yashsingh1/xdaforums huggingface dataset:
[G1 Apps and Games] x600:
Hi gamaTeam,

I work on a rooted SGS with DroidWall 1.5 on an Android 2.2.1 stock ROM (JQ3) where I replaced the stock kernel with Speedmod K13C. In K13C, kernel logging is disabled by default and so, the log file of Droidwall is always empty, due to the fact that it depends directly on iptables logging of the kernel. On the other hand, when you use an stock kernel it should work.

Hope this helps a little bit,

x600
[G1 Apps and Games] win7x64:
What version of iptables does DroidWall use? My phone only has 1.3.7 (1.4.10 came out in October), but I know that DroidWall uses its own since DrodWall v1.4.0.

Also, where is the log stored? And does it clear each day? There's always only 1 or 2 entries whenever I check :-/

Thanks! Oh, and this app is amazing :)
[G1 Apps and Games] E-P-S:
Yes... perhaps we can do a accurate iptables... (all root apps allowed is questionable, too)
[G1 Apps and Games] Taomyn:
Has anyone any ideas how I can discover what this app is? I'm still seeing it on occasion.
[G1 Apps and Games] gamaTeam:
Yes, I have same kernel, so this has to be the a problem. I will try to find out something on hardcore tread.

Thx
[G1 Apps and Games] gamaTeam:
Hi x600,

did you try to enable Android Logging in recovery mode with Speedmod kernel?
[G1 Apps and Games] AlexAlien1966:
Hi,

Why do you want to whitelist it, if you do not know what it is?

Does it blocks any functionality?

Since its number is below 10000 it is a system application, kernel or related.

Cheers

Alex
[G1 Apps and Games] AlexAlien1966:
@gamateam:

Since kernel logging is not working with speedmod kernel, the only way to get some form of log in droidwall is to use blacklist mode instead of whitelist mode. It is more work initially to block almost all applications, but now you can see in the iptable rules if data was blocked.

This can help you with the decision to whitelist an application.

@Taomyn: This might help you as well if you really want to whitelist UID 1021.

Cheers

Alex
[G1 Apps and Games] gamaTeam:
OK, I will give it a try, thx again :)
[G1 Apps and Games] x600:
Dear gamaTeam,

yes I tried that, but it does not populate the Droidwall Log. So the kernel log, on which Droidwall depends, seems to be something different.

Perhaps hardcore hears to our pleas. I asked him to bring back kernel logging, but still no answer since 5 days.

Best regards,

x600
[G1 Apps and Games] x600:
Dear Alex,

thanks for the hint. I work on a rooted SGS with DroidWall 1.5 on an Android 2.2.1 stock ROM (JQ3) where I replaced the stock kernel with Speedmod K13C. I tried the suggested trick with using blacklist mode instead of whitelist mode. But still the Droidwall log stays empty. Perhaps I misunderstood the trick or I look at the wrong place? Alex, did it work for you with Speedmod Kernel?

Kind regards,

x600
[G1 Apps and Games] AlexAlien1966:
Hi x600,

the log will always be empty, as there is no kernel logging available.

In Droidwall go into options and select "show rules" ("regeln anzeigen" in german). If you used blacklisting you will see some log in this rule list, unfortunately it is not very convenient. Let me give an example:

I blocked "Samsung Apps" (UID 10058) on my phone, for 3G and WiFi, after starting the application i get a network error, so it is easy to spot that i might have blocked it, but let's assume it just failed without the message, so how can i find if Droidwall blocked it?

As explained above i look through my list of rules and find in the middle of the very long list

4 272 droidwall-reject all -- any any anywhere anywhere owner UID match app_58

Since app_58 is the same as UID 10058 (10000 is the base for user installed apps), i found that 4 packets of data with 272 bytes of data were blocked for "Samsung Apps".

I hope this short explanation helped.

BTW, if you suspect a certain app to be blocked, you could use iptables like this (in a terminal window) to get the lines for 3G and/or WiFi directly:

iptables -L -v | grep app_58

EDIT: If you set the rules in droidwall again, all data is lost from the list (can be useful to reset the list before testing of course)!

Cheers

Alex
[G1 Apps and Games] Taomyn:
It's just strange that I have other sub-10000 apps listed, e.g. 1016 VPN Networking or 1002 BrcmBluetoothServices Is there not some way to lookup the ID in some other way?

I have no idea if it's blocking anything but perhaps it's causing some issue with a function I'm not directly aware of. You know, the odd infrequent things that sometimes can happen that you simply put down to being "just one of those things"

Perhaps a "Custom" option could be added where we can specify the App ID manually.
[G1 Apps and Games] AlexAlien1966:
Request for new functionality

Hi,

i would like to have more functions as well, e.g. for support of NAT table, or simple sorting by UID or name (without checking letter case), grouping, etc.

Since i do not have much time to start an Android programming career soon, i can't develop an improved Droidwall myself soon i think (haven't written a line of java code for Android yet). This goes to the owner of Droidwall, please add more features!

@Taomyn: Nevertheless i have a workaround for you.

Use the following command in a terminal (e.g. Terminal Emulator) or write a script (e.g. with Script Manager) and you can add rules to Droidwall manually.

Ensure you run the commands as Superuser (run "su" first)

iptables -I <source_chain> 1 -j <dest_chain> -m owner --uid-owner <UID>

source_chain: droidwall-3g or droidwall-wifi

dest_chain : droidwall-reject

UID : UID of the app that should be blocked

Inserts a new reject rule as first entry for 3G or WiFi for an application with given UID.

iptables -D <source_chain> 1

Deletes the first entry from <source_chain>.

Hope that helps for the time being :-)

@all who still wonder about the log "issue":

Droidwall is just a front-end for the iptables command, which itself is just a command-line frontend for netfilter, which you can call "the firewall". Since netfilter is a kernel module (part of the kernel), it is using - of course - the kernel logging functionality, which - by the way - is kept in memory and not written to file (therefore not persistent, but also not slowing down the system). With the dmesg command the log can be read from the kernel memory, but only if the kernel supports this. Droidwall - as a simple frontend - uses dmesg to read the log if it can.

Hope this clarifies things a bit - and please - any expert - don't beat me for incorrect/incomplete details, i am just a project manager and Smartphone, Android and iptables newbie who thinks beyond battery drain ;-)

All thanks welcome :-)

Cheers

Alex
[G1 Apps and Games] elnator:
Great app... 1 problem

I'm not sure why but once I have droidwall set up the way I want it and save the rules I'm able to activate the firewall fine. However, if I then go to change the rules it will sometimes tell me it doesn't have root access even though it does....

I've tried applying the rules directly while the firewall shows enabled

I've tried disabling it then saving the rules then applying them

Both ways it *****es about not having root, which is weird because it does.

I did figure out a work-around:

1) Close Droidwall

2) Go to application manager and force stop droid wall (why is it still running btw? I thought it wasn't a TSR?)

3) Re-open Droid Wall

4) Make whatever changes I want to the rules.

5) Save the rules

6) Turn the firewall back on

Applies rules fine, no errors.

I'm curious why I'm having to force stop droid wall rather than just applying the rules on the fly? Why does it keep telling me it doesn't have root if I don't follow the above procedure?

Rooted Samsung Moment SPH-M900 running SDX_DL05-2.2.1-Beta-6

Baseband is S.M900.8.05.DI06

Kernel 2.6.32.9

Build SDX_DL05_Kernel

Hardware: M900.8.0

Thanks!
[G1 Apps and Games] m4a1rifle:
Very useful apps!

quick question:

1. Does DroidWall automatically scan newly installed app?

2. Does app that doesn't require Internet connection listed in the app list?
[G1 Apps and Games] E-P-S:
1. yes

2. yes
[G1 Apps and Games] sunrose:
only a test
[G1 Apps and Games] sunrose:
DroidWall - Android Firewall - VPN

Hi,

I have a SGS i9000 with Android 2.2 Froyo, original kernel rooted. Droidwall v1.5.0 works fine. I use the Android build-in VPN-Client with "VPN networking" and "(root) - Applications running as root" in the White list of Droidwall, both WLAN and 3G aktivated. In this way I can establish the VPN-connection in both networks (WLAN and Mobile Connection), and as intended, "programs without root access" that are excluded from the White list do not connect to the internet.

However, apparently programs that have root access defined in (the program) "Superuser" CAN connect to the internet. As many other users, I am not content with the fact that wanting to establish VPN-connections with Droidwall includes having to allow "(root) - Applications running as root" in the White list. It is unclear what else is thereby allowed to connect to the internet. We all would appreciate an improvement of Droidwall to specifically allow VPN-connections without opening other internet traffic.

Thanks in advance and all the best, Sunrose
[G1 Apps and Games] p0peye:
black/white list switch suggestion

Hi

I am still trying to set the Droidwall up according my needs.

While trying to enable Market on WiFi, I switched from white list to black list, and selected most of apps in "3G" column.

Now, after reading your post #40, now I wont to switch back to white list, and all the apps (approx 150) are still selected according to my blacklist plan.

It would be nice to have the 2 memories as well for white/black list, so when the list is switched, the selected apps would return to the state "remembered" for the recently selected list (or it might do the "negative" - deselect selected and vice versa...?)....

Thank you for an essential app, I hope I'll get it working soon :)

p.s. - now I am manually de-selecting 3g column as I don't want most of them accessing 3g, and selecting most of them in WiFi column as I want most of them accessing internet over WiFi.

So here is another approach to the challenge (I first wrote "problem" - but me being lasy can't be your problem, right? :rolleyes:) mentioned above:

I just noticed how much easier it would be to (for example) be able to click on "WiFi icon above WiFi check box column to toggle on/off of ALL the apps in that column . or even better to MIRROR selection (if nothing is selected - all will be, and if 3 is selected out of 100 - the 97 will be selected, and the specific 3 will not...). Same goes for "3G" column...

EDIT:

I just realized I don't have "Gmail Storage, Google Apps Google Talk Service, Google Settings" on my list of apps. So - I am back to "black list". Oh - well, let's check/uncheck all of them once again... :rolleyes:
[G1 Apps and Games] djsolidsnake86:
can you create a option that automatically apply rules for new programs installed (for example block 3g connection for new programs instead of press apply rules every time)
[G1 Apps and Games] kichmot:
There is a problem on Optimus 2x. Droidwall works only for wifi. But for 3g rules do not work. Have any ideas about it?
[G1 Apps and Games] elnator:
I wound up uninstalling it. Having to force stop it anytime I wanted to update the rules got old. Tried re-install several times and the problem never went away. Also got hung many times when trying to open the app. Just not worth it. I'm pretty careful about what gets on my phone anyway, though, so really don't need it much.
[G1 Apps and Games] rodrigo.zr:
Can you please check the name of your network device for 3G? It is possible that Optimus 2x uses a different name that DroidWall does not support yet.

To do that, just install an application like NetSentry and check the interface name shown for 3G.

Thanks!
[G1 Apps and Games] kichmot:
In NetSentry I see two options named wlan0 and vsnet0. Interface name for GPRS connection is vsnet0. I use GPRS only since my mobile operator does not support 3G.

As I understand from droidwall source code on http://droidwall.googlecode.com/svn/tags/v1.5.0/ name "vsnet" is not supported.
[G1 Apps and Games] rodrigo.zr:
The latest development version should work for you :)

(attached)
[G1 Apps and Games] kichmot:
Great thanks! It's all working! I use custom ROM from modaco and not sure it will be working on stock ROM. I will make link on this post for anyone who wants to check it on the stock ROM.
[G1 Apps and Games] TimeTurn:
Unfortunately even 1.5.1 dev does not work on Galaxy i9000 I9000XWJVB (gingerbread final) - any ideas? Getting exit code: 1. Root is there, restore with Titanium Backup worked without issues.
[G1 Apps and Games] Paul22000:
Is there any benefit or downside to blocking kernel access from the network?

(Sorry if this has been asked before but searching for "kernel" in this thread brings up a ton of discussion on whether a certain ROM's kernel supports this app, etc, rather than the "kernel" option within the app itself.)

Should we block the kernel from the network or allow it? What repercussions could occur if we block it?
[G1 Apps and Games] Haphim:
I have a couple of questions about DroidWall...

1. Does blocking an app on the blacklist mean that it can no longer check for updates via Market? Or that updates won't register if I manually check for updates through Market?

2. Is it possible to use DroidWall to block MotoBlur from synching data with Motorola without affecting any other functionality?
[G1 Apps and Games] tbaac:
vpn and open wifi

Hi. This seems like a great App.

(I stole this idea off the Ubuntu forums) I have a VPN connection set up on my N1. I use this for open wifi access points in airports etc. One issue with vpn on the phone seems to be that if the phone reconnects to the access point it will lose the vpn connection and so potentially transmit private data over an unencrypted network.

Is it possible to use DroidWall to prevent apps from connecting other than through a specific ip address?

Sorry if this has been previously answered, I couldn't find it in the thread.

Thank you :)
[G1 Apps and Games] kenshin33:
no, Droidwall is white list of application that can access the net (WIFI/3G). the access is all or nothing. unfortunately There is nothing out there that does what you;re looking for. Unless may be one can play directely with Iptables ...
[G1 Apps and Games] matejzima:
Troubles with application blocking

Hi, I´ve got a troubles with Droidwall.

I wanted block some app and Droidwall told me:

Error applying iptables rules.

Exit code: 2

Iptables v1.4.7

iptables v1.4.7: can´t initialize

iptables table `filter´:Table

does not exist(do you need to

insmod?)

Perhaps iptables or your kernel needs to be upgreaded.

So thats it..can you somebody write a instructions for idiots like me :D

many thanks for your help soon!!!!
[G1 Apps and Games] Taomyn:
This is fixed by 1.5.1 as it was GPS that had ID 1021 - thank-you

BTW would you consider setting up a Flattr button as an alternative donation method?

-----

Sent with Tapatalk using my Samsung Galaxy S
[G1 Apps and Games] olaf1234:
Hi!

Why does DroidWall not block

- "1001: Telefon, Speicher des Wählprogramms, SIM-Toolkit"

- "1000: Netzwerkstandort, Einstellungen, Konto & Synchronisierungseinst., Einstellungsspeicher, VPN-Dienste, Android-System, Task-Manager"

- "10021: Kontakte-Synchronisierungsadapter, Google-Services-Framework, Kalender-Synchronisierungsadapter".

?

These apps (?) are sending data the hole day, and disabling them in DroidWall does not work. The app "TrafficStat" shows traffic of these apps again and again, and my mobile-provider show me traffic at every hour.

Bye

Olaf
[G1 Apps and Games] DanderMan:
You know, with 1.5.0 and Gingerbread (2.3.3) I was only able to apply *-I think- 32 rules (white list).

With the new version 1.5.1 there are only 13 rules left - applying 14 rules result in following error message:

Error applying iptables rules.

Exit code: -1

iptables v1.4.10

However, when I select "(Any application) - Same as selecting all applications", there is no limit - I can apply every rule (but in this case not very useful :-) )
[G1 Apps and Games] LePeR1898:
I was currently wondering about C2DM.. does DroidWall block this? Is this tied into the Google Services Framework? or even the Market App??
[G1 Apps and Games] Haphim:
*That* problem should be reported directly to the developer, not just posted here. That's a big one!
[G1 Apps and Games] Taomyn:
I have 2.3.3 on my SGS, JVK, and have 50+ whitelist items with no errors. I did however remove some large unwanted APKs from /system to free up space so maybe that's the issue. I did it so as I had room to perform conversion to EXT4

---

Sent with Tapatalk from my Samsung Galaxy S
[G1 Apps and Games] rodrigo.zr:
Developer here.

Are you sure you get exit code -1 ?

If that is the case, the iptables script execution is timing-out (taking too long)...

How long does it take between pressing "apply rules" and getting the error message?

Thanks

EDIT: Forgot to clarify something... selecting "(Any application)" is MUCH faster because it generates a single line in the iptables script, ignoring any other selected app in the list. ;)
[G1 Apps and Games] DanderMan:
Yes, I'm absolutely sure - it's -1.

It takes more than 30 seconds between pressing "apply rules" and getting the error message.

If I've <= 13 rules it takes only some seconds.

@Taomyn: With JVK I also didn't have any problems!

Now I've JVB + CF-root 3.1 + IP-table fix
[G1 Apps and Games] walts:
Droid wall is working well for me - just one question - how can I clear out the log for a fresh start? As I experiment with rule changes it would be helpful.
[G1 Apps and Games] rodrigo.zr:
Just hit "Clear log" in the menu :D
[G1 Apps and Games] olaf1234:
Is this working on your phones, or is my question too strange/simple?

Is noone out there who is able to answer this?

Bye

Olaf
[G1 Apps and Games] jdb78:
According to Darnell_Chat_TN it seems to work. He blocks

Network Location, Google Calendar Sync, Google Services Framework, Google Contacts Sync

Maps

(Kernel) - Linux kernel

to prevent his phone from phoning home to Google.
[G1 Apps and Games] walts:
DUH! I don't know how I missed that... I was looking for it, but didn't see it :-(

Thanks!
[G1 Apps and Games] rodrigo.zr:
No project activity until May 22nd

I will be out of country until May 22nd, so there will be no development activity on DroidWall during this two weeks.

Peace :cool:
[G1 Apps and Games] dinomaniac:
I have the exact same issue, with SGS 2.2.1 too. Would love to have this fully working.

Anyway it's a great app, it works in all my other android phones...
[G1 Apps and Games] fjoel:
droidwall problem only 13 rules can be applied!!

Exact same problem here, only 13 rules can be applied, after #14 rule got same error (after a few 45 seconds ).

How can i apply more than 13 rules?
[G1 Apps and Games] mnjm9b:
What version of iptables do you have installed?

I have 36+ rules with no issue.
[G1 Apps and Games] fjoel:
How can i check?? or can you sent me and updated iptables?

I have a Deodexed xwjvb with CF-Root v3.1 kernel and installed droidwall from market.

Also i test with stock kernel xwjvb and same results.
[G1 Apps and Games] mnjm9b:
Open terminal

su

iptables -V
[G1 Apps and Games] fjoel:
i just updated to xwjvh stock deodexed with cf-root v3.2

with terminal emulator --> iptables v1.3.7

just exact same results with more than 13 rules

Error applying iptables rules.

Exit code: -1

iptables v1.4.10

---------

Also diferent iptables version????

my device is sgs i9000t with a rom from i9000
[G1 Apps and Games] Anton111111:
I have same problem on motorola defy (2.3.4).

And it is if i set number of reulse more than 13 ;-). Making more than 13 rules takes more times. And then i get error:

Error applying iptables rules.

Exit code: -1

iptables v1.4.10

If i set less then 13 rules it's works fine.
[G1 Apps and Games] c0rnholio:
I'm havin the same issue here on my galaxy tab with official gingerbread. Getting error code -1.

As a temporary workaround I started the script by hand from either terminal window or adb shell.

command for doing that:

adb shell

su

/data/data/com.googlecode.droidwall.free/app_bin/droidwall.sh

you might get some error messages complaining about a missing module. However, wait until you see the hash sign again and the rules are applied.

You can obviously verify that by trying to access the inet from an application which is not allowed to.

cheers
[G1 Apps and Games] brrymnvette:
Just like to add to the list of phones with the problem.

I get the "Error applying iptables rules. Exit code: -1 iptables v1.4.10"

But I can only block 6 apps until I get the error. As soon as I try to block the 7th, I get the error.

Running on an Atrix 4.1.8.3 rooted with GingerBreak.

Droidwall version 1.5.1
[G1 Apps and Games] xporter:
Hello

I get the same error: “Error applying iptables rules. Exit code: -1 iptables v1.4.10”

I can choose some apps and it works…but if I choose all that I want I get the error.

I use my I9000 with Juwes Rom 4.3.1 (Droidwall version 1.5.1)

But I saw something interesting. Looks like Droidwall works already. I use the White list Modus. I test it with the market, if I choose him and apply all I get the error and the market works normally. If I uncheck the market and apply only all other apps I get the same error again but the market don´t works more. I get a network error. Coz this I think already works, but DroidWall show for me that is deactivate but all Apps that I don´t choose don´t works :-)

I hope you understand what I mean I can help a little bit…my English is not really great ^^
[G1 Apps and Games] juamiso:
solution

hi martin.

Got the same problem. Happened after some update. I am also on Galaxy S.

I worked it around by installing an older version. I have tried 1.4.2 works, 1.4.8 has already the bug.

Google for it, you can download the apk from you browser.

Cheers

juanma
[G1 Apps and Games] asicman:
I'm also getting that -1 error message when droidwall is applying the iptables rules. I'm on 2.3.3 with iptables v1.4.10
[G1 Apps and Games] daniel.weck:
Same error here. Used to work fine before the Gingerbread update. my initramfs is from CF-Root 3.3, by the way (not stock).
[G1 Apps and Games] asicman:
Any update on a fix for this -1 error message so many of us are getting?
[G1 Apps and Games] rodrigo.zr:
Question to those getting the "-1" error:

How long does it take to apply the rules when it works (selecting the maximum number of apps that you know to work)?

I'm trying to figure out if the time increases subtly for some reason, or if iptables 1.4.10 is simply taking too long to apply each individual rule.

All devices to which I have access are able to apply like 50 rules almost instantly (with no noticeable delay), and this includes a very old G1! So, I'm pretty sure this is very device-specific.

Thanks!
[G1 Apps and Games] asicman:
It takes between 45s to 1 min before it fails with the -1 error. The app can easily modify iptables (or rather not modify) in no time when the "all apps" option is ticked. However when I try to customize my list, I get the -1 error message.
[G1 Apps and Games] gamaTeam:
I have same error problem. If it's help I have Galaxy S, software version 2.3.3 I9000XXJVO. It takes about 40 seconds and than I get -1 error.
[G1 Apps and Games] shazoom:
I have the same problem on galaxy tab with overcome 2rc1 and droidwall 1.51.

It works with fine so many rules, taking up to approx 15 seconds. Then add another rule and out takes about 45 seconds to return the error.
[G1 Apps and Games] Taomyn:
How much free space do you have in /system ?

Adfree would have similar issues for me until I freed up more space even though there should have been enough for such a small file.

---

Sent with Tapatalk from my Samsung Galaxy S
[G1 Apps and Games] shazoom:
I have 34 megabytes according to df -h.

I've given up for now. I'm using LBE security service. Not as granular as droidwall, you can't distinguish between wifi and 3g but it does add some very useful privacy stuff by implementing uac, like windows, for the permissions we approve when an app is installed.