
[Paid Software Announcement and Discussion] M66B:
I have just released

beta

version 0.38.

It may take Google's server a few hours to make this release available everywhere.

Besides a few minor bug fixes and improvements, the old style menu has been replaced by the modern navigation drawer. Feedback about this is welcome.

Please report any issue you encounter so it can be fixed.
[Paid Software Announcement and Discussion] boboysdadda:
Just a heads up

Mobile Iron provides a service as part of their suite called Sentry VPN. As possibly a similar service you may want to consider your name. I don't know if there could be any infringement issues with similar names doing similar things.

https://www.mobileiron.com/en/products/sentry
[Paid Software Announcement and Discussion] M66B:
Since they don't offer a concrete product the infringement would be the other way around. Anyway, VPN/Sentry is not a registered trade name.
[Paid Software Announcement and Discussion] Primokorn:
I like few modern things and it doesn't include the nav drawer :)

At first, the icon to access the drawer is at the opposite of my fingers so I often have to use a pointer of LMT launcher.

Moreover I don't think it's clear for a newcomer that some lines help to enable/disable features and others open a new window. A few checkboxes are welcomed to clear things up.
[Paid Software Announcement and Discussion] M66B:
Thanks for your feedback. I will try to add check boxes, but this appeared not to be trivial.

I agree that not all modern things are great. However, I even get complaints that NetGuard is not completely material design.
[Paid Software Announcement and Discussion] Primokorn:
Some folks want the bleeding edge features without wondering if it's better or not... "I want material design because Google says it's the best UI for my Android device. Period"

(sigh)

Be sure that I'll complain too. jk :D
[Paid Software Announcement and Discussion] sotoLOTO-:
Thanks for the article. Nice read indeed. However, how does VPN/Sentry fare against this here https://arstechnica.com/information...ns-cant-be-trusted-to-make-users-more-secure/ from that very same article.
[Paid Software Announcement and Discussion] M66B:
None of the points do apply to VPN/Sentry. Your traffic will be properly encrypted, will not leak and will not be tracked.

There are leak testing tools and tools to inspect your traffic if you want to check this.

Edit: since I can image more people asking/wondering about this, I will later add a FAQ about this.

Edit: maybe it does say something I am using VPN/Sentry myself for security reasons too.
[Paid Software Announcement and Discussion] sotoLOTO-:
I appreciate your feedback (and your work), sir!
[Paid Software Announcement and Discussion] M66B:
A similar feature on NetGuard was broken for some time, but nobody complained about it, so it is reasonable to assume it isn't used much. Since you can always investigate an address in other ways, I will not include this feature in VPN/Sentry.
[Paid Software Announcement and Discussion] sulasno:
Feedback

Based in Thailand, the speed is disappointing. Looking forward to the server in Singapore. Fastest speed in the world?

Ads working as advertised
[Paid Software Announcement and Discussion] M66B:
Currently there are not enough subscriptions to justify more servers. Also, VPN/Sentry is still in beta testing phase.
[Paid Software Announcement and Discussion] RBJ26:
[MENTION=2799345]M66B[/MENTION] Is the subscription, for one device only, or all under a single gmail account?
[Paid Software Announcement and Discussion] M66B:
The subscription is for the Google account.
[Paid Software Announcement and Discussion] RBJ26:
Ok, thanks for the quick reply.
[Paid Software Announcement and Discussion] Droidphilev:
Hi,

I'm getting severe crashes. At first i thought it was something with the custom rom i use on my Shamu. After a while apps started crashing one by one. This happend 3 days in a row. Today i flashes a stock rom on my Athene with only a few apps installed (not realy the same as on my Shamu). Suddenly also there apps start to crash. These apps are bypassing the VPN btw. I don't know how to fix this.