Database Users

[Q] Firewall app?

Is there a firewall app which blocks all traffic like the personal firewalls for PCs do? With it you could
- whitelist certain apps for all destinations e.g. Google Earth, GMail, browser
- whitelist certain destinations in general e.g. *.google.com
- blacklist certain apps e.g. SuperGameButWhichAlsoPhonesHome.apk
- pops up if an app tries to connect to an yet unlisted destination and blocks or allows by default
The problem with permissions is, it's all or nothing. E.g. I want allow most apps to connect to Flurry or GoogleAnalytics to help the developers improve and understand the usage or if it uploads pics to facebook, but if an SMS app reads my SMS and also has the internet permission (probably for ads and analytics), who knows they're not also transferring my SMS?
Editing the hosts file is not an option as this would only be a blacklist and also very tedious to maintain.
Of course you need root access and it also needs to be open source for it to be trusted. I'm thinking of an addonn for CyanogenMod or so.

I'm not really all too familiar with firewall stuff, but found this for you: http://www.droidsecurity.com/droidhunter/index.html
Then maybe it's overkill but that one combined with this: http://www.carrotapp.com/2010/04/10/app-protector/
Might do the trick?

Thanks for your efford but I am looking for something completely different. A firewall is an app which controls internet traffic.

DroidWall would be perfect, but it doesn't function.
mcmurph said:
Thanks for your efford but I am looking for something completely different. A firewall is an app which controls internet traffic.
Click to expand...
Click to collapse
Yes, I search the same. DroidWall would be perfect, but it doesn't function.

totos1234 said:
Yes, I search the same. DroidWall would be perfect, but it doesn't function.
Click to expand...
Click to collapse
It works fine for me on a g1!

DroidWall does not prevent Wifi connections at all.
As such, as a firewall it's next to useless.
It's more a "3G data connection" limiter than a real firewall.

vasra said:
DroidWall does not prevent Wifi connections at all.
As such, as a firewall it's next to useless.
It's more a "3G data connection" limiter than a real firewall.
Click to expand...
Click to collapse
I don't understand your problem with DroidWall. I don't even have a data plan, so I only use it for Wifi. Sometimes I forget I have it installed, open a program that needs internet access, only to find that it won't work until I allow it to have the access through DroidWall. Works everytime.

[Q]proxy blocked vpn connection

hi guys,the company i am current working at uses a proxy connection for accessing the internet.(you have to go through the proxy in order to access the internet).but the proxy blocked most websites,so i tried to use a vpn connection over the company proxy to bypass the internet restriction.The problem is ,vpn connections are not allowed to go through the proxy.is there any way to bypass the block to use vpn or bypassing the proxy?I am currently using my company's wifi on an android device.please kindly help me to solve this problem.Sorry for my bad english and thank you for any help.
best wishes,
sunnytse1
*thanks button will be clicked if helped!

Anyone?
Sent from my LG-P880 using XDA Premium HD app

sunnytse1 said:
hi guys,the company i am current working at uses a proxy connection for accessing the internet.(you have to go through the proxy in order to access the internet).but the proxy blocked most websites,so i tried to use a vpn connection over the company proxy to bypass the internet restriction.The problem is ,vpn connections are not allowed to go through the proxy.is there any way to bypass the block to use vpn or bypassing the proxy?I am currently using my company's wifi on an android device.please kindly help me to solve this problem.Sorry for my bad english and thank you for any help.
best wishes,
sunnytse1
*thanks button will be clicked if helped!
Click to expand...
Click to collapse
the company i am current working also use VPN by setting the IP adress
the concrete operation is a little complicated, you'd better google for help
Good luck

The easiest solution would be to use 3G/4G and thus avoid any filter/proxy that your company WiFi has.
Assuming you don't want to do that, you should try to figure out what kind of VPN you're using. There are 4 main types:
1) PPTP - This one is old but supported in almost every OS natively (including Android). It's easy to setup a server for these using any Pro version of Windows. It's also easy to block.
2) L2TP - This one is more secure but also less supported. This one is also fairly easy to block. I think only Server editions of Windows can create this type of VPN.
3) IPSec - This is your Cisco-type VPNs. These tend to be more difficult to setup on the server side. Depending on how the network is configured this may be blocked too (but less likely).
4) OpenVPN - This is probably your best bet to avoid workplace blocking. You can configure it to use any protocol or port that you want, however it is very difficult to configure for a first time user. There are tutorials available online to help. You'll need an app (and maybe root) to use an OpenVPN-based VPN.

VPN for Nexus Player

Anyone know if there is a vpn that works on nexus player yet? One that doesn't keep logs.

Yup. IPVanish doesn't keep logs and their Android app works on the Nexus Player.
http://forum.xda-developers.com/showpost.php?p=61837868&postcount=321

I use PIA, I sideloaded the app on my Nexus Player, and it works fine, just don't try to use Netflix when connected to VPN, because it won't work. Apparently it's an issue with android, not Netflix.

The sideloaded "normal" Netflix app works with VPN, but it crashes if you try and click e.g. the subtitle button.

Bump
Any new VPN for the Nexus Player?
Thanks!

i tried Hotspot shield VPN Elite , connect OK , i open netflix , loads a long time, i can see the foreign Catalog , but when i tried to see anything popup a message that i using a Proxy server. D4MN!!

I use unlocator. It costs money and not free, but Is stable and reliable. It's configured on my home network and the NP works great with it (I use netflix, Pandora, bt, espn, bbc iplayer, nba...)

Anyone try sideloading expressvpn on nexus player?

I sideloaded F-Droid and I was able to install regular ol' OpenVPN for Android, which is supported by most if not all providers, including those that don't log.

Since NP is going to be tied to your home network, you really should consider implementing your VPN at the ROUTER level, not on your NP.

Hey guys, I need VPN client for Nexus Player connection to other private server through PPTP (not public service, just private with custom IP, login/pass). And problem that router without VPN connection support, so I need it on the device. Any suggestions?

FINNen said:
Hey guys, I need VPN client for Nexus Player connection to other private server through PPTP (not public service, just private with custom IP, login/pass). And problem that router without VPN connection support, so I need it on the device. Any suggestions?
Click to expand...
Click to collapse
I use PIA on mine. Sideloaded, sits sideways, guess you could fix that with some rotation app. Anyways I can connect with my remote and set it up to auto connect when I open it, I disconnect with my remote.

sask3m said:
I use PIA on mine. Sideloaded, sits sideways, guess you could fix that with some rotation app. Anyways I can connect with my remote and set it up to auto connect when I open it, I disconnect with my remote.
Click to expand...
Click to collapse
If I right understand what does you mean, this is third party service, isn't it? But I need direct connection to my own VPN server with PPTP.

Is there way to access inbuilt vpn settings or 3rd party app to enter own/custom vpn settings?

Is there a way to force user use Always on VPN connection on 6T phone?

Hi friends, i try to secure my children phones from accessing not wonted sites. At home i configured mikrotik router so there is no way to bypass restrictions. But i cannot control what they access from mobile network.
The ideal way would be to connect phone to home VPN . Is there a way to force phone use VPN so user could not just switch it off?
In that case all home network rules and restrictions would work.
If you have some ideas about it, please share.
P.S. I did it recently when noticed that 8 year old neighbor children are watching porn...

I never tried it, but you could check if "Multiple users" gives you the chance to create a low privileged user which could maybe not edit network/vpn/dns settings?
Maybe you could setup the main accounts &co from the admin user and secure it with your fingerprint, then grant your childs just the "guest" user access?
Maybe give it a try and check what those users (a new one you create or the guest one) are allowed to do and if that achieves your objective

migors said:
Hi friends, i try to secure my children phones from accessing not wonted sites. At home i configured mikrotik router so there is no way to bypass restrictions. But i cannot control what they access from mobile network.
The ideal way would be to connect phone to home VPN . Is there a way to force phone use VPN so user could not just switch it off?
In that case all home network rules and restrictions would work.
If you have some ideas about it, please share.
P.S. I did it recently when noticed that 8 year old neighbor children are watching porn...
Click to expand...
Click to collapse
My mother utilized Norton Family to limit what could be seen and not seen. You can also utilize the built in family link ability from google to block searches on google and app store. Link for reference: https://protectyoungeyes.com/content/android-parental-controls-complete-guide-parents/
As far as what you are asking, you could use adguard to create the persistent VPN and use their family dns set up. Once done you can always use an app locker to lock the app settings and the app itself so it can't be uninstalled.

maybe you can test an app locker. with it, they can't stop the app vpn if they haven't the code lock

gege0202 said:
maybe you can test an app locker. with it, they can't stop the app vpn if they haven't the code lock
Click to expand...
Click to collapse
You can use an APP locker to lock the settings.
If you can't access the settings you can't turn it off.

migors said:
Hi friends, i try to secure my children phones from accessing not wonted sites. At home i configured mikrotik router so there is no way to bypass restrictions. But i cannot control what they access from mobile network.
The ideal way would be to connect phone to home VPN . Is there a way to force phone use VPN so user could not just switch it off?
In that case all home network rules and restrictions would work.
If you have some ideas about it, please share.
P.S. I did it recently when noticed that 8 year old neighbor children are watching porn...
Click to expand...
Click to collapse
Try private dns: dns-family.adguard.com
Read here: https://www.google.com/amp/s/adguard.com/en/blog/adguard-dns-announcement/amp.html

One problem with the "lock the VPN settings" is that the VPN swithes off fairly randomly. On my phone, I set up a VPN using my home router, and connect to it while on mobile. But at random points in the day it disconnects. It's necessary to go back into VPN settings to turn it back on...

Frankenscript said:
One problem with the "lock the VPN settings" is that the VPN swithes off fairly randomly. On my phone, I set up a VPN using my home router, and connect to it while on mobile. But at random points in the day it disconnects. It's necessary to go back into VPN settings to turn it back on...
Click to expand...
Click to collapse
It's getting convoluted but taker can force reconnect.

Caltinpla said:
Try private dns: dns-family.adguard.com
Read here: https://www.google.com/amp/s/adguard.com/en/blog/adguard-dns-announcement/amp.html
Click to expand...
Click to collapse
I already use opendns, it blocks everything.
I do not see option to add just dns in android. Child just installs some vpn app or connects to some wifi and restrictions does not work.
On other hand if phone is connected to home vpn, there is no way to bypass it.
My microtik bloks all proxy, vpn and routes dns to opendns.
thanks for app locker suggestion. will try it

migors said:
I already use opendns, it blocks everything.
I do not see option to add just dns in android. Child just installs some vpn app or connects to some wifi and restrictions does not work.
On other hand if phone is connected to home vpn, there is no way to bypass it.
My microtik bloks all proxy, vpn and routes dns to opendns.
thanks for app locker suggestion. will try it
Click to expand...
Click to collapse
It's under Wi-Fi and internet setting but only available for Android 9 version. The adguard family dns blocks ad and adult stuff also.

When VPN down, block app - When VPN up, allow app

Hello...
I have a Mi Box S device. It has the lastest updates.
Basically - what I am trying to do is when my VPN is up, an app is allowed to run (so do nothing). When the VPN is down, block the app.
I do not have ROOT.
I have tried various firewalls on the device that do not need ROOT and blocks apps - but they work by creating a separate VPN connection for the device. When I switch on my VPN, the firewall stops working. When I switch my VPN off, the firewall needs to be manually started.
If I had ROOT, I would edit IPTABLES to block everything except the IP \ PORTS needed for my VPN to work, and that would solve the issue. No apps would have Internet access until my VPN was active.
Ideas welcome. I am not against rooting the device - however - for the newest versions of the Android TV boxes, it seems to cause many more issues and does not seem to be worth the risk.
THANK YOU!

I do NOT know the answer to your question and I don't have Android TV, so ignore this if it doesn't help...
On the PC there are various VPN killswitch batch files that simply remove the LAN gateway, which works PERFECTLY to do what you ask on a PC:
Start VPN and then start the VPN killswitch
If the VPN is on, the LAN and WAN are accessed
The instant the VPN drops, the WAN is dropped
But the LAN remains intact
Maybe something like that is available for Android?
Googling, we get a lot of hits for Android VPN-specific killswitches.
Each Android public VPN server seems to have their own killswitch.
For example, here's one for private vpn on Android.
But there should be a killswitch for Android WITHOUT having to use any given VPN public server.
This hit implies it's a part of the Android settings.
But unfortunately my Android 12 doesn't have those VPN killswitch settings.
Does yours?

Solved. Admittedly - this solution works for me but might not work for others.
I host my own VPN server 'in the cloud' and, as part of that server, it's own DNS server.
Manually set the IP and DNS on the Mi Box S. Set the DNS to an INTERNAL DNS address that is only available when the VPN is running.
The app in question needs DNS to function. When the VPN is down, no functioning DNS, app does not function.
When the VPN is up, DNS functions, the app functions.
Good enough for me...