yashsingh1/xdaforums huggingface dataset:
[G1 Apps and Games] highlandsun:
The app has a hardcoded list of network interfaces that it recognizes. Apparently on your device, the 3G network interface is not one it knows about. The same is true on my Droid4, the 3G network is qmi0 and droidwall doesn't know about it. It's simple enough to make it work though, by adding your own custom rule.

This is mine:

iptables -A droidwall -j droidwall-3g -o qmi+

Replace "qmi" with the name of your 3G network interface.
[G1 Apps and Games] easyyu:
Thx for answering and helping me..

But I think its unclear what to do!

Where to put this rule? Directly in ip tables? Through 'terminnal'?

If I put directly will droid wall see this rule as parent rule and make all other rule based on this rule?

How to find which is the name of my "mobile data" network inteface..

Please help with more detail!

Thx
[G1 Apps and Games] highlandsun:
First you must discover what is your 3G network interface. Normally the "route" command in the shell can display this for you, but it seems that the default version in Android toolbox is too limited. You probably need to install busybox from the Market first.

The output from "busybox route" will list a few lines of network routes and their interfaces. There should be a line starting with "default" - that's the one whose interface you want. E.g.

Kernel IP routing table
Destination Gateway Genmask Flags Metric Ref Use Iface
10.160.40.1 * 255.255.255.255 UH 0 0 0 rmnet1
10.160.40.0 * 255.255.255.254 U 0 0 0 rmnet1
192.168.20.0 * 255.255.255.248 U 0 0 0 usb1
default 10.160.40.1 0.0.0.0 UG 0 0 0 rmnet1

This is my route info when connected to 4G. The interface we want is rmnet.

You add the iptables command to the Droidwall custom script. This is in Menu / More / Set Custom Script. Just type in the command I gave before, but using your interface name. Don't forget the '+' at the end. E.g., for rmnet1 here, I would use rmnet+ in the script.
[G1 Apps and Games] easyyu:
Thx..understand..but main question is:

If I add the custom rule through script, is there an apps list in drioidwall will be applicable throught droidwall?

I mean if I decide to block some 4 app-s and all other to not block, is droid wall know that he must to make new rules based on definied inteface, and not for "fake" interface?

Understand me?
[G1 Apps and Games] highlandsun:
Don't ask stupid questions. Try it and find out.
[G1 Apps and Games] easyyu:
I don't think that my question is stupid..because as I assumed it doeasn't work!

I instaled busybox from market..and in terminal print command "busybox route"

It print me few lines and interface name is rmnet0

Then I added next line in custom script in droidwall:

iptables -A droidwall -j droidwall-3g -o rmnet+

Then disable few apps in droid wall apply rules then enable firewall, and aps conecting to net thgough mobile data as I do nothing!

Is maybe the problem with "-3g" part of command?

Do I need to put some other command?

After all this I go back in terminal windows and print again "busybox route"

It print me same as before, like the route is not accpted! Or I missunderstand something?

Btw I can not acces my iptables -S command in terminal windows, it said that:

iptables v1.4.11.1 can't initialize iptables `filter`: Persimition denied (you must be root)
Perhaps iptables or your kernel need to be upgraded

I am a root user, phone is router. All apps nicely grant super user.

Thx for helping me!
[G1 Apps and Games] Al936:
I am on Motorola RAZR (GSM version) with ICS 4.04 rom. My routing table is:

Kernel IP routing table

Destination Gateway Genmask Flags Metric Ref Use Iface

default 10.231.247.78 0.0.0.0 UG 0 0 0 qmi0

10.231.247.78 * 255.255.255.255 UH 0 0 0 qmi0

192.168.137.0 * 255.255.255.248 U 0 0 0 usb0

So I added the following custom script

iptables -A droidwall -j droidwall-3g -o qmi+

and unfortunately DroidWall still allow access over 3G network.

On 2.3.6 rom the following custom script works

$IPTABLES -I "droidwall" 1 -o qmi+ -j "droidwall-3g"

But it does not work in ICS. There is another recommendation:

IPTABLES -D OUTPUT -j droidwall
IPTABLES -I OUTPUT 2 -j droidwall

.

It works on ICS 4.0.4 with Google Nexus, but does not works for me :(

Any other ideas?

Update: Finally custom script works!

iptables -A droidwall -j droidwall-3g -o qmi+

It was dummy mistake in it initially - word "iptables" was written as "IPTABLES" (with upper case letters). When it was changed with small letters custom script start working :)
[G1 Apps and Games] easyyu:
I tried evrything and it doesnt work!

Where is the problem?

I using ISC v4.03 and the name of mobile data interface with command "busybox route" is rmnet0.

I added in custom script next command:

iptables -A droidwall -j droidwall-3g -o rmnet+

then chose app from #g coloumn what to disable, apply rule (firewall is enabled) and then try chosen app. AND NOTHING! App still can reach the mobile data internet!

Why????

Tried ti rst my phone, still nothing.

Any suggestion?

---------- Post added at 06:06 PM ---------- Previous post was at 06:02 PM ----------

Excuse me..but what is the difference between first and last settings? it is totaly same isn't it?
[G1 Apps and Games] Al936:
Yes, they are the same. However first time I typed word "IPTABLES" (in upper letters) instead of "iptables" - in this case script does not work on my phone.

And when I type iptables with low letters and applied rules the script start working.
[G1 Apps and Games] easyyu:
In my case this trick doesn't work for my Sasmung Galaxy S2
[G1 Apps and Games] linuxnubee:
has anyone else noticed that when you tick files in blacklist without mistaking whitelist (nothing ticked in error) then applied rules gone into whitelist and found they are too clicked? i think it has no barrier between whitelist and blacklist thus causing utter failure in applying rules (spitting a dummy it is lol). i say this because its whats happened with my dw. also none of the below worked for me either. if rodriguez could fix be hugely appreciated.

i too am on 3g network rmnet. also tried different kernals with no avail. unfortunately its a dud app for me atmo which is a shame. still a great app in development that is a bit beyond me to offer any solutions atmo as my name states linixnubee lol.

forgot to say i have sg2 but as this seems to be specific to droidwall i figured best place to come.
[G1 Apps and Games] adguru:
Make sure you have disabled "Mobile data limit" in the settings, otherwise the firewall doesn't work.

As for "iptables -S", ensure you have typed "su" and ENTER before using that command. You can verify which user has the shell by typing "whoami".

HP
[G1 Apps and Games] elchanly:
Suggestion

Here is a suggestion : in order to improve my battery life, I shut down access to some apps to the net, just because I work in a bad signal area, but I would be glad if I could just stop using firewall leaving work. How? Using something like llama, or locale, that could execute shell commands like "droidwall --inactive "

Could it be possible? Thx for this great app:good:
[G1 Apps and Games] zman519:
What about the widget? I'm assuming you don't like that idea. What about tasker?

Rocking cm9.1
[G1 Apps and Games] Bil-Ha:
I have Samsung Galaxy Ace

I have Samsung Galaxy Ace GT-S5830i And I have the same problem...

if i change the kernel the problem will be fix???
[G1 Apps and Games] Captain Droid:
I Envy your internet speed !! :eek:
[G1 Apps and Games] topjor:
Hello,

I have a request for the wiki.

For some people like me, I have a VPN setup with redirected gateway(all traffic goes through the tunnel) but its not going through the firewall, with a custom script like this you can put the openvpn tun interface in the 3g chain:

$IPTABLES -A droidwall -o tun+ -j droidwall-3g || exit

Maby this could also be put on the wiki as example or as a individual part along with the interface names
[G1 Apps and Games] [] AL []:
Thanks,

I knew about the fix for wi-fi as I've posted here a while back, but I will update it for 3G as well.

Cool!

/AL
[G1 Apps and Games] topjor:
On the wiki about custom script is some info about the chains, I have found this by checking the script what is executed that applies the rules, its somewhere in /data/data/<package name droidwall> in one of the sub dirs. There is stand what interface belongs to what chain, all you do is add another interface to a chain, in this case the VPN interface

I hope this little thing will also make it to the wiki it could help some people, so that they don't have to spend the time to figure it out on there own.
[G1 Apps and Games] Azrael^^:
Hi!!

I have a little problem with Droidwall and Cerberus. I don't know what applications should I allow to access the data network. I have installed the disguised version of Cerberus, so it appears as "System Framwork", but selecting this isn't enogh. I tried some others, but I can't get it working.

Any idea??
[G1 Apps and Games] topjor:
Sorry i dont know, but i always use blacklist maby you can figure it out trying it the other way by blocking just some apps, you think it can be and test it
[G1 Apps and Games] zman519:
Isn't droidwall dead? Use android firewall or AFwall

Rocking cm9.1
[G1 Apps and Games] pollutedmuse:
I just installed droid wallto prevent a specific app from connecting to the net, I hadn't done anything with it yet but glance at the instructions, I then copy/pasted a large bundle file of apk/odex files in it, then when I reboot I get a security error "morningcall cannot be verified" any ideas?
[G1 Apps and Games] RoyceC:
Hey guys,

I'm having some trouble with this app.

I'm using a Note I717 with the custom Padawan JB rom.

When I test it on dolphin and a few other apps its not functioning.

I don't see any error messages..

Do I have to add a script to my androids configuration file to get it to work?

Any help would be much appreciated! Thanks...
[G1 Apps and Games] zhlvf:
Droidwall and ethernet adapter

I have an USB OTG ethernet adapter, but many apps do not accept this connection. Is it possible to use a script in droidwall to redirect all internet connections to my ethernet adapter "eth0"?

Thanks for your help!
[G1 Apps and Games] janot2007:
Bug is still alive =/

I've made whitelist (without Google Maps) -> enabled it -> disabled it -> now Google maps have no internet connection

Any ideas how to fix this, please?
[G1 Apps and Games] galaxyst:
LG G2 email by exchange works only if I choose allow applications running as root. Why? Other apps, like viber etc. work without this permission
[G1 Apps and Games] [] AL []:
you guys realize that most of the previous page date back from 2 years ago right?

Droidwall has been left on his own pretty much since then. So I suggest you guys move on to the very similar an more up to date "AFWall+" app from the store. Customs ip-tables rules work pretty much tge same and I've tried it on Lollipop and seemed fine to me.

Cheers.
[G1 Apps and Games] iMessa:
I use Google contacts so when i save contact it saves to Google contacts. What i have to check in 3g for that? Thank You! :)
[G1 Apps and Games] 34Ford:
What am I doing wrong? If I choose a app in the black list to be blocked, why is the same app checked in the white list?
[G1 Apps and Games] adeyo:
rodrigo.zr...contact?

Hi rodrigo, thanks for a great app! i think there is a lot of potential here...my battery drains waaay to fast and i am hoping this will help. btw, anyway to contact you with some questions? My email is adeyo@liberty.edu, i just wasn't sure that this was the place to post all my peripheral stuff, when i really just wanted to ask you. Not wanting to take up your time, but if you shoot me an email i can explain more details. thanks! :o
[G1 Apps and Games] rodrigo.zr:
Hi all,

I have just uploaded version 1.3.0 to the site.

The change log can be found here.

Well.. you can always pm me ;) but I'll shoot you and email then
[G1 Apps and Games] senab:
Loving this app!

I think we should being a list of applications that shouldn't be blocked (which could be put on the OP).

Market: Market & "DRM Storage, Gallery, Camera, Media Storage, Download"

Gmail: Google Mail, "Google Mail Storage, Google Talk...."
[G1 Apps and Games] senab:
As a feature request, I think it would be superb if we could define user lists of enabled apps. For example, I might have a list called 'roaming' that would disable all apps, etc. A widget to quickly select a list would be superb ;)
[G1 Apps and Games] rodrigo.zr:
I'm not 100% sure, but it seems that leaving the Market always enabled drained my battery much faster and consumed a lot of background data. Have you experienced this?

I was planning to add this feature already :) I didn't think about the widget tough. suggestions are always good :D
[G1 Apps and Games] rodrigo.zr:
Next features

Since I don't have much time on my hands I need to prioritize the next features to be added.

My current wish-list is:

1. Add an optional password protection.

2. Allow blocking Wi-fi, cell network, both.

3. Allow switching to black-list mode, instead of white-list.

4. Saving & loading user lists, keeping preferences and marked applications.

5. Allow disabling Droid Wall (not only temporarily).

Any votes for your preferred feature?
[G1 Apps and Games] Chahk:
6. All of the above :)

Seriously though, I'd vote for black-list feature, since it would make the app much easier to configure.
[G1 Apps and Games] turboyo:
is this app working on cyanogens stable versions? its doesnt seem to be for me
[G1 Apps and Games] rodrigo.zr:
I don't think the stable version has the necessary kernel modules, but perhaps the experimental build does (he just posted an updated one).

What Droid Wall version are you using, and what is the error message displayed?
[G1 Apps and Games] turboyo:
1.3 droidwall and 3.6.8.1 cyanogen.. the program gets stuck in applying ip tables, I close it and re open and it has everything I marked organized and checked as if it applied, but i check thing that were unchecked and they connect. Other times it gives me "error applying iptables rule iptables:no chain/target match by that name"
[G1 Apps and Games] shadowhacker27:
amazing

Congratulations man!, this is something useful for everyone regardless of the data plan anyone could have.:eek:
[G1 Apps and Games] rodrigo.zr:
Yes... this Cyanogen version does not include the necessary kernel module for netfilter/iptables... sorry

The next Droid Wall version will probably include a protection against getting stuck when executing commands as root.
[G1 Apps and Games] :
best app ever

Can't wait for the next features! This is by far the best app for Android... a must-have.

I hope that next Cyanogen's releases come with support for Droid Wall (it seems so). I'm using JF 1.50 but its always good to have other options :)

Regarding the next features, my vote is for #2: Allow blocking Wi-fi, cell network, both.

Thanks!!!
[G1 Apps and Games] :
Regarding Cyanogen's ROM, I just searched his thread and found this:

http://xdaforums.com/showpost.php?p=4222232&postcount=933

UPDATE: Actually, the latest experimental builds ALREADY support Droid Wall - this information is on the first post of Cyanogen's thread. Here is part of the changelog:

---- v3.9.2

* Fix the ^#$#%$^ cpu frequency scaling (wtf wtf)

* Updated Advanced Launcher from rogro82/irrenhaus

* Updated Phone patch from cytown

* Updated getcyan script from beast.in.black

* Status bar now shows headphone state

* Enabled additional iptables modules for DroidWall

* Fixed GPS toggle on power widget

* Alarm still requires screen unlock, forgot about this. Next build.

:D:D:D
[G1 Apps and Games] rodrigo.zr:
That is good to know! So the next stable build will be compatible with Droid Wall. Let's just wait for it :)
[G1 Apps and Games] senab:
I'm running Droid Wall with the Cyan's experimental build and it's working fine :cool:
[G1 Apps and Games] senab:
Not sure on most of those options if I'm totally honest. 1 seems unneeded as we have password protection to use the phone anyway. 2 is good! 3 is just easy of ease, although I always prefer white-list firewalling. 5 could be done with a simple uninstall.

I'd say 2 & 4 are the important ones :) I'm just looking at your Google Code, think I might have a go at implementing the list feature. I'll PM you when I've had a proper look.
[G1 Apps and Games] rodrigo.zr:
I have just uploaded version 1.3.1 to the site, with major changes (check the change-log) :)

Regarding #1.. it was requested to allow a sort of "parental control" - implemented on this version :D

Cheers
[G1 Apps and Games] :
I'm using version 1.3.2 for a while now and it's working flawlessly :)

Thank you so much for the new features!

Blocking both 3G and Wi-fi seems to make my battery last much longer since I'm most of the time connected to Wi-fi.
[G1 Apps and Games] mightymergz:
Rogers Dream...

Hey guys, I installed droidwall and tried to apply the rules but it said that iptables couldn't be found or more precisely "iptables: not found"

I don't have to install this on my own, do I?

I have a rooted HTC Dream. I suspect the problem is the custy custom Rogers firmware installed. They must have decided to not include it (or put it in another place/name, I couldn't find it though..)

I like your app because I am looking to cancel my data plan so I'm seeing if I can get by with only Wifi!

EDIT: Ok I flashed cyanogen 3.6.8.1 rom so i have it now. thanks!
[G1 Apps and Games] Erivelton:
Hi for all!!! When i use Droid Wall in cyanogen v 3.9.7 I received this message:

"Could not acquire root access. You need a rooted Phone to run Droid wall. If this phone is already rooted, please make sure Dorid Wall has enough permissions to execute the 'su' command", this after apply rules and "Always Allow" in su request... any sugestion? Droid Wall is installed in ext3 partition.
[G1 Apps and Games] Chedderknight:
receiving the same issue, any work around?
[G1 Apps and Games] rodrigo.zr:
It seems that the root request takes much longer than I expected to complete on some phones/ROMs. After a while, the request times-out and Droid Wall can't get root access.

I just uploaded a fix (v1.3.3) to the site). It is not on market yet.

Can someone having problems please test with this version?

thanks
[G1 Apps and Games] Erivelton:
Hi Rodrigo, before making the update, I needed to make a softreset in my dream, and the program started to work :-) Still, even I put all the programs in the black list, connections are made via 3g/edge yet, but I do not I find out from which program, but only a few kbs.

PS: Sorry for "google english"
[G1 Apps and Games] rodrigo.zr:
Good to know that it is working now.

Using the "black list" mode instead of "white list" won't block system processes... it will only block installed user applications. So those few kbs are being used by the operating system itself.

Cheers
[G1 Apps and Games] Blind Oracle:
I don't know for a fact but I strongly suspect you are right. By limiting network access, significant power savings are also claimed via WiSyncPlus. You can click on the graphic to enlarge. WiSyncPlus doesn't require root.
[G1 Apps and Games] turboyo:
just installed on the cyanogens latest and its worked fine ..awesome app
[G1 Apps and Games] Mysticales:
Cool. I may install, I have a unlimited data plan so not quite sure if I should install yet. I saw you have a black list, which is good. But then I am thinking, what app would I really have that needs me to block it. If anything, would need a standby mode. Like say turn off network functions cept for white list. Which when the phone is asleep or so, may help battery life. Add a toggle widget to turn it back on to normal use when one would be using the g1 for whatever.

My curious question tho, while its using iptables, is this app going to slow down the g1 in the long run? Since Im guessing all apps have to run a check with the program if its allowed to have access? I know I made this comment before about a bigger hosts file the slower a cpu gets while it sorts through the list. So just wondering in the long run if that is something that maybe a issue here too?
[G1 Apps and Games] rodrigo.zr:
It won't slow down your G1... It is just an iptables/netfilter front-end, so Droid Wall does not need to keep running in the background to block the connections. Even if you don't use Droid Wall, 100% of your connections pass thru the netfilter kernel module.. there's no other option ;)
[G1 Apps and Games] Mysticales:
Good to hear. =) Guess Ill install it and use it more when more options come in too then. =)
[G1 Apps and Games] mopodo:
I got a HTC Hero tested the Version 1.3.3

The same error occurs, after I allow DroidWall to run as superuser

strange, after rebooting the superuser problem is gone, but when i'm trying to apply the rules, another error pops out.

"Error applying iptables rules.

Exit code: 1

iptables: No chain/target/match by that name"

Interfaces: both

Mode: Black List
[G1 Apps and Games] Zmaz1ng:
heyhey,

great app!

i would like to use a g1 with the hero firmware and a prepaid-card.

will this app block all connections via 2g/3g?

i will use my g1 only with wifi ->surfing,e-mail,icq, and so on...

will ur app be updated for newer firmwares too?
[G1 Apps and Games] rodrigo.zr:
Unfortunately it seems your ROM was not compiled with support for the "owner" netfilter kernel module, which is required for Droid Wall to work.

Which hero ROM/version are you using?

You can check if there is an updated version with support for this kernel module.
[G1 Apps and Games] rodrigo.zr:
Yes, Droid Wall will do what you are looking for.

I'll keep it updated, but this app will only work on ROMs compiled with the netfilter "owner" kernel module enabled (which some ROM developers choose to disable for some reason).
[G1 Apps and Games] mopodo:
I use the default HTC Hero ROM.

Is it possible to compile it with the netfilter module?

I mean is the source open to do that or do I have to use a 3rd party ROM?

Don't wanna give the nice Sense Touch *blingbling* away for DroidWall ;)
[G1 Apps and Games] rodrigo.zr:
You will need an enhanced 3rd party ROM on this case... but I'm not sure which modified HERO includes this kernel module.

Sorry if I can't help you much... I have only a single G1 device to test.

Regards
[G1 Apps and Games] zioalex:
Youtube Problem

I Guys,

I've problem to play youtube when droidwall is active on my 3G network.

I've a Cyanogen 4.0.4 ...

No problem on wifi...but on 3G I can play youtube video only if I disable droidwall ( obviously youtube app is enabled ).

Thanks

Bye

Zioalex
[G1 Apps and Games] rodrigo.zr:
Thanks for reporting this.

It took me a while to find out the problem. This is happening because the YouTube application downloads videos as "root", and Droid Wall is blocking the root user.

I have just released Droid Wall v1.3.4 - this version adds a new entry to the applications list: "(Applications running as root)". If you want to enable root applications (such as YouTube) to use the network, just check this entry and apply the new rules.

You can download the new version from here. I'll request it to be updated on the Market too.

Please lemme know if that solves your problem.
[G1 Apps and Games] zioalex:
Hi Dear,

nothing.

I've selected the new voice and applied/purged/applied the new rules but I still cannot play youtube files.

Bye

Zioalex
[G1 Apps and Games] rodrigo.zr:
Humm, this must be some difference between Cyanogen and JF ROMs (I'm using JF). I need to find some time to flash my G1 with Cyanogen and check what happens with YouTube.

This solution (allow applications running as root) fixed the problem on my phone for sure - so I assumed it would work for everyone.

I'll let you know when I find/fix this problem.

Cheers!
[G1 Apps and Games] rodrigo.zr:
Okay, I flashed my G1 with CyanogenMod 4.0.4 and found the problem. On this ROM, youtube videos are downloaded by a separate process called "Media server" (running as the "media" user).

I just uploaded version 1.3.5, which adds a new "Media Server" entry in the applications list. To watch you-tube videos, mark this application (and YouTube, of course) and apply the rules.

Lemme know if that works for you.

Cheers!