yashsingh1/xdaforums huggingface dataset:
[G1 Apps and Games] Rhye20:
Similar question here.

I have enabled "any" for wi-fi and only "10043: mail" for 3G.

Despite that, around 100kb per day are leaking (and it costs me money). With "PhoneUsage" application, I can see that "Task Manager" and "Settings" are responsible.

Any developer can help?
[G1 Apps and Games] Sakaschi:
i have a problem.

Error applying iptables rules. exit code -1

i have Samsung galaxy s2.

what can I do?
[G1 Apps and Games] MicioMax:
Just thank you

Just to thank you for your awesome work :)

I spent 7 days (since I have my Galaxy 2) fighting with my provider about data traffic drain... And we've here really bad mobile networking plans, 0.5 Eur/Mb if you run out of initial bonus. Your app seems able to solve all that ;)

Thank you again !

Max
[G1 Apps and Games] Klaus_Trophobie:
Hi Rod.

I´m having the exact same problem with Galaxy i9000 with chainfire root kernel XXJVO and found out that exactly 26 rules can be set in the whitelist. One more and the error -1 shows up as desribed by all the others...

BTW thanks for the great work in this free app. We really appreciate your work done here...
[G1 Apps and Games] Klaus_Trophobie:
could this lead to a fix?

http://xdaforums.com/showpost.php?p=12527335&postcount=1212

It´s for JVK though.... so I haven´t tried with JVO
[G1 Apps and Games] deepflash:
same here on my Samsung Galaxy S2:

After a certain number of rules, I get the -1 exit error.

Below that number, I get a positive response.
[G1 Apps and Games] asicman:
Using JVK with CF, but no luck here :(
[G1 Apps and Games] gamaTeam:
I find out that version 1.5 (previous version) is working on JVO, if that help somehow.

Configuration:

-stock JVO

-CF ROOT kernel
[G1 Apps and Games] Scine:
Use the widget to activate Droidwall.
[G1 Apps and Games] xda2jojo:
Error report:

"error applying iptables rules. exit code: -1

iptables v1.2.10"

Device: GTp1000(2.3.3) CF Rooted(JPC)
[G1 Apps and Games] Quantumstate:
You guys with errors need to switch to Rodriguez's MIUI ROM. Absolutely no problems, and it is the most advanced phone I've ever used.

And thanks to Rodrigo for DroidWall. Out of 60 apps it is my favorite. Keeps G**gle's prying eyes to themself.

I tried to make a donation by using the "Please, consider donating" link, but Paypal coughs an error on the first screen:

"Sorry — your last action could not be completed

If you were making a purchase or sending money, we recommend that you check both your PayPal account and your email for a transaction confirmation after 30 minutes."

Edit: must be something to do with Konqueror... used Iceweasel and could then make the donation.

Hey why was DroidWall removed from the Market?
[G1 Apps and Games] :
hi,

in galaxy tab with overcome 2.0.0-gold and koxudaxy 3.0.8-c kernel,

fails when apply a large number of rules in white list.

error -1 is reported. I have 84 mg of free space in /system.
[G1 Apps and Games] :
hi,

I attach the applied rules.

seem to me that I have a error...

there are simple rules.

white list and allow all.
[G1 Apps and Games] shazoom:
@quantumstate I still see droidwall in the market, even with market enabler.
[G1 Apps and Games] Quantumstate:
You mean you see DroidWall again. It was missing from the Market for a while.
[G1 Apps and Games] hasselhoph:
Droidwall - which services required for Pandora?

Since running Droidwall, my Pandora comes up to the station list, but when I click a station, it goes to the play screen for a second then flicks back to the station list.

Something it needs for its advertisements is being blocked, I am guessing. Anybody know what it is? If I enable everything on WiFi, then it seems to work. So which specific services do I need to allow to make Pandora work?
[G1 Apps and Games] Quantumstate:
In DroidWall turn on the log. Then run (the abusive) Pandora and check the log.
[G1 Apps and Games] hasselhoph:
Checked the log as suggested. Pandora needs Media Services to run.

Fixed!
[G1 Apps and Games] stranxk:
Thank you

i just want to say thank you for this great app! :)
[G1 Apps and Games] Quantumstate:
Yep, DroidWall is muchly appreciated. Tribute paid.
[G1 Apps and Games] otonvm:
Hay!

Really cool app and it work's really well. Too well in fact, I couldn't connect to market and since there were 2 days between me installing your app and using market I completely forgot about it...

I guess it's another sign of a good app... :p

Anyway, while enabling market 2 cosmetic suggestions came to mind:

one would be presets for some common use cases, a wizard or something like it,

another would be an easier way to find an app by name like the alphabet column in the address book.

Again thanks for a good app!
[G1 Apps and Games] batou42:
Simple and easy to use

For some one who wants to manage his data traffic this app is excellent. For thous who wants some extra features you can try LBE Privacy Guard.

Personally I was using droid wall from version 1, only to switch to LBE Privacy Guard after the location leakage problem I've read on the xda-portal.
[G1 Apps and Games] kerrglen:
Feature request

First of all this is one of the best Android app, I love it.

Only small gripe I have is that because I travel abroad a lot I have to constantly modify the 3G rules as I allow different things to work when in my home country as opposed to being abroad.

Any chance you can add another set of rules for 3G so that I can switch between them when I am at home or away?
[G1 Apps and Games] KRisM79:
Hi,

i have a problem with my VOIP under Gingerbread (2.3.4).

If the firewall is enabled, then nobody can call me. Is there any possibility to solve this problem?

Thank you anyway
[G1 Apps and Games] shazoom:
You could always use something like titanium backup to save a copy of the configuration. The pro version might let you keep a couple of copies of your configuration but I don't know.
[G1 Apps and Games] lynnjew:
thks 4 this work, it's cool

i think if it could show the icon of each app will be better.:-)
[G1 Apps and Games] Isadora:
I second the request for separate 3G roaming rules :) would be excellent if the switch between home network/roaming could be automatic too.
[G1 Apps and Games] aussiebum:
Posting here as a FYI to anyone with Exit Code -1 error after clicking on Apply Rules (and happen to have a Samsung Galaxy S2).

It seems DroidWall v1.5.1 gets that error when the directory /system/lib/modules doesn't exist (like in VillianROM 2.0 for example). Creating that directory fixed the issue for me.
[G1 Apps and Games] daniel.weck:
IT WORKS !!! :)

Awesome. Thanks a lot!
[G1 Apps and Games] guv.:
Tried that on my Galaxy S1 but doesn't work, I still get the Error Code -1.

I'm on Stock JVQ Firmware with Galaxian Kernel.
[G1 Apps and Games] rodrigo.zr:
Could you please try the development version which I attached here:

http://code.google.com/p/droidwall/issues/detail?id=165#c8

Perhaps a combination of: new iptables + creating /system/lib/modules might work, who knows ;)
[G1 Apps and Games] Tangopro:
Yllier's Firewall IP?

Droidwall so far is good and appreciate the dev's work but why doesn't something like Firewall IP exist for Android? Would even be willing to pay for a "Droidwall Pro" with features like Firewall-IP on iOS. The reason is granular control. For example: It gives the ability to block a particular DN/IP/IP range. It gives controls over apps to allow them needed network access to function properly but surgical blocks their access to 3rd party ads/static servers. It would be great to see further development in this area (unless something similar already exists?).

PS Apps should not be allowed to scan your address book and then provide the data to third parties. Sayin...
[G1 Apps and Games] guv.:
Tried the dev version with and without the modules directory, doesn't work in either case, I still get the -1 error.
[G1 Apps and Games] rodrigo.zr:
:(

Are you able to execute the "show rules" function with success?
[G1 Apps and Games] guv.:
Yes that works. Looks good until I scroll all the way to the end, there it says repeatedly "modprobe: chdir(2.6.35.7-I9000XXJVQ-CL281085): No such file or directory". Don't know if thats normal or not.
[G1 Apps and Games] rodrigo.zr:
Humm, that is interesting.

You could try creating the following folder to see if it changes anything:

/system/lib/modules/2.6.35.7-I9000XXJVQ-CL281085/

:)

EDIT: Please also check that the following folders are created:

/system/modules/

/system/modules/2.6.35.7-I9000XXJVQ-CL281085/

(without the /lib/).

;)
[G1 Apps and Games] guv.:
/system/modules allready existed, so I created both /2.6.35.7-I9000XXJVQ-CL281085/ folders, one in lib/modules and on in modules, but it doesnt make a difference. I still get the same -1 error and also the same modprobe: chdir error
[G1 Apps and Games] rodrigo.zr:
I guess I am out of ideas for now, lol.

Sorry that I couldn't help you (at least for now) :(
[G1 Apps and Games] guv.:
I think although I get the error -1 something gets written to the iptables file, because when I execute the "show rules" function the length of the list changes. I noticed, that during the attempts with creating the different directories, the list got shorter. After a restart it was more or less empty (except for the modprobe errors), but after applying the rules once more it got longer.
[G1 Apps and Games] rodrigo.zr:
Yeah... the "-1" error is actually a timeout (DroidWall detects that the root script is taking too long and aborts it).

It seems that on some devices, iptables just gets "stuck" at random after some consecutive calls :|

This seems to be related to a "modprobe" call that iptables does on initialization, but I'm not sure.

If that is really the case, the problem is on modprobe which gets stuck randomly.

I will try to add a simple "sleep" between iptables calls tomorrow and will post a version for testing here ;)
[G1 Apps and Games] guv.:
Allright, thanks. I'll check back tomorrow and see if it works.
[G1 Apps and Games] rodrigo.zr:
Okay, here you go!

The attached version issues a "usleep" command between each iptables call.

I have no idea if this will work or not, but it doesn't hurt to try :D

Please note that you need "usleep" (provided by busybox) to be installed on your system. If you don't have it, just install "BusyBox" from the Market.

Please let me know the results ;)
[G1 Apps and Games] guv.:
I checked and usleep is present in the busybox I have installed, but unfortunatly it still doesn't work with the new test-version.
[G1 Apps and Games] rodrigo.zr:
Another thing you can try is to manually run the root script generated by DroidWall (right after trying to enable the firewall, and getting the error).

On the test version, this script is located at:

/data/data/com.googlecode.droidwall/app_bin/droidwall.sh

So, to run it using adb shell, for example:

$ su
# cd /data/data/com.googlecode.droidwall/app_bin
# ./droidwall.sh

Check how long it takes to run... and whether it gets stuck "forever" or not...

Starting to run our of ideas again :p
[G1 Apps and Games] guv.:
Manually starting the script just returns an endless stream of modprobe errors.

EDIT: Ok, its not endless. I used Modusl Blacklist and started the script with 11 Apps in it (9 is the limit with which droidwall doesnt return error -1 for me). I started the shell script with terminal emulator and got a bunch of modprobe errors but the script finished and it looks like its working. I put opera on the list and it returns a network error after applying the script.
[G1 Apps and Games] rodrigo.zr:
Hummm.... I think I know what is going on!!!

I will post another development version here soon, which will hopefully work :cool:
[G1 Apps and Games] guv.:
I tried something else, this time I ran a script which had worked with droidwall (containing only 9 apps) and I got the same modprobe errors, just less of them, so they dont appear after a certain number of apps, they are always there. I guess the problem are not those errors themselves, but how droidwall handles them.
[G1 Apps and Games] rodrigo.zr:
That is right! I changed the way that DroidWall reads the process output.

Can you please test the attached development version? I am confident it will work this time!! :D
[G1 Apps and Games] guv.:
Yeah Baby! It's working fine again.
[G1 Apps and Games] rodrigo.zr:
Great!!!

Thank you very much for your testing :D:D

I will post an official update on Android Market later today ;)
[G1 Apps and Games] rodrigo.zr:
New version

DroidWall 1.5.2 has been published on both the Android Market and the project's website!

Go get it while it is fresh! :D
[G1 Apps and Games] Pyrroc:
Huuuuge difference, very snappy now. No errors any longer with more than ~14 rules.

Thank you, thank you, thank you. :D

-Pyrroc
[G1 Apps and Games] squirell:
repost, since noone replyed..

only different thing is that the message now says iptables v1.4.10

and i'm on froyobread 1.21.

any suggestions? :/
[G1 Apps and Games] rodrigo.zr:
This is the first item on the FAQ:

http://code.google.com/p/droidwall/wiki/FAQ

Your kernel does not support iptables. The only possible solution is to update your kernel (using Kernel Manager Lite, for example) or flash a new ROM.
[G1 Apps and Games] squirell:
wow, i feel stupid. have browsed the whole internet but haven't thought of checking the FAQ. -.-

anyway, thanks for the pointer, I'll try to do the stuff above. ^^
[G1 Apps and Games] Strelock:
Rodrigo, thanks for a great app! I've noticed some UIDs leaking through droidwall both on WiFi and 3G. I've left the description on the google code page.

BTW, anyone see 1000 and 1001 UIDs leaking? Interestingly enough I can see some of 1000's traffic also blocked according to the log...

EDIT:

It doesn't seem to be an issue. Great explanation from dev here
[G1 Apps and Games] claus1953:
I was using this app through its widget, but the widget is not working anymore since i changed the ROM to the one in my sig. I have always to open the app to activate/desactivate the wall. Have even removed and reinstalled the app with no avail.
[G1 Apps and Games] JazonX:
Does anyone have a configuration guide to droidwall ?

* Specifically, What we should disable/enable and What each application name in the droidwall list means/does to the system ?

* What are the identified potential threats in the system that we should block, and what I should never block ?

Thanks and Best Regards,

JazonX
[G1 Apps and Games] Haphim:
Personally, I use it in Blacklist mode. All garbage apps installed by the provider get uninstalled.

The O/S itself, I don't usually worry about.

After that, I run down the list and look for apps that have no business connecting to the internet. QuickOffice, for example. Once I've dealt with what the phone comes with, I just apply the same logic whenever installing new apps.

Firefox? Sure, it needs internet access.

A gallery viewer? Nope, no business connecting - so it gets blacklisted.

Just use your common sense.
[G1 Apps and Games] zman519:
Gallery can sync with picasa. ;-)

Sent from the Drivers Seat of my Suby txting and Driving doing 100MPH+ in a school zone! Ha.
[G1 Apps and Games] Haphim:
I should have clarified - yes, an app can have an excuse to get internet access. But if it's something I would never use, or if I simply don't trust the app/developer, it gets blacklisted.
[G1 Apps and Games] walts:
I just installed an app that is generating a lot of blocked packets at the firewall. Before I open the firewall to the app, I'd like to have an idea of what it is trying to send. Is there a way to capture the actual packets that have been blocked?

Walt
[G1 Apps and Games] JazonX:
Thanks a lot Mate. Helped big time. I was in White List Mode, Now switching Back.

Oh, and Btw,

Common Sense is that which tells us the World is flat. ;-)
[G1 Apps and Games] Haphim:
You're very welcome.

And I figured that people take less offense at "use your common sense" as opposed to "use your brain". ;)
[G1 Apps and Games] zman519:
Yep I feel the same. Thats why I love droidwall.

Sent from the Drivers Seat of my Suby txting and Driving doing 100MPH+ in a school zone! Ha.
[G1 Apps and Games] galaktik:
------------------
[G1 Apps and Games] nfsnfsnfs:
I have stock 2.2 rooted On HTC desire . Installed Droidwall ,enabled it .

Now only under whitelist ,clicked internet and did apply rules .Nothing else checked or clicked .

Now I go back and look the Blacklist ,the internet is clicked there also .why ? If I uncheck at whitelist ,it get unchecked at blacklist also .

I am not following this !.:confused:

Why does the application gets checked at both the places ,when I check at only one place (either black or white list ) .?

thanks
[G1 Apps and Games] rodrigo.zr:
I believe you misunderstood the functionality... DroidWall does not keep two separated lists.

You must select one of the two operation modes: either white-list or black-list

If you select black-list, it will block the selected apps.

If you select white-list, it will allow the selected apps and block everything else.
[G1 Apps and Games] haword:
what i can download source code from google svn? When i try check, show error -

In directory 'D:\SVN\droidwall\external\iptables\extensions'

Can't open file

'D:\SVN\droidwall\external\iptables\extensions\.svn\tmp\text-base\libxt_TOS.c.svn-base':
[G1 Apps and Games] rodrigo.zr:
This happens sometimes when checking out code from Google's SVN... :( just delete the whole folder and try again. If the problem persists, just try again later.
[G1 Apps and Games] masterchop:
Great app i just install it, i hope to see some battery changes, but i am happy i can stop the 3rd party apps from been online.

we never know what we install when we install CRACK APK's from Non-official markets.
[G1 Apps and Games] VerizonKoolaid:
only I can eat my cake?

I use this in whitelist mode. I am a big fan of deny deny deny.. unless explicitly allowed.

Are there any plans to block/allow

application:port

application:address:port

address

address:port

There are a few applications I would allow but only port 443. And there are dozens of addresses I would block.

Are there plans to support simultaneous whitelist and blacklists?

the options of REJECT or DROP would be nice, too

https://github.com/CyanogenMod/android_external_iptables

https://github.com/CyanogenMod/android_external_iptables
[G1 Apps and Games] CyberAce:
hello,

since I use the new firmware 2.3.5 (I9000XXJVS) for my galaxy with the Semaphore JVS 1.7.0 Kernel, the firewall doesn't work. I get this massage:

"Error applying iptables rules.

Exit Code:2

iptables v.1.4.10

iptables v1.4.10:can't initialize

iptables tabel 'filter' Table does not exist (do you need to insmod?)

Perhaps iptables or your kernel needs to be upgraded."

Has someone a solution for my problem?
[G1 Apps and Games] Dr.F:
1. can't initialize iptables table 'filter': Table does not exist (do you need to insmod?) Perhaps iptables or your kernel needs to be upgraded.

This error message unfortunately means that your kernel does not support iptables/netfilter, so DroidWall will not work.

The only possible solution is to flash a customized ROM (or kernel) with full netfilter support.
[G1 Apps and Games] Steven6489:
Would be great if Droidwall can export/import rules..as everytime i flash new custom rom..I need to reconfigure Droidwall..because the setting I saved previously is not match with new rom even I restore with Titanium Backup..
[G1 Apps and Games] capslock66:
iptables

Hi.

I am working on a reverse tethering program and use some of your code.

80% is already done.

This is the command i use to catch all connections :

iptables -t nat -A OUTPUT -p tcp --dport 0:65535 -j LOG --log-uid --log-level debug --log-prefix \"MYPREROUTING \" --log-ip-options

That work , but I need to call dmesg to read messages. (quite slow)

I would like to store message on another file or sql dabase.

I tried to use ULOG with this command :

iptables -t nat -A OUTPUT -p tcp --dport 0:65535 -j ULOG

but it seams that ULOG is not compiled into iptables :

-> "iptables: No chain/target/match by that name"

I am under windows and downloaded cygwin and the NDK,

but I don't know how to compile iptables to add ULOG

I know it's not related to your application, but do you have any idea ?
[G1 Apps and Games] walts:
I think you'll find what you are looking fore here:

http://code.google.com/p/droidwall/wiki/CustomScripts

I'm exploring the same options. Let us know how it works for you.

Walt
[G1 Apps and Games] starbase64:
Hi,

please add a query for direct app questions.

For example the superuser app or my picture :-)

with friendly greet

starbase64
[G1 Apps and Games] claus1953:
Upgrade to semaphore 1.8 here you can choose to support netfilters I did it and now droidwall works again
[G1 Apps and Games] rodrigo.zr:
Sorry that I took so long to reply... Pretty busy times ;)

The iptables binary that I ship with DroidWall has support for all targets compiled built-in (I compile it myself). That message actually means that your KERNEL does not support ULOG - so the only way to make it work is to flash a new kernel.
[G1 Apps and Games] starbase64:
Hi rodrigo,

my suggestion is not possible or not interesting?

with friendly greet

starbase64
[G1 Apps and Games] mnjm9b:
I like the idea...

However, the problem is it would require a service to run in the background to detect if an app is requesting internet use.

As of now...the droidwall app only is active when setting new rules...after that it closes.
[G1 Apps and Games] XKL:
Hi,

I was wondering if someone could explain to me if I should let (linux) kernell still have access to internet. I dont know why its trying to access internet.

thank you!
[G1 Apps and Games] zman519:
I think cifs manager uses it. Any one want to chime in on that

Sent from the Drivers Seat of my Suby txting and Driving doing 100MPH+ in a school zone! Ha.
[G1 Apps and Games] rodrigo.zr:
Hello, this is unfortunately not possible at this moment. Perhaps in the future ;)

Take a look here for more information:

http://code.google.com/p/droidwall/issues/detail?id=81#c1
[G1 Apps and Games] EEngineer:
This seems to be really nice except I can't switch between blacklist and whitelist modes. Maybe my fingers are too big, but I keep stabbing at the word "mode" and nothing happens.

It would be nice if Mode was under the Menu button.
[G1 Apps and Games] Haphim:
Have you tried tapping "whitelist" rather than the word "mode"?
[G1 Apps and Games] Neejay:
Does anyone know what should be added to the whitelist to download Market apps? I have the market enabled, but I can't download apps.
[G1 Apps and Games] hellios1:
Download manager.

Sent from my Nokia Morph using my fingers.
[G1 Apps and Games] [] AL []:
Hi Rodrigo how are you?

and first of all, thanks for your excellent software; I've been using it since almost day one on my phone. I've also waited until CM7 fix their rom to be fully compatible with Droidwall to make the switch from Froyo. Just awesome stuff and a really big thank you again.

First time today I read your thread here and I'll have some catching up to do on the reading..

But regarding the topic discussed above, I've also wondered at some point why the functionality was limitted to only one of the two modes. Here's one situation where I would find useful to be able to use the two list simultaneously:

Let's say I want to block all 'data' and '3G'; since I usually work with the blacklist mode; I simply go on my blacklist screen and check 'Any application' and it's done. But what if I would only like to allow MMS sending on 2G data?

Either I unselect what I did earlier and openwide the 2G data door or I go ahead in a painful task of selecting all my apps one by one except the MMS relevant entry (Messaging -I believe?).

In this case, selecting 'Any application' in 3G/data in blacklist mode and then switching to whitelist where I could also ONLY check the MMS entry to do the trick would be really nice...

Doing so could also maybe greyout [or somehow indicate a third state -kindda on/off/partial] for the 'Any apllication' blacklist mode screem checkmark.

Well, that's just an idea I throw like this... Sorry if it's of no use, been suggested earlier or even not relevant to this thread.

A thousand thanks again for your app anyway.