afwall VS rethink-app

I considered what many others have done: installing Gboard and using Graphene's settings to deny it network access, potentially even going the extra step of using a root firewall like AFWall (something I plan on looking into later regardless) but I was curious to see if I could do without.

AFWall?

AFWall+ can also do that. It needs root though.

AFWall+ (version 3.5.3): Control network traffic

The app is still getting commits. And there is no need to fork the project, people can just keep adding to the code using pull requests.

Check github here. A workaround has been script posted there try that.

"Android Firewall+ (AFWall+) is an advanced iptables editor (GUI) for Android. It provides fine-grained control over which Android apps are allowed to access the network." https://github.com/ukanth/afwall

Can I block using iptables on Android (I'm rooted)?

We are aware of connectivity issues with WireGuard (ref) that we've fixed in yet-to-release version v055b. Please wait until that's out (2 days? 3?) (:

Noted. Thanks.

Also, crafting nice UI isn't our strong suit. One look at our github issue tracker (ex) and you'd know. We try our best, though (:

sky is a stub resolver, which after stripping out all request information, forwards the dns query to both Cloudflare and Google DoH servers (code), and replies from which ever responds back the fastest. Both the client app and the resolver (server) are open source, so if you find any leaks and know what's up, we're open to changes.

Could, but it'd clutter the Settings screen? Probably, Rethink could let expert users enter arbitrary IP subnets to exclude / not route? This setting will be a footgun, though! Regardless, I've noted it: https://github.com/celzero/rethink-app/issues/899

I believe it is a bug with okhttp, a library we use internally for blocklist updates: https://github.com/celzero/rethink-app/issues/875

NetGuard can block tracker and ad (albeit very basic), so you can use it on its own without Blokada. Or you can use the AdGuard app instead which has both firewall and (complete) adblocking feature. If you prefer open source app then check Rethink https://github.com/celzero/rethink-app

First one is Rethink DNS: https://github.com/celzero/rethink-app to manage and block domains when apps connecting to internet (similar to Blokada, Adguard...). Here that calculator app connects to googletagmanager after installing and opening.

In v054b, we're planning to switch back to the old behaviour -- of domain names blocked during DNS name resolution instead of (translating it to IP rules) at TCP / UDP connection time -- if the user has not set any per-app domain name rules and if the user is not using Bypass DNS and Firewall setting for any app: https://github.com/celzero/rethink-app/issues/817