3 ms·

> better than nothing Is "nothing" the only Android per-app outbound firewall alternative to NetGuard?

colordrops 2y ago
No, if you have a rooted phone you can use AFWall+. And there are other non-root firewalls.
catlikesshrimp 2y ago
My favorite is another FOSS, but this one is special because it doesn't need network permissions. No root, ofc, so that sticks. Karma Firewall https://f-droid.org/packages/net.stargw.fok/ https://f-droid.org/packages/net.stargw.fok/
pmontra 2y ago
I've been using Blockada for many years but that's a firewall against ads and trackers. No ads inside apps. Ideally I would use NetGuard to block the apps and Blockada to block ads and trackers for the apps that I allowed to perform network traffic in NetGuard. But Android allows only one active VPN and they can't be chained, so it's a hard choice. Actually it's not so hard: I keep blocking ads and trackers.
- Onavo 2y ago
  Blockada is most likely a DNS level blocker, netguard supports that. Alternatively you can configure it to point the DNS servers at NextDNS if you just want a nice UI to configure block lists (though NextDNS might track you).
  - esperent 2y ago
    NextDNS as a manual DNS server on Android is the adblocking solution I've been using for years. Is there any reason to believe they would track you, any more than any other DNS provider?
    - trissi1996 2y ago
      Unlike most other dns providers, they often have an account or even payment to identify you, not just your outbound IP....
      - esperent 2y ago
        Do they keep logs though?
        miroljub 2y ago
        That's the whole point, you don't know if they keep logs.
- saint_yossarian 2y ago
  NetGuard does ad-blocking with a DNS blacklist, but it's a Pro feature (which I use and works great).
  - flanbiscuit 2y ago
    On NetGuard's F-Droid page it lists "Optionally block ads using a hosts file" under its "features" section and not under its "PRO Features" section Seems like I can get ad blocking for free. https://f-droid.org/en/packages/eu.faircode.netguard/ https://f-droid.org/en/packages/eu.faircode.netguard/ https://github.com/M66B/NetGuard/blob/master/ADBLOCKING.md https://github.com/M66B/NetGuard/blob/master/ADBLOCKING.md
    - saint_yossarian 2y ago
      Oh you're probably right, it's been a while since I was on the free version :)
Springtime 2y ago
At the OS level LineageOS offers per-app network permissions, which I've used and functions as expected. One quirk from what I understand of this ticket[1] is if there's a proxy set up via a separate internet allowed app it can bypass the restriction via that app. GrapheneOS' implementation is said to prevent this. [1] https://gitlab.com/LineageOS/issues/android/-/issues/3228 https://gitlab.com/LineageOS/issues/android/-/issues/3228
thatloststudent 2y ago
There's RethinkDNS [1](not affiliated to them, just like their software). Sometimes it gets killed on my phone, but otherwise it's a great replacement, adds some much-needed features like proxies and wireguard VPNs on top of a DNS and app level control. [1] - https://f-droid.org/packages/com.celzero.bravedns/ https://f-droid.org/packages/com.celzero.bravedns/
saganus 2y ago
I have used GlassWire (not affiliated) for a few years without issues. It's also rootless so I assume it has the same restrictions, but it's been very helpful with apps like Uber, which I use seldomly, but prefer not to have their notifications shoved in my face every 30 minutes. It's also helpful for disabling access to most of the bloatware that comes with e.g. Samsung phones and such. Probably not blocking everything, but I feel like it's at least something.

No, if you have a rooted phone you can use AFWall+. And there are other non-root firewalls.

My favorite is another FOSS, but this one is special because it doesn't need network permissions. No root, ofc, so that sticks. Karma Firewall https://f-droid.org/packages/net.stargw.fok/ https://f-droid.org/packages/net.stargw.fok/

pmontra 2y ago

I've been using Blockada for many years but that's a firewall against ads and trackers. No ads inside apps. Ideally I would use NetGuard to block the apps and Blockada to block ads and trackers for the apps that I allowed to perform network traffic in NetGuard. But Android allows only one active VPN and they can't be chained, so it's a hard choice. Actually it's not so hard: I keep blocking ads and trackers.

Onavo 2y ago
Blockada is most likely a DNS level blocker, netguard supports that. Alternatively you can configure it to point the DNS servers at NextDNS if you just want a nice UI to configure block lists (though NextDNS might track you).
- esperent 2y ago
  NextDNS as a manual DNS server on Android is the adblocking solution I've been using for years. Is there any reason to believe they would track you, any more than any other DNS provider?
  - trissi1996 2y ago
    Unlike most other dns providers, they often have an account or even payment to identify you, not just your outbound IP....
    - esperent 2y ago
      Do they keep logs though?
      - miroljub 2y ago
        That's the whole point, you don't know if they keep logs.
saint_yossarian 2y ago
NetGuard does ad-blocking with a DNS blacklist, but it's a Pro feature (which I use and works great).
- flanbiscuit 2y ago
  On NetGuard's F-Droid page it lists "Optionally block ads using a hosts file" under its "features" section and not under its "PRO Features" section Seems like I can get ad blocking for free. https://f-droid.org/en/packages/eu.faircode.netguard/ https://f-droid.org/en/packages/eu.faircode.netguard/ https://github.com/M66B/NetGuard/blob/master/ADBLOCKING.md https://github.com/M66B/NetGuard/blob/master/ADBLOCKING.md
  - saint_yossarian 2y ago
    Oh you're probably right, it's been a while since I was on the free version :)

Springtime 2y ago

At the OS level LineageOS offers per-app network permissions, which I've used and functions as expected. One quirk from what I understand of this ticket[1] is if there's a proxy set up via a separate internet allowed app it can bypass the restriction via that app. GrapheneOS' implementation is said to prevent this. [1] https://gitlab.com/LineageOS/issues/android/-/issues/3228 https://gitlab.com/LineageOS/issues/android/-/issues/3228

thatloststudent 2y ago

There's RethinkDNS [1](not affiliated to them, just like their software). Sometimes it gets killed on my phone, but otherwise it's a great replacement, adds some much-needed features like proxies and wireguard VPNs on top of a DNS and app level control. [1] - https://f-droid.org/packages/com.celzero.bravedns/ https://f-droid.org/packages/com.celzero.bravedns/

saganus 2y ago

I have used GlassWire (not affiliated) for a few years without issues. It's also rootless so I assume it has the same restrictions, but it's been very helpful with apps like Uber, which I use seldomly, but prefer not to have their notifications shoved in my face every 30 minutes. It's also helpful for disabling access to most of the bloatware that comes with e.g. Samsung phones and such. Probably not blocking everything, but I feel like it's at least something.