firewall filtering by application - Networking

I would like to control which application may access the Internet and which may not.
Thus, not in the IP/Protocol/Port level, but by application name instead.
I tried "Airscanner Mobile" and "ProtectStar Mobile Firewall", but it is not possible to create filtering rules based on application name. It is difficult to know which Protocol/Port/Service is used by any application.
I don't have a fixed monthly data line rate, and I want to let access to the Net for some application, and block it for other ones.
Who can guide me to an existing firewall application that implements this
behavior?
Thanks in advance.

http://www.proxycap.com

thx you

Related

VPN application?

Is there an application which will allow me to connect to a VPN connection without having to wade through
Settings>Connections>Advanced>Select Networks>Edit {work network}>VPN>Connect ???
Hopefully if an application exists it will have additional functions such as re-connect settings and possibly being able to automatically redirect specific applications or computers through the VPN connection in a similar way as the exceptions list does for selected WM5/6 applications.
Any suggestions of any applications with such features would be greatly appreciated.
Thanks.
I'm using the "pockethosts" application. it allow mw to specify the name and the IP numbers I consider be part of my intranet. When an application try to connect to an address specified by pocket host WM5 automatically try to connect to VPN.
Ive been using NCP vpn client, It allows you to set up rules for which hosts are 'behind' a VPN.

[REQ] Netlimiter 2 Client

Is it possible to create a WM6 program which resembles the windows client and will allow for remote administration?
I've already asked the company which produces the application and they will not be producing a client for Windows Mobile. The reason for me requesting this app is because i often use my netlimiter client on my PC to occasionally restrict my brother's usage(god, he downloads so much random stuff at the worst times! >_<) and it would be more convenient to do it via my pda.
Btw, if you dont know what Netlimiter is, it is a windows program designed to limit connection speeds on specific applications or processes. It allows for remote administration which basically lets you manipulate or monitor other computers connections and apply restrictions where necessary. (See Link!! its a good app XD)
http://www.netlimiter.com/

Selectively disable net access by app?

I have a Touch Pro2 which connects to the net every 15 minutes for reasons that I'm not aware of (I have Outlook and Weather set to Manual, have disabled Latitude in Google Maps, etc). SPB Wireless Monitor tells me only that system.exe or services.exe are doing the accesses.
Since my provider charges per session this can get quite expensive, so I've been forced to turn 3G/GPRS access on/off manually using NoData.
Is there a way of selectively enabling net access for designated applications only? e.g. allowing it to Opera and Outlook only by default, and selectively enabling other apps on demand?
Alternatively, is there a way of finding out which apps are trying to access the net without my knowledge? (e.g. by forcing a prompt every time an application attempts 3G/GPRS access)?
TIA for any tips
Ian
itm said:
Alternatively, is there a way of finding out which apps are trying to access the net without my knowledge? (e.g. by forcing a prompt every time an application attempts 3G/GPRS access)?
Ian
Click to expand...
Click to collapse
Hi,
If you grab a trial of SPB Wireless Monitor,that will show what apps and how much data has been used per application.
i think this is a greate idea. someone should really develop this.
basically the user would provide the application with an approved list of applications that can connect using the 3g/edge connection. the rest can only connect using wifi or activesync
GLO said:
Hi,
If you grab a trial of SPB Wireless Monitor,that will show what apps and how much data has been used per application.
Click to expand...
Click to collapse
but it doesnt do anything after it tells you this stats.
a simple application similar to "no data" should still be developed. what do you all think?
look into your taskmanager
RSSHub ? QuickGPS ?
good look
Quote:
Originally Posted by itm View Post
Alternatively, is there a way of finding out which apps are trying to access the net without my knowledge? (e.g. by forcing a prompt every time an application attempts 3G/GPRS access)?
Ian
THE GRIZZ said:
but it doesnt do anything after it tells you this stats.
a simple application similar to "no data" should still be developed. what do you all think?
Click to expand...
Click to collapse
Sure, this wont stop the apps, but as the OP had asked, this will let him know what apps are accessing the NEt
GLO said:
Hi,
If you grab a trial of SPB Wireless Monitor,that will show what apps and how much data has been used per application.
Click to expand...
Click to collapse
SPB Wireless Monitor tells me only that system.exe or services.exe are doing the accesses.
Mamamam said:
look into your taskmanager
RSSHub ? QuickGPS ?
good look
Click to expand...
Click to collapse
I tried installing and runnign TaskMgr but it hangs during startup on my TouchPro2. What's the best alternative Task manager app?
itm said:
SPB Wireless Monitor tells me only that system.exe or services.exe are doing the accesses.
Click to expand...
Click to collapse
I suspect that they are your Network Operator settings checking for updates or
something like that.
GLO said:
I suspect that they are your Network Operator settings checking for updates or
something like that.
Click to expand...
Click to collapse
They make 87 connections in 18 hours - does that sound likely? It works out very expensive for those tariffs which charge a per-connection fee.
Any idea how I could disable this (or confirm that this is indeed the explanation)?
Hutchison3G sets up virtually all their supplied phones with network configurations to connect very frequently like what you describe.
See if you can simply disable your data connection. As with H3G in Australia, you dont get charged when it is simply accessing its own intranet, and when its roaming it only displays a 'lite' homepage.
Perhaps consider a non-network issued rom, or determine whether that data is 'free intranet' or not.
GLO said:
See if you can simply disable your data connection. As with H3G in Australia, you dont get charged when it is simply accessing its own intranet, and when its roaming it only displays a 'lite' homepage.
Click to expand...
Click to collapse
I already use NoData to manually enable/disable the data connection when it's required/not required. I was just hoping for a more elegant solution to stop unauthorised apps incurring data charges, while not sacrificing the convenience of automatic access for apps that I use alot (like Opera and Outlook)
hope someone develops this
You can try PPC version of ProxyCap to restrict or proxify access per application - http://www.proxycap.com/
It doesn't pop up when an aplication attempts to communicate with the Internet, so manual configuration is required. You'll need to set up proxy bypass for the applications you want to be allowed to connect and use localhost as a proxy by default, so that other applications can't communicate with external hosts. You can also filter traffic based on destination IPs and ports. E.g. an easier solution may be to allow http and https traffic only for all applications and drop everything else if you only need to use a web browser.
ProxyCap may not prevent your GPRS/EDGE/HSDPA connection from being established every time, but at least there will be application or protocol filtering in place and thus less unexpected traffic. ProxyCap does not seem to be able to filter ICMP traffic. It appears to be allowing DNS traffic through regardless of the filtering configuration too, as it can't be proxified and is required for proper name resolution.
Another alternative is PPC firewalls like
http://www.airscanner.com/products/firewall/
and
http://www.anthasoft.com/anthafirewall-firewall-for-mobile-device.php
I haven't used any of these products though and can't recommend them.
Both seem to be more user friendly than proxycap though.

Advice on the choice of querying a remote DB

Hello everyone,
I come to you for some advice about an application I'm developing for Android 1.6 and higher.
Specifically, this application must be able to query a remote MySQL database and display the retrieved data. It need also be able to UPDATE data on this databse and that is where things get complicated ...
For selection queries, I wrote a small PHP script on the remote server that retrieves the desired data in the database and encodes them in JSON. From my Android application, I have no problem to retrieve, process and display them.
Now I wonder about the solution (if there is one ...) to run UPDATE from my application on the remote database. For now, I see only two solutions:
- Develop a webService on the server with an update method. Several problems with that: it seems webServices on Android are not easy (not native, have to go through external libs). Moreover, as it's UPDATE query, I want to make sure nobody else can use this webService.
- Alternatively, write a PHP script that makes the UPDATE and call it via HTTP. Same problem as webService: I want to secure this call to be sure that only I can use this script. These scripts can be integrated into an application already present on my server and which is secured by login / password. So, if it is possible to manage PHP sessions from Android, it's won! but Ican't find anything about it ...
What do you think? Ideas?
Thx!

[Q] Firewall app?

Is there a firewall app which blocks all traffic like the personal firewalls for PCs do? With it you could
- whitelist certain apps for all destinations e.g. Google Earth, GMail, browser
- whitelist certain destinations in general e.g. *.google.com
- blacklist certain apps e.g. SuperGameButWhichAlsoPhonesHome.apk
- pops up if an app tries to connect to an yet unlisted destination and blocks or allows by default
The problem with permissions is, it's all or nothing. E.g. I want allow most apps to connect to Flurry or GoogleAnalytics to help the developers improve and understand the usage or if it uploads pics to facebook, but if an SMS app reads my SMS and also has the internet permission (probably for ads and analytics), who knows they're not also transferring my SMS?
Editing the hosts file is not an option as this would only be a blacklist and also very tedious to maintain.
Of course you need root access and it also needs to be open source for it to be trusted. I'm thinking of an addonn for CyanogenMod or so.
I'm not really all too familiar with firewall stuff, but found this for you: http://www.droidsecurity.com/droidhunter/index.html
Then maybe it's overkill but that one combined with this: http://www.carrotapp.com/2010/04/10/app-protector/
Might do the trick?
Thanks for your efford but I am looking for something completely different. A firewall is an app which controls internet traffic.
DroidWall would be perfect, but it doesn't function.
mcmurph said:
Thanks for your efford but I am looking for something completely different. A firewall is an app which controls internet traffic.
Click to expand...
Click to collapse
Yes, I search the same. DroidWall would be perfect, but it doesn't function.
totos1234 said:
Yes, I search the same. DroidWall would be perfect, but it doesn't function.
Click to expand...
Click to collapse
It works fine for me on a g1!
DroidWall does not prevent Wifi connections at all.
As such, as a firewall it's next to useless.
It's more a "3G data connection" limiter than a real firewall.
vasra said:
DroidWall does not prevent Wifi connections at all.
As such, as a firewall it's next to useless.
It's more a "3G data connection" limiter than a real firewall.
Click to expand...
Click to collapse
I don't understand your problem with DroidWall. I don't even have a data plan, so I only use it for Wifi. Sometimes I forget I have it installed, open a program that needs internet access, only to find that it won't work until I allow it to have the access through DroidWall. Works everytime.

Categories

Resources