yashsingh1/xdaforums huggingface dataset:
[G1 Apps and Games] Oewyn:
I had a question about how packets are classified as (kernel). Is it really only from the kernel, or can other applications send out packets masking as the kernel using some system call?

I ask because I've started blocking kernel packets and seen some IPs have a high number of packets blocked in a very sort period of time. Is there any way to track down what module/app the kernel is making these requests on behalf of?
[G1 Apps and Games] Alexander_Hoff:
FIX ME! implement getprotobynumber() bionic/libc/bionic/stubs.c:384

Message deleted.
[G1 Apps and Games] Martin Luib:
Hello,

I have a problem. After I will swith on the firewall I got a message:

Error writing to preferences

How I can solve this issue?

My phone Galaxy S 2.2.1

Thank you
[G1 Apps and Games] zman519:
I keep getting a problem where the widget says "ON" and going into the menu in doridwall "Firewall enabled" is check & green but its not really on once i disable the firewall and re-enable it the firewall is on. :confused:

Epic running stock 2.1 rom. droidwall is in white list mode

Is there any more info that would be helpful in tracking this problem down?
[G1 Apps and Games] rodrigo.zr:
What is the output of "Show Rules" when it is problematic like that?
[G1 Apps and Games] zman519:
"Rules applied with success"

The problem just pops up out of nowhere. After I posted last night I went back to 1.4.7 and I have not seen the problem yet and never had it befor updating to 1.4.8

I'l go back to 1.4.8 and do any tests you would like me to do.

Sent from my ComBadge
[G1 Apps and Games] zman519:
I have noticed it a lot by setting an alarm in Alarm Clock plus and seeing an add popup. I don't have Alarm clock plus checked (white list mode) so then I go and open another app I have blocked and see that its not being blocked the whole time the widget says "ON" then I have to re appply in droidwall menu.

Still trying to test stuff on 1.4.7 and i found Some thing on 1.4.7 that triggered droidwall to fail.

UPDATE

Turned on Wired tether plugged the usb into my laptop. then checked droidwall widget, widget still says "ON" Opened some blocked apps and the firewall was off. Turned droidwall OFF then Back ON and its working on the phone and tethered Win7 laptop is online via wired tether.

I'm tethering with Mobile AP right now, Mobile AP does not interfere with droidwall like USB wired tether does.

So the conclusion i came to is that its not 1.4.8 its wired tether.Then i asked my GF if she was seeing the same thing with droidwall being on and then not really being on but still saying its on. She has an Optimus S Froyo and uses Quick settings & or Hotspot widget v1.2 by Harald Muller to turn on & off WiFi tethering and shes seeing the same problem that i am. So i guess its something with how some tethering apps work. More Info to come on the Optimus............. i will do some more tests on it.
[G1 Apps and Games] rodrigo.zr:
I believe that this is the output of "Apply Rules"... I really meant "Show Rules" on my last post.

Could you please go back to 1.4.8, and when you find that it is not blocking apps, click on "Show Rules" and post the output here? (there is a lot of text there, so screen captures are fine if thats easier for you)

Thanks.
[G1 Apps and Games] zman519:
Back on 1.4.8

verified droidwalls behavior was same as my last test on 1.4.7

1) Rebooted phone

2) Turned on Wired tether

3) then checked droidwall widget, widget still says "ON" Opened some blocked

apps and the firewall was off.

4) plugged the usb into my laptop

5) Opened some blocked apps and the firewall was off.

First 3 Screen shots from hear.

6) turned widget OFF, Terned widget back ON

7)checked blocked apps, Droidwall is now working.

screen shots taken at this point
[G1 Apps and Games] zman519:
Is there a way to just output the log and Show Rules to a text file?

rodrigo.zr is there a log filter i can put on alogact to get a better log for you to see more data on what the phone is doing with wired tether?

My GF will be around later and i will Hi-Jack her phone:p and run more testing on the Optimus S also
[G1 Apps and Games] rodrigo.zr:
Oh! This is definitely the cause of the problem. The tethering is messing up with iptables rules, and this breaks DroidWall completely.

On this case, unfortunately, there is not much I can do on DroidWall :(

It seems that the tethering flushes (deletes) ALL iptables rules before applying its own rules for the tether to work.

I will (try to) investigate the tethering process to see if there is any kind of broadcast being sent when it is enabled/disabled - this would allow me to at least re-check the rules to determine if DroidWall's rules are still there.

DroidWall has been designed to co-exist with other applications that use iptables, but for that to work, all apps must behave correctly (and not simply delete all rules, lol)
[G1 Apps and Games] BruceElliott:
Would PdaNet have this problem? If not, he could try PdaNet instead of the integrated tether app.
[G1 Apps and Games] cobo_:
Just installed this on a rooted Motorola Milestone 2, and so far it seems to be working great :D

It should help one with privacy as Android isn't too crash hot on the privacy front, imo.

I may be overly paranoid, but in this day and age, it pays to be I believe.

Thanks for making this, and if there's ever a donate version or something similar to say thanks and continue work on it, I'll be on-board with that!

Edit: Saw the donation option in your sig; donated $10USD :-)
[G1 Apps and Games] BruceElliott:
That is an understatement! IMO, Android is a big data-sucking, advertising virus and may have been designed as such from the ground up. It does not have to be that way; however it will take many tools like this one and a good deal of effort to plug up the holes in the privacy hull. In the meantime, new versions will effectively punch more and more holes as fast as we can plug them.

When you hear that something is free...turn around and run away as fast as you can! ;)
[G1 Apps and Games] kechagia:
unless it's opensource :)

I applied some patches to droidwall to make it build directly in the aosp tree (i only hat to localize some strings). I was wondering whether there also is a github repository for droidwall? It's kind of a pain in the ass to include svn repos in the aosp-manifest. (i mirrored the droidwall repo to github and applied my patches, you can see it here: https://github.com/kechagia/droidwall , but i would be glad to direcly pull your changes into my repo as well, unfortunately this is not so convinient with git svn and github)

ps: absolutely awesome great work! outgoing firewalls are so important, not only on desktop machines :)
[G1 Apps and Games] johnnylicious:
tell me how it goes cause im running hero also i wanna see if i can save battery also!
[G1 Apps and Games] rodrigo.zr:
I just uploaded version 1.1 with a better help explanation
[G1 Apps and Games] r_dub:
Will do johnny i'll keep everyone updated on wheather or not it works to save battery on hero
[G1 Apps and Games] rodrigo.zr:
Yes.. That's already on my wish-list.

I'll add a preferences pane with an option for blocking all network adapters.

Please just keep in mind that I wrote this application yesterday, so don't expect a bunch of features on the first releases ;)
[G1 Apps and Games] senab:
Right, i've just tried installing this via adb and it seems to not like Apps2SD. I get the error:

Failure [INSTALL_FAILED_INSUFFICIENT_STORAGE]

I have plenty of space on both phone storage and my Ext partition aswell.
[G1 Apps and Games] r_dub:
Its cyans rom it will not take it it works fine on apps2sd its the rom
[G1 Apps and Games] rodrigo.zr:
I'm not running Apps2SD, but that seems quite odd considering it is a very small application.

Are you able to install from source-code? http://droidwall.googlecode.com/svn/trunk/
[G1 Apps and Games] r_dub:
Its not apps2sd I'm running it and it works fine but its an autoapps2sd just like cyans roms so it should work
[G1 Apps and Games] johnnylicious:
where exactly are you pushing the file into ?
[G1 Apps and Games] lbcoder:
Perfect.

And on the topic of future features... perhaps a power-user feature where all the super-geeks can add/edit rules manually...

I can see this app becoming a real killer.
[G1 Apps and Games] g4m3rz:
just to test the app,I selected the browser and clicked on update rules while keeping steel unchecked.

turns out i am not able to access the net on either.

Am i doing something wrong?

The Show rules option shows:

Chain INPUT (policy ACCEPT)

taget prot opt source

destination

Chain FORWARD (policy ACCEPT)

taget prot opt source

destination

Chain OUTPUT (policy ACCEPT)

taget prot opt source

destination

REJECT 0 --anywhere

anywhere reject-with

icmp-port-unreachable
[G1 Apps and Games] rodrigo.zr:
What ROM are you using? It is possible that the iptables bundled with your ROM does not support the "owner" module which Droid Wall makes use.

You can try a few things:

Restart your phone and click on "Show rules" again to see if anything has changed.

If that doesn't work:

Start an "adb shell".

type:

iptables -A OUTPUT -o rmnet+ -m owner --uid-owner XXXXX -j ACCEPT

(replace XXXXX by the number displayed by Droid Wall right before the the browser - 10028 on mine)

Check the iptable output for any errors.

If your iptables don't support this module you can probably update it and check if that works.

Cheers!
[G1 Apps and Games] senab:
I'm not pushing it, just simply using "adb install".
[G1 Apps and Games] johnnylicious:
maybe thats why if you have apps2sd try pushing it into system/sd/app

or system/sd/app_s/

and then reboot the phone and try the app again.
[G1 Apps and Games] Deuces:
ive noticed cell connection stops working after 30 mins or so of having this on without reboot. ive manually turned on/off 2g/3g but only wifi will return data. rebooting and/or uninstalling has fixed it for me.
[G1 Apps and Games] r_dub:
Okay so after after alittle testing on hero it blocks the market and gtalk even suns their selected so this needs to be fixed but other than that I didn't find anything else if this gets fixed I'll use it and let you all know about the battery
[G1 Apps and Games] rodrigo.zr:
After installing you must select which applications are allowed to use the cell connection and click on "Apply rules". By default it won't allow any application so you won't be able to use the cell connection.

If you want to (temporarily) disable the firewall, open Droid Wall and click on "Purge rules", then no applications will be blocked until the next "Apply rules" or phone reboot.

Can you check if that works fine for you?

Thank you.
[G1 Apps and Games] g4m3rz:
i am on JACMyTouchSkiv2.0 . Tried restarting.. still no luck.. net is blocked on all apps.. will play around with this when i get home. :)
[G1 Apps and Games] Deuces:
yes i am aware of the whitelisting requirement. i had to remove it for today at work but will add it later tonight.
[G1 Apps and Games] rodrigo.zr:
Those applications perform login using a separated application (service).

You need to enable the application named "Gmail Storage, Google Apps Google Talk Service, Google Settings", as well as the regular "Market" and "Google Talk" applications.

Can you please try it out?

Thanks.
[G1 Apps and Games] djsolidsnake86:
there is a way for enable mms with droidwall firewall?
[G1 Apps and Games] zman519:
Yes there is.

iam about to go to bed and WAY to sleepy to remember all the things that need to be allowed
[G1 Apps and Games] djsolidsnake86:
and, when i install new programs, i alwas must apply the rules in droidwall?
[G1 Apps and Games] johnw.xda:
what is mean app ID = kernel?

what connect is come from kernel, and not from userland/program?

can you keep me some example?

i see some connection block from appID=kernel at bootup,

connect to facebook, google ... etc. ( is this normal? )

but i think those connect should be come from userland/progarm,

and should not be kernel.

please tell me more about this, thank you.

( or add this to http://code.google.com/p/droidwall/wiki/FAQ )

anyway, thank your nice app.

i read the source code, find something like this,

$IPTABLES -A droidwall-3g -m owner --uid-owner 0:999999999 -j droidwall-reject

is that mean uid 0 to 999999999 jump to droidwall-reject??

why kernel id = 0 to 9999999999 ????

OK, i think i understand now.

kerenl id != 0 to 999999999

all connection included 0 to 999999999 will reject, otherwise(kernel id) will accept by default.
[G1 Apps and Games] zman519:
Simple answer Yes. I run it in white list mode that way I have to let an app connect. You cound use black list mode to only block the apps you want blocked.

Sent from my ComBadge..
[G1 Apps and Games] johnw.xda:
I try to patch the Api.java to add custom rules

http://code.google.com/p/droidwall/...=ID Type Status Priority Summary Opened Stars

is it work?

i want to try, can you tell me how to build your code?

please help, and you.
[G1 Apps and Games] rodrigo.zr:
Thank you. :) Donations help keeping the DroidWall project alive and acquiring devices for compatibility testing.

I currently use only SVN, sorry. I may change my mind in the future tough :D

Yes, enable the "Messaging" application. There is more info in the FAQ

The code can be easily built using Eclipse and the ADT plugin.
[G1 Apps and Games] zman519:
Is the Widget icon changed in the new market update?

I like the new icon but i like the green bricks for the widget
[G1 Apps and Games] rodrigo.zr:
The new "OFF" widget icon should be better on version 1.5.0 - specially for colorblind sufferers.
[G1 Apps and Games] lampz:
This ROCKS!!!

can i ask a suggestion for better future of this app?

ahm please add some task schedule?

please??
[G1 Apps and Games] Yom:
[Q] How to save rules across ROM changes?

Hi all,

I apologize if this has been asked before, I could not find the relevant information by searching.

Is there a way to backup the rules prior to a ROM change, and then restore them on the new ROM?

Thanks!
[G1 Apps and Games] zman519:
Checkout Titanium backup on the market. It shoud do what you want. It will back the app also and the data/settings

Sent from my ComBadge..
[G1 Apps and Games] Yom:
Thanks for the tip! I actually use TB religiuously, and assumed the rules were in DW's data, but after every restore, all my rules seem to be changed and I have to manually allow my apps again... I have even tried restoring DW dead last so it would see all my apps installed and enable those that were allowed before the rebuild.

Is there any other way?
[G1 Apps and Games] AlexAlien1966:
Question: Compatibility with speedmod kernel?!

Hi,

I am using Droidwall v1.5.0 on my Samsung Galaxy S i9000 an with Stock kernel

it worked flawlessly - so first of all thanks for this great app!!!

Because of the lags the Galaxy shows, i decided to swap kernel to Speedmod K13C which runs fine and makes my phone faster.

Unfortunately (even with ANDROIDLOGGING enabled in the Tweaks) the logging from Droidwall ceased to function.

I suspect that the disabled kernel logging in speedmod is the reason, but can somebody maybe confirm or tell me how to get logging back - please.

Probably this should be asked in Speedmod thread as well, unfortunately i have not enough posts to write there.

Many thanks for your feedback and again great tool!

Cheers

Alex
[G1 Apps and Games] Caelte:
Hey,

I really like your app. There is one feature, I'd like to have. Can you mark (maybe with different font color) the apps, that got network access on android permissions? This would be really helpfull, because when I go through the list and want to decide whether I should give an app access or not, I often don't know if the app even needs internet.
[G1 Apps and Games] JayMore:
Hello,

Still no solution for the older kernels that doesn't support iptables?? Having a hard time here with my gf's LG GT540. :(

Thanks,

Jay
[G1 Apps and Games] mrfree2ita:
Using droidwall-1.5.0 on my buzz w/ stock android-2.1-update1 and S-OFF I receive that error:

iptables v1.4.7 FIX ME! implement getprotobyname() bionic/libc/bionic/stubs.c:372
iptables: No chain/target/match by that name.

Any idea?
[G1 Apps and Games] denshigomi:
This application is fantastic! Thank you rodrigo.zr!
[G1 Apps and Games] zman519:
Hell ya! Thanks rodrigo.zr

Sent from my ComBadge..
[G1 Apps and Games] ippon:
nice app!

going to give this a go.
[G1 Apps and Games] THE GRIZZ:
hello all. really love this it should be part of the OS itself

how do i white list the voice recognition (the mic on the HTC or stock keyboard)

I hate enabling/disabling the firewall just to do this simple thing
[G1 Apps and Games] rodrigo.zr:
Enable (and clear) the log, then try to use voice recon. After being blocked, check DroidWall log and it should show which application ID was blocked.
[G1 Apps and Games] THE GRIZZ:
thanks turned out its voice search
[G1 Apps and Games] roccoadam32:
i also noticed a high amount of packets being set through the kernel when blocked my battery life is much better
[G1 Apps and Games] synthtech:
suggestions

nice work!

i have some suggestions (some or all of which have probably already been made):

- when generating apps list, determine which apps have network access permissions, and indicate this somehow by each applicable app in list (italicized text? different color text? a small icon?).

- allow detailed rule creation. ie, globally OR for a given app, it would be nice to be able to whitelist or blacklist access to a given host and/or port and/or interface. example: say you have some alarm clock app that checks weather via blah.someweatherservice.com:80 but also connects to the alarm clock app's dev's server and who knows what else. why trust? it would be pretty sweet to block the alarm clock app's access to everything except (all interfaces: blah.someweatherservice.com:80).

- some way to get an idea of which apps are accessing (when not being restricted) which hosts/ports to help guide the user in creating useful rules. (what are some possible ways to do this?)

-- something that would be pretty boss: each time a connection is trying to be made that you don't have a rule for, have a notification prompting you to create a rule.​

-- perhaps also facilitate temporary rule creation (allow this connection once? for some period of time? until the process making the connection dies?)​

basically the kinds of things you see in fancy software firewalls on desktop OSs.

i'm knowledgeable neither in android nor in lunix, but i have a feeling that these things are feasible.

i really think that these are the kinds of features necessary for users concerned with having control of their devices.

there's also the issue getting control of app permissions instead of just being forced to accept them. luckily, there is progress on this front, too! PermissionsForceFieldMod (pffmod) is looking promising.
[G1 Apps and Games] squirell:
hello, i've encountered a problem using droidwall.

the rules are saved normally and remembered, but when i try to enable the firewall i get

http : / / img816 imageshack us/img816/9965/cap201103281710.jpg

(remove the spaces, i'm a new user)

solutions please? :<

p.s. - im using se xperia x8 on floyo 0.15
[G1 Apps and Games] luth:
Hey, anybody got further with the Kernel Packets being sent to Mountainview? I don't want to wear my aluminium hat anymore... ;)
[G1 Apps and Games] Taomyn:
Hi, just upgraded from Froyo to Gingerbread on my SGS and DroidWall 1.5.0 is logging a blocked app that I cannot find in the list. The log shows:

App ID 1021 - Blocked 4 packets (2 packets for 74.125.77.192, 2 packets for 21.34.140.195)

I'd like to whitelist it, but 1021 does not appear as an application to configure.

Any ideas?

BTW. Great app - once I get finished configuring up from the upgrade to GB I'll send a donation to the cause.
[G1 Apps and Games] humberos:
@daniel.weck

I had same problem and I fixed.

I compiled my own kernel and crafted my own initramfs ramdisc too.

In initramfs structure, I created /bin folder and putted in busybox and all links.

After, I removed modprobe link (busybox) in /sbin folder and recompiled my own kernel.

Regards,

Humberto.
[G1 Apps and Games] Mikulec:
Is anyone here using this app with cwm recovery 3?
[G1 Apps and Games] covntdracvla:
a problem with vpn networking

It's a great app and very useful but I have a problem with that!

my VPNs don't work properly when the wall is active.

they can connect to the server but when I'm using web browser or synching apps like gmail and other stuff they can't work and they say no connection is available...:(

any idea friend?

(the VPN networking is selected on white list for both wifi and 3g)

btw tnx for this great app
[G1 Apps and Games] E-P-S:
Same Problem:

Droidwall 1.5 & Samba

Dont' work.

Must disable firewall to access the phones' sdcard :-(
[G1 Apps and Games] rodrigo.zr:
Those connections are handled by the kernel, you must allow kernel connections...

If that doesn't work, use DroidWall's log to check what is being blocked.
[G1 Apps and Games] E-P-S:
Thanks.

Allowed kernel - no success

Enabled log: AppID 0 ((root) - applications running as root

So i allow the app, too.

yes, now everthing works fine.

Idea for V 1.6: - Profile-List

for example:

Recommended Whitelist:

- (Kernel) - Linux kernel

- (root( - Apllications running as root

- DRMContentLauncher

- Google Mail

- Google Translator

- Internet

- Calendarstorage

- Maps

- Market

- Mediastorage

- Samba

- Sync

See also: How to Allow or Access for Android Market, Youtube To Work with Droid Wall
[G1 Apps and Games] x600:
DroidWall, Speedmod K13C, Cisco VPN

Hi there,

first of all: Big thanks to rodrigo.zr for this app, making my Android life a bit safer :)

Perhaps I have a rather special issue founded more in business or university environment.

I work on a rooted SGS with DroidWall 1.5 on an Android 2.2.1 stock ROM (JQ3) where I replaced the stock kernel with Speedmod K13C. I did that because of the built in tun.ko support of the kernel in order to get Cisco VPN support working with the get-a-robot-vpnc in Version 0.99. So far so good, VPNC works as intended when "(root)-Applications running as root" is checked in the Droidwall settings.

However, when I have an active VPNC-connection via WLAN all my Firewall rules seem to be ignored, i.e. I could surf on the Web with the built in Android Browser App, although it should be blocked with regard to the active firewall rules. I think that it may have something to do with open VPNC tunnel where all network connections are guided through. The VPNC app needs root rights which to work properly which I gave to. So perhaps it "inherits" its root rights to alle the apps which work their way through the VPNC-tunnel? If so, would there be a way for Droidwall to control the connections even through the VPNC-tunnel?

When my phone is connected to WLAN without VPNC all the firewall rules in DroidWall work fine.

With kind regards,

x600
[G1 Apps and Games] covntdracvla:
they were allowed

log says:

app ID 10065 (Internet) - Blocked 10 packets (a couple of IPs and packets)

the 3g on this Item (internet) was not allowed but wifi was and I was working with wifi

I guess it understands VPN connections as 3g networks

now I enabled 3g on Internet and it works fine

tnx

btw my phone is galaxy S
[G1 Apps and Games] AlexAlien1966:
I did some tests with shark for android and found that the main reason for kernel network traffic was "Google Analytics", therefore i can not recommend to whitelist the kernel.

All applications i use (~150) work perfectly without kernel whitelisted.

Cheers

Alex
[G1 Apps and Games] luth:
And still I ask myself, how can freaky KERNEL APPLICATIONS send data to google?
[G1 Apps and Games] edy4sure:
From what I heard about this app, it comes highly recommended! Will download it & give it a go. Will come back to reveal any bugs/issues I see (if I find any) & will vote for it on the android market. Thanks! :)
[G1 Apps and Games] gamaTeam:
Hey,

First DroidWall is very good program and do it's work very well. With last version 1.5 I have problem with logging. Does enyone have same issue?