[Samsung Galaxy S 5 Unified Development] fitittome:
Netguard Firewall

I'm looking at this ongoing problem with Netguard. I just doesn't work on 15.1 (or the earlier unofficial version), it did however work on stock Oreo on my old Nexus 5x.

https://www.netguard.me/

I can see (using ip rule show) that the rules are being set.

ip rule show
0: from all lookup local
10000: from all fwmark 0xc0000/0xd0000 lookup legacy_system
10500: from all oif dummy0 uidrange 0-0 lookup dummy0
10500: from all oif wlan0 uidrange 0-0 lookup wlan0
11000: from all iif tun0 lookup local_network
12000: from all fwmark 0x0/0x20000 iif lo uidrange 0-999 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 1003-1026 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 1028-1999 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 2001-10000 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 10075-10079 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 10081-10096 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 10098-10103 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 10105-10113 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 10115-10117 lookup tun0
12000: from all fwmark 0x0/0x20000 iif lo uidrange 10119-99999 lookup tun0
12000: from all fwmark 0xc006b/0xcffff lookup tun0
13000: from all fwmark 0x10063/0x1ffff lookup local_network
13000: from all fwmark 0x10065/0x1ffff lookup wlan0
13000: from all fwmark 0x1006b/0x1ffff uidrange 0-999 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 1003-1026 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 1028-1999 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 2001-10000 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 10075-10079 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 10081-10096 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 10098-10103 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 10105-10113 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 10115-10117 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 10119-99999 lookup tun0
13000: from all fwmark 0x1006b/0x1ffff uidrange 0-0 lookup tun0
14000: from all oif dummy0 lookup dummy0
14000: from all oif wlan0 lookup wlan0
14000: from all oif tun0 uidrange 0-999 lookup tun0
14000: from all oif tun0 uidrange 1003-1026 lookup tun0
14000: from all oif tun0 uidrange 1028-1999 lookup tun0
14000: from all oif tun0 uidrange 2001-10000 lookup tun0
14000: from all oif tun0 uidrange 10075-10079 lookup tun0
14000: from all oif tun0 uidrange 10081-10096 lookup tun0
14000: from all oif tun0 uidrange 10098-10103 lookup tun0
14000: from all oif tun0 uidrange 10105-10113 lookup tun0
14000: from all oif tun0 uidrange 10115-10117 lookup tun0
14000: from all oif tun0 uidrange 10119-99999 lookup tun0
15000: from all fwmark 0x0/0x10000 lookup legacy_system
16000: from all fwmark 0x0/0x10000 lookup legacy_network
17000: from all fwmark 0x0/0x10000 lookup local_network
19000: from all fwmark 0x65/0x1ffff lookup wlan0
21000: from all fwmark 0x6b/0x1ffff lookup wlan0
22000: from all fwmark 0x0/0xffff lookup wlan0
23000: from all fwmark 0x0/0xffff uidrange 0-0 lookup main
32000: from all unreachable

But (using ip route) the routing table does not appear to get updated.

ip route
192.168.1.0/24 dev wlan0 proto kernel scope link src 192.168.1.3

When I look at the logcat I can see:-

09-04 13:46:12.226 D/NetlinkEvent(1394): Unknown ifindex 32 in RTM_DELADDR
09-04 13:46:12.239 I/WifiService(1501): getConnectionInfo uid=1000
09-04 13:46:12.230 D/NetlinkEvent(1394): Unknown ifindex 32 in RTM_DELADDR

I've attached the relevant bit of the logcat.

Can anyone point me where to look for that RTM_DELADDR issue so I can dig a bit deeper? I'm guessing that there are a larger number of rules (over 32) than expected.