yashsingh1/xdaforums huggingface dataset:
[G1 Apps and Games] 11768:
Would it be possible that in the feature when we select all in blacklist mode, but allow a selected number of app to whitelist?

My case: I want to blacklist everything from using packet data except service for A-GPS and MMS.
[G1 Apps and Games] :
select white list and only select mms and agps apps

if you need, you can allow all in wifi and only mms and agps in 3g
[G1 Apps and Games] r_dub:
I did select that but I'll try it again
[G1 Apps and Games] Burag:
Brilliant idea :eek:

I think there should be one option more - smth like "block all" button (or maybe widget in future?). IMO iptables its better way to stop internet connection than changing APNs :D
[G1 Apps and Games] r_dub:
Well after a little more testing on hero the market still is blocked selected and unselected the weather on the flip clock doesn't work but I can log into gtalk not sure if I could revive messages while it was on
[G1 Apps and Games] rodrigo.zr:
Too bad I can't test this on Hero.

It would probably be possible to determine which process is performing the connection for the Market application using iptables logging targets.
[G1 Apps and Games] r_dub:
Well could send you a log if that help and I love the app but this stuff really needs to be fixed for people to use it on hero
[G1 Apps and Games] rodrigo.zr:
Good. I'll check whats the best way of logging... If I find an easy way I'll add an option in the application itself to write a log file (and view/email it).

I'm leaving right now, so don't expect anything for today (perhaps tomorrow).
[G1 Apps and Games] rodrigo.zr:
Just a note: you can always use the "Purge rules" button to temporarily disable the firewall and access the market ;) (just as a workaround while this is not fixed).
[G1 Apps and Games] r_dub:
Okay let me know tomorrow hit me up with a pm with your gmail so I can send it and help with debug in gtalk
[G1 Apps and Games] Geniusdog254:
I have now uploaded it (with communication & permissions from the dev.) to the Market under the name DroidWall (Root Required).

Hope you guys enjoy it!
[G1 Apps and Games] rodrigo.zr:
Thanks! I have updated the first post indicating that it is now on Market thanks to you.
[G1 Apps and Games] senab:
Finally got this installed (not due to a problem with the APK, but me not restarting after installing CM's latest recovery image). Looks nice but I can't get it to work.

I've set my applications but it doesn't seem to update iptables with my allowed applications, only with catch-all REJECT rule. If I press purge rules, then that REJECT rule disappears (as expected). Any ideas? Also is there a manual (and permanent) way of removing all the rules?
[G1 Apps and Games] :
Awesome application!

I had to register just to say thanks :D.

I was using APNdroid to block cell data, but every time I needed to turn it on (such as using the maps to find directions) I noted that many megabytes had been transferred in a matter of minutes (usually around 20MB!).

Keep up with the good work. I'll be watching this project closely!
[G1 Apps and Games] rodrigo.zr:
I did some research but found that is not possible to capture iptables logs on Android. The reason is that iptables uses the syslog, which is disabled on Android. There might be a way of enabling it, but that would require a ROM modification.

So, unfortunately, the only way I can think of to determine which process needs to be unblocked is to manually enable each of them and try to connect again :(
[G1 Apps and Games] rodrigo.zr:
You have the same problem g4m3rz described. The only reason I can think for this is that the iptables bundled with your ROM does not support the owner kernel module.

I'll modify Droid Wall to detect when a rule cannot be applied and display the output on a dialog - so that we can track this problem.
[G1 Apps and Games] rodrigo.zr:
Good to know that it is being useful for other people!

Thanks for the incentive too :)
[G1 Apps and Games] rodrigo.zr:
I just uploaded version 1.2 to the site.

If you have a chance to test with this version I'll greately appreciate it!

Thanks.
[G1 Apps and Games] :
I'm using this app for more than 36hs now (with the cell network ON and background data enabled) and I'm finding out that my battery is in fact lasting longer.

Just wanted to share this with everyone :D
[G1 Apps and Games] ThR1LL:
I can't seem to get this working on my phone. I know for a fact this is a user error lol. Am I the only one not being able to connect to anything usin cyan 3.6.8.1?
[G1 Apps and Games] Chahk:
Cyanogen said he will re-compile the necessary modules for the next release to ensure Droid Wall works. You might need to bite the bullet and upgrade to his experimental build here.
[G1 Apps and Games] ThR1LL:
Thanks for clearing that up. Sorry I didn't search enough on this :o
[G1 Apps and Games] 11768:
What the... such easy theory, but I just understand it now. LOL. Thanks man!
[G1 Apps and Games] :
in the list, check wifi in "allow all, same a select all applications", next check 3g in mms and gps apps. next click menu and apply rules.

is easy...
[G1 Apps and Games] 11768:
The setting will remain even though I reboot / uninstall DroidWall, right?
[G1 Apps and Games] :
settins remains after reboot. i don't known if remains after uninstall.possibly you love not uninstall, in order to see the logs...
[G1 Apps and Games] 11768:
Thanks again man. Most importantly it remain after reboot, else I will be slaughtered by my telco.

:p
[G1 Apps and Games] DualJoe:
How can i lookup the 'owner' matches with 'iptables' on shell? When i enter 'iptables - L -v' it doesn't show 'owners' at all.

Profiles would be very very handy (with corresponding widget/link for homescreen). I mainly allow root apps only (1 entry only*, for SSH) and switch occasionally to a 'market/downloader/google services' configuration. Have to do it manually currently.

* Just because you're not paranoid doesn't mean they're not after you as well. ;)

Huawei U8510

Android 2.3.7 - CM7 (Benru-v2)

Chain INPUT (policy ACCEPT 173 packets, 14925 bytes)
pkts bytes target prot opt in out source destination

Chain FORWARD (policy ACCEPT 0 packets, 0 bytes)
pkts bytes target prot opt in out source destination

Chain OUTPUT (policy ACCEPT 151 packets, 32857 bytes)
pkts bytes target prot opt in out source destination
15480 1859K droidwall 0 -- any any anywhere anywhere

Chain droidwall (1 references)
pkts bytes target prot opt in out source destination
1 72 RETURN udp -- any any anywhere anywhere udp dpt:domain
0 0 droidwall-3g 0 -- any rmnet+ anywhere anywhere
0 0 droidwall-3g 0 -- any pdp+ anywhere anywhere
0 0 droidwall-3g 0 -- any ppp+ anywhere anywhere
0 0 droidwall-3g 0 -- any uwbr+ anywhere anywhere
0 0 droidwall-3g 0 -- any wimax+ anywhere anywhere
0 0 droidwall-3g 0 -- any vsnet+ anywhere anywhere
0 0 droidwall-3g 0 -- any ccmni+ anywhere anywhere
0 0 droidwall-wifi 0 -- any tiwlan+ anywhere anywhere
0 0 droidwall-wifi 0 -- any wlan+ anywhere anywhere
150 32645 droidwall-wifi 0 -- any eth+ anywhere anywhere
0 0 droidwall-wifi 0 -- any ra+ anywhere anywhere

Chain droidwall-3g (7 references)
pkts bytes target prot opt in out source destination
0 0 droidwall-reject 0 -- any any anywhere anywhere

Chain droidwall-reject (2 references)
pkts bytes target prot opt in out source destination
5 348 LOG 0 -- any any anywhere anywhere LOG level warning uid prefix `[DROIDWALL] '
5 348 REJECT 0 -- any any anywhere anywhere reject-with icmp-port-unreachable

Chain droidwall-wifi (4 references)
pkts bytes target prot opt in out source destination
0 0 RETURN 0 -- any any anywhere anywhere
0 0 RETURN 0 -- any any anywhere anywhere
145 32297 RETURN 0 -- any any anywhere anywhere
0 0 RETURN 0 -- any any anywhere anywhere
5 348 droidwall-reject 0 -- any any anywhere anywhere
[G1 Apps and Games] notalent123:
Can someone point me to where this is discussed?

I have droidwall + CM7.1.0.1-Inc2 in whitelist mode with nothing enabled for 3g, and all apps enabled for Wifi. I racked up a bunch of data use (no idea where it came from) while away from Wifi. Is this a known issue, and is so is the only way to fix it to blacklist all?
[G1 Apps and Games] AntJWebb:
Might be worth installing [one of many] data monitor app - that should at least tell you exactly what it is that is using that mobile data?
[G1 Apps and Games] DualJoe:
How do you measure that?

Can you post a '/data/data/com.googlecode.droidwall.free/app_bin/iptables_armv5 -L -v' log?

Port 53 (DNS) data looks like is always allowed.
[G1 Apps and Games] TheMegastar:
Hi Rodrigo, The app is a wonderful app when it works! It is working on my Samsung Galaxy S II (Android 2.3.5), but it is NOT WORKING on my Samsung Galaxy Y (GT-S5360) Android 2.3.6. It's a rooted phone with Busybox installed.

I am able to install the app (v1.5.5) and save the rules, BUT I get an error while trying to ENABLE THE FIREWALL. This is the error I get :

"Error applying iptables rules. Exit code: 11

iptables v1.4.10

iptables: No chain/target/

match by that name"

Can you correct this error from your app or give some solution?

Thanks in advance
[G1 Apps and Games] rodrigo.zr:
Hi. This problem is described in the FAQ: http://code.google.com/p/droidwall/wiki/FAQ
[G1 Apps and Games] TheMegastar:
Thanks for responding, Rodrigo. Copy pasting from the FAQ :

2. no chains/target/match by that name

This error message unfortunately means that your kernel does not support netfilter owner match module, so DroidWall will not work.

The only possible solution is to flash a customized ROM (or kernel) with full netfilter support.

ROM developers, please ensure that the following configuration option is enabled in the kernel (either built-in or as a module): CONFIG_NETFILTER_XT_MATCH_OWNER

So you are saying that the above is the solution to the problem faced by me? If yes, then can you tell me which kernel is compatible with this phone GT-S5360 (Galaxy Y) and where can I find it? And also tell me if I can flash kernels & ROMs with Odin3 -v1.85 on this phone model?
[G1 Apps and Games] Al936:
Hi Rodrigo,

I just got Motorola RAZR. It is with Android 2.3.5. Unfortunately Droid Wall is not work on my phone. I submitted the isuue http://code.google.com/p/droidwall/issues/detail?id=214&colspec=ID%20Type%20Status%20Priority%20Summary%20Opened%20Stars. Hope you will read it and will help.

Thanks!
[G1 Apps and Games] rodrigo.zr:
Yes, the only way is to flash either a custom kernel or a custom ROM.

Sorry but I can't help you with that...
[G1 Apps and Games] ZeroManArmy:
I use this to block apps from using my data. Like Angry Birds. The new seasons needs to many permissions and if it can't use Data or Wifi then it cant send my data. Right?
[G1 Apps and Games] cyberjava:
Not sure if they are 1000 or 1001 but according to TrafficInfo Dialer, Dialer Storage, SIM Toolkit, CSC, DataCreate leaking using v1.5.5 on Samsung Gio 2.3.4 stock rom, loging is off

Do you really think this traffic is on loopback?
[G1 Apps and Games] SmallWalrus:
Hi,

Thanks for writing this app. I do have a bit of concern about this though, I noticed that upon boot up there is a small window of time when the phone is actually able to connect to the internet.

Data connections are then blocked shortly after when DroidWall initialised fully.

This is actually not the most desirable behaviour, since those of us with no data plans will get slapped with huge access charges just from this bit of leakage alone (and I'm on Eclair so there is no system-wide ability to block data usage).

Is it possible to have add in an init script that applies a blank reject all ruleset while the phone is starting up, and once it is done then DroidWall will apply a new (current) set of active rules?

I probably will be able to help out, but I have not yet dived into Android development. A good example of what I proposed however can be found in the other popular app Link2SD. It creates a boot script that mounts the SD-Ext partition so apps that are linked to the Ext partition (even those with services) may work properly.

Thanks for reading this generally TL;DR post :D
[G1 Apps and Games] zman519:
Did any one see an update in the market today/well yesterday. But the market still says 12/9/2011

Sent from the Drivers Seat of my Suby txting and Driving doing 100MPH+ in a school zone! Ha.
[G1 Apps and Games] DualJoe:
Yep, there was an update (v1.5.7). Lacking a changelog in the 'What's new' section of the market though. Still reading 1.5.5 there.
[G1 Apps and Games] zman519:
^^^ ya I finly looked up the google code page & saw it

Thanks

Sent from the Drivers Seat of my Suby txting and Driving doing 100MPH+ in a school zone! Ha.
[G1 Apps and Games] night_stalker_z:
Great app!

Great app.

I looked in the project homepage and can't find anywhere to submit bugs/enchancements so I'll post them here.

1. Replace 'Help' with 'Show Log' and move 'Help' into the 'More' menu

2. 'Clear Log' appears to clear all the kernel logs so somewhere stating that would happen would be quite nice

3. Would it be possible to use the wireless/3g icon from the theme instead of the current ones?

4. Can the log be sorted by app and time?

Apart from these minor things from me, it's working great.

Thanks :)
[G1 Apps and Games] zman519:
I like your ideas

Sent from the Drivers Seat of my Suby txting and Driving doing 100MPH+ in a school zone! Ha.
[G1 Apps and Games] lamodel:
'Error writing to preferences' error message.

I have the same problem except I'm using a rooted Samsung Infuse w/the original ROM. Does anyone know why this is happening or have a solution? Thank you.
[G1 Apps and Games] muneebrocks:
I want to know gps means? I want to block every apply from using gprs except agpd

So should i simply enable gps to enable agps to use gprs?
[G1 Apps and Games] lamodel:
GPS means Global Positioning System. It is when your phone uses satellites to figure out its position. GPRS is General Packet Radio Services, which is one of the ways your phone communicates with the cell towers. They are completely different things. Enabling GPS will allow applications to figure out your location, while enabling GPRS will allow your phone to exchange data with the cell towers. You can enable/disable them independently depending on what you are trying to do. Hope this helps.
[G1 Apps and Games] muneebrocks:
You misunderstood me on droidwall list there is something named gps

Now I want to know whether enabling it to access gprs will help with gps lock
[G1 Apps and Games] Sithlord:
Hi,

I second the suggestions made by Night_stalker_z and I may add :

The concept of "Profiles". Calling a profile would apply rules to some apps. For instance, I never let Market have permanent access, only when performing updates so I don't see constant connection tries to the outside world. Unfortunately, to make Market work properly, I have to grant access to 3 apps, namely "Market", "Download Manager" and "Google Framework" and it's a bit tedious to enable/disable them everytime.

Having a profiles structure would greatly help. A profile could contain these 3 apps and their settings. Enabling/Disabling the profile would grand/revoke access.
[G1 Apps and Games] Firestone_cz:
Hello, I have a problem with droidwall function after phone restart. Simple say iptables doesn't take a effect after restarting system.

I have to manually Apply rules or disable/enable firewall via program's menu.

Can anybody help how can I solve this problem?

Many thanks.
[G1 Apps and Games] catch33:
I third (;)) that.

Profiles would be a very nice addition to the great Droidwall!
[G1 Apps and Games] Mrktmind:
I'd love to have profiles on Droidwall.

I'm looking for a solution to stop data leakage when my vpn is down. If Droidwall had profiles I could have one profile that had everything but the vpn blocked and another with the apps I want enabled. When I move to a new wifi hotspot I can wait till my vpn is up and click the "enabled" profile. When I'm done I click the disabled profile until I get to my next hotspot. (I have a wifi only phone - Samsung Galaxy Player YP-G70)
[G1 Apps and Games] hyl4me:
Does anyone know where is the log file locate at?
[G1 Apps and Games] DualJoe:
I guess its derived and filtered from syslog. The droidwall entries are pre-tagged with [droidwall] if i reckon correctly.
[G1 Apps and Games] Xenous:
Wanted to thank the developer for this great app.

This is the first app that I install after flashing a custom or stock ROM. I have been using it since foryo days and it keeps on getting better.
[G1 Apps and Games] hoanglinhck:
yahooooooooooooooooooooo thank man i need is. :)
[G1 Apps and Games] handfish:
Hi,

I am wondering if there is a way to change the iptables so that the firewall setting also applies to my VPN connection. DroidWall works fine without a VPN connection. However, as soon as I have the CISCO AnyConnect VPN connected, the "rules" changed to:

-----------

Chain INPUT .....

0 0 ciscovpn all

Chain FORWARD ...

0 0 ciscovpn all

...

Chain ciscovpn ...

... <a bunch of settings here>

-----------

I think if there is a way for DroidWall to also add its setting into the ciscovpn chain it will be GREAT. Please consider.

If anyone have any suggestion, please let me know.

Thanks!!!
[G1 Apps and Games] emm_stra:
Hello

How can I backup the settings , I mean the rules, in order to use them again when I change rom?
[G1 Apps and Games] adrobnis:
IPTables & 4G

Good Morning,

This is a great app and I appreciate the hard work the developer has put into it.

I have a few questions for anyone that might know.

1a. Why are some items combined with the same ID number? (10025: Downloads, Media Storage, DRM etc...)

1b. What is the best way to separate items to a more individual level?

2. What settings would cause 4G not to work? On my HTC Thunderbolt I allowed the basics through and 4G worked fine. On my Droid 4 the same setup/settings that I used on my Thunderbolt will not allow 4G to work but 3G does.

If I turn off the firewall (allow all) and restart the phone 4G will work. If I turn on the firewall after restarting I lose ALL network connectivity. If I then restart the phone with the firewall turned-on with my usual settings 3G will work again but not 4G.

Thank you for your help and information.
[G1 Apps and Games] bamx2:
Select all check box doesn't show ?

I just installed Droidwall 1.57 on my phone . The "select all " check box option at the top of the app list is not there . What am I missing and how can I fix it ? - Thanks
[G1 Apps and Games] [] AL []:
+1

I've noticed and been trying to figure out the same with another vpn just today (DroidVPN): Droidwall becomes ineffective upon vpn connection and opening the door wide open for all installed apps...hello ads and what not...!?!:(

If anyone knows how to circumvent this, PLEASE let us know.

Cheers

PS: to work, the vpn needs that I unblock (I use blacklist mode) the vpn app AND "Applications running as root" otherwise: no go.

Strange (although i can imagine vpn having low level dependencies) because I believe than I can allow internet access to other root apps (TB for example) without having to uncheck all apps running as root....

Anyway, yes DroidWall on vpn!!

And thanks a bunch Rodrigo.
[G1 Apps and Games] emm_stra:
Αny answer here?
[G1 Apps and Games] mnjm9b:
You don't want to...

Because the apps will most likely have different id #s and therefore you will be allowing/disallowing the wrong apps.
[G1 Apps and Games] nospoftombl:
Allow PING to the mobile

Hi,

is there a way to enable PING to my mobile (preferred only over Wifi), e.g. with custom scripts? I regularily check the network and start my fileserver via wakeonlan if any of the listed devices is active (= PING succeeds).
[G1 Apps and Games] krzych:
There's nothing more easier than exporting a list of dot-shaped names (com.keramidas.titanium or similar) with rules from the program itself, I see no point not having this option with restore in pair. This is only the laziness, app UIDs has nothing to do with this. Rodrigo could and should have done it.

I have this problem myself, as any frequent flasher on this forum, it's a BASE functionality to allow backup the data. Even to be more simplier - DroidWall could store settings in this format on SD allowing to initialize itself from SD while being freshly installed - no options at all with such solution.
[G1 Apps and Games] emm_stra:
I agree. How to make it done?
[G1 Apps and Games] mnjm9b:
Oh I know....

Call the developer lazy

and demand changes to the app...

That always works well...
[G1 Apps and Games] SiL3nTKiLL:
downloading!
[G1 Apps and Games] emm_stra:
Let's all do so.
[G1 Apps and Games] krzych:
I've tried to contact him once by mail - no response. I've looked here on the thread, no real support as far as I see. I've waited until he get to this by himself, waited almost a year now. So no, no other choice than expressing my disappointment here, especially as I know how easy would be to do it. I even tried to read the opensourced code, but as settings backup is easy that the whole app understanding is not quite easy (NDK involved, and I'm rather unfamiliar with android programming... yet).

It's just a pity that so good app is lying around as an old trash... By the way, I've heard something about selling the sources to Avast - I don't know how much this is true, but if it is, it would explain why it's not really cared about here.

As I said, get the app names (I mean long package names localised by domain-like parts - "com.keramidas.titanium" for example), pair them with UIDs to get their settings by UIDs (which means get two flags - WIFI and 3G on/off), then save it (long name and flags) in ANY format, even plain text separated by tabs, or simple Java table snapshot.

Restoring is as easy as saving, just pair long names with UIDs, set the flags, done. Then apply both to existing source, that's all folks.

Now someone has to do it :P. And no, I won't, not yet. I have my own apps to write.

PS. @mnjm9b - as you probably _should_ see, I did not posted this as a _wish_ but as a reply to the post which claims, there is no way to restore settings because UIDs changes between flashes and app reinstalls. So no, there is really easy way to do it. And yes, this was your own post at the top of this page. So please, don't flame about my quite constructive comment of the issue.
[G1 Apps and Games] mythos_:
This is a great app. One of he first I installed on my phone.

The one feaure I'd like to have is to have a way to search for a particular app instead of scrolling down the list.
[G1 Apps and Games] blackshaddow:
hy friends

im using droidwall v1.5.1 on my samsung galaxy Y s6102 bult i can't activate the firewall

when i try to save the rules it gives me an error: ,,error applyng iptables rules exit code 11 iptables v1.4.7 iptables no chain/target/match by that name.''

how can i make it ron ok ?

please help

ps: sorry for my bad english i'm from Romainia.
[G1 Apps and Games] Jaromos:
Function not implemented

Hi guys,

once I try to view the log file, it says:

klogctl: Function not implemented

How can I solve this issue?

Thank!
[G1 Apps and Games] faster82:
Can we have the source code

Dude,

Can we use part of you source code for some other project?
[G1 Apps and Games] andry23jsv:
Droidwall isn't working fine on jelly bean for me..

I tried to use the script that was working on ics, but on JB int doesn't work!!

Any one got it working????
[G1 Apps and Games] easyyu:
Hi.

I tried your app (v1.5.7) on Samsung Galaxy GT-I9100 with kernel 3.0.15xxxx... and baseband v I9100XXLPS with sw ICS v4.0.3.

The phone is rooted. It block all adds on wifi, but when I check all app from list on 3G column and apply plan it doesn't block anything.

Played Angry Birds and the adds still present. Try few different app and it pass all mobile data through. When I read log it said the packet is blocked but it is not.

I have not any kind off error when applying a plan.

What cause that droid wall apsolutly do not work with mobile data? (3G)

Thx
[G1 Apps and Games] easyyu:
anyone???