Database Info

VPNC on android

Introduction
This is the first release of an installable package to allow google android phones to connect to Cisco like VPN concentrators.
Details
The installing phone will require:
* Root user privileges on the phone.
* /dev/tun file
* Kernel with tun support (or tun module). (cyanogen should be good)
* A cisco, nortel or freeswan ipsec server to connect to.
How To
Installing this version
This is available in the android market as a free application. It should be called VPN Connections. (Not sure where it will be listed as yet).
The latest version of the application can also be downloaded from here and installed using adb.
Reporting bugs
Please inform us which ROM and version that you are using, if the /dev/tun exists, its permissions, and the output of logcat from a boot, also the version of this application that you are running.
If your ROM and version are already reported in the issue list, please comment in the thread as there has been some inconsistencies in reports.
Please be very careful when lodging a bug as it may contain company confidential information. Be sure to strip any secrets or passwords from the configuration files or debugging information.
http://code.google.com/p/get-a-robot-vpnc/issues/list
Known issues
May need to load the tun module manually first.
Usernames can not contain the @ symbol.
Does not currently work with one time pass devices (Rsa keys).

Reserved for changelog.

no longer needed.

I'm not trying to ping via DNS name, so dont be worred about that. I know the other hosts are up, reachable and pingable.
Tried TCP and ICMP connections.

Unfortunately I don't have any ideas for you.. I'd like to play with it some myself though, would love to have VPN working. Could you send me / post the compiled binaries? saiboogu [at] g mail
Thanks and good luck

Sent to said address.

A little more information.
When tcpdumping the connection, packets originating from the phone go out through the device.
When tcpdumping the connnection with packets originating from the internal network through the vpn, i can tell they make it to the rmnet0 device, but never make it to tun0 device.

Ok, so I have it working now ! Wahoo.
So.. going to tidy the code up, Clean up the shell script to be android specific (and set the DNS servers).

Great. Would be awesome if you could share your binaries. What about joining this project and submitting what you did?

Tried mailing the owner of the project, many weeks ago. No response. Guess its dead.

I'm going to try to get a build environment setup for the major releases. Please PM me within the next 7 days if you are interested.
I plan to not only release the binaries, but the source code and build environment also. Hopefully the upstream developers will also take my patches.

Is it possible to connect with this vpnc to a cisco concentrator 3000 vpn?
We use CiscoVPN at our University and it would be nice if Android will be able to connect to it.

N23 said:
Is it possible to connect with this vpnc to a cisco concentrator 3000 vpn?
We use CiscoVPN at our University and it would be nice if Android will be able to connect to it.
Click to expand...
Click to collapse
I got a copy of this a few days ago from ungamed.. At first I couldn't connect to our 3000 because I was lead to believe our concentrator only supported TCP NAT traversal (which isn't supported by vpnc), but after talking to someone who knew his stuff a little better, I connected via UDP and had no problems.
So, short answer -- as long as your concentrator is configured to accept some form of NAT traversal other than TCP, this should work.
Oh, and like ungamed said the DNS still needs some work. Not a problem for me, when I VPN to work I only need a single domain that I went ahead and put in my /etc/hosts

Awesome work
Hey guys,
Let me know if you can provide a package.
Would love trying this out.
Thanks,
Kiran.

You can find out a first download here. http://code.google.com/p/get-a-robot-vpnc/downloads/list
This is the console part of the project, not the GUI, I'm still building that this week. Requires a rooted phone 1.5 or above.

I think that the dns is fixed in this first download

Ungamedplayer said:
You can find out a first download here. http://code.google.com/p/get-a-robot-vpnc/downloads/list
This is the console part of the project, not the GUI, I'm still building that this week. Requires a rooted phone 1.5 or above.
Click to expand...
Click to collapse
It only works with Cupcake? That's bad because yet there's no (fully working) UK Cupecake out
But thank you very much! Maybe then the nice GUI is ready ;-)

N23 said:
It only works with Cupcake? That's bad because yet there's no (fully working) UK Cupecake out
But thank you very much! Maybe then the nice GUI is ready ;-)
Click to expand...
Click to collapse
Working on the interface is slower than me doing the actual port.
Thumbnail::
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Full Shot Preview

I tried to use that package
I can get vpn connecting, but the apps do not use that tunnel afterwards.
Code:
# ./vpnc /data/data/org.codeandroid.vpnc/etc/vpnc/vpnc.conf --debug 1 --no-detach
vpnc version ERSION
Script: not found
IKE: not found
Perfect: not found
IPSec: not found
IPSec: not found
IPSec: not found
Xauth: not found
Xauth: not found
IKE SA selected psk+xauth-aes128-sha1
NAT status: no NAT-T VID seen
got address *************
Script: not found
IKE: not found
Perfect: not found
IPSec: not found
IPSec: not found
IPSec: not found
Xauth: not found
Xauth: not found
IPSEC SA selected aes128-sha1
VPNC started in foreground...
vpnc[2366]: can't open pidfile /var/run/vpnc/pid for writing
Do I need to call something afterwards?
Btw it did not work to pass --script to /data/data/org.codeandroid.vpnc/etc/vpnc/vpnc-script so I copied that script to the default location /etc/vpnc/vpnc-script...
maybe its not executed properly?

[deleted]

[APP]DroidSheep : ARP-Spoofing App for Android

DroidSheep is an Android app for Security analysis in wireless networks and capturing facebook, twitter, linkedin and other accounts.
DroidSheep requires ROOT!​
Please note:
DroidSheep was developed as a tool for testing the security of your accounts.
This software is neither made for using it in public networks, nor for hijacking any other persons account.
It should only demonstrate the poor security properties network connections without encryption have.
So do not get DroidSheep to harm anybody or use it in order to gain unauthorized access to any account you do not own! Use this software only for analyzing your own security!​
Here are videos of what it does:
www.youtube.com/watch?v=B4ROlCgTr80
www.youtube.com/watch?v=mIWkee7RjbU
www.youtube.com/watch?v=z7NUluxUORs
Here is a video Tutorial on how to use it:
http://www.youtube.com/watch?v=4N-SBx5EF3g​
How does this work?
As already announced DroidsSheep supports almost every website – also “big” webservices like facebook and Yahoo.​
How does that work this simple?
There are many users that do not known that air is the transmission medium when using WiFi.
Therefore information is not only transfered to its receiver but also to any other party in the network within the range of the radio waves.
{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Usually nothing special happens because the WiFi users discard packets that are not destined to themselves.
DroidSheep does not do this. It reads all the packets looking at their contents.
Is a website sending a clear recognition feature within a message’s content, which can identify a user (“SessionID”), then DroidSheep is able to read it although it is not intended to external users.
Moreover DroidSheep can use this token to use it as its own.
The server can’t decide whether the authorized user or DroidSheep has sent the request.
​
How can I protect myself?
The only satisfying answer is: SSL respectively HTTPS.
Many providers already offer HTTPS, even facebook, however it must often be enabled in the settings first.
When using HTTPS the data are still sent to alle participants in the WiFi-network, too, but because the data has been encrypted it is impossible for DroidSheep to decrypt the contect of a message - remaining only a complete mess of letters, with which an attacker can’t do anything.
The real problem is that not every website provides SSL. What to do when you are in a public network (hotel, airport, etc.), you also want to use this and the site does not offer HTTPS though?
You can use a VPN-connection
For this the computer sets up an encrypted channel to a confidential computer which again transfers the data to the website.​
Please note this is NOT my work I am simply sharing this and giving a direct link to the APK (it was removed from droidsheep.de because of German rules).
Source: http://droidsheep.de
Build 14: http://www.iuptech.com/public/SD/download/droidsheep-current.apk <-- Thanks mbirth for build 14 link.
Build 15: Attached to this post - compiled by mbirth <-- Thanks
All credit goes to Andreas Koch for this amazing app! - Thanks a million!
​

build 13 is the latest? not 15

If there is a newer version, please post a link of the apk here and I will add it to the OP.

There's build 14: http://www.iuptech.com/public/SD/download/droidsheep-current.apk
Build 15 is nowhere to be found for now…

OP updated with build 14

Im having no luck with this app on my nexus s 4g. Which is a shame. I can post debugging info if somebody could help me out.

The v15 is in the official SVN: https://code.google.com/p/droidshee...idsheep/DroidSheep_public/AndroidManifest.xml
And since there's no official APK, you have to compile it yourself. Thus the different signature.
Attached is v15 compiled by myself.

Does it work on ICS?
I want to be sure if it works befor im rooting my Note

Yes

not working xperia neo cant search for anything i leave it for about 10min still nothing i also done what youtube tells me to do still nothing im using my home router with password....

mbirth said:
The v15 is in the official SVN: https://code.google.com/p/droidshee...idsheep/DroidSheep_public/AndroidManifest.xml
And since there's no official APK, you have to compile it yourself. Thus the different signature.
Attached is v15 compiled by myself.
Click to expand...
Click to collapse
Is that working on ics?

Updated OP with v15 apk, thank mbirth.
Also I don't know of ICS support as I am still running Good'ol Gingerbread.

Ive just come accross this app and have downloaded, but Nobody tested this with ICS? thats surprising! lol
Will test it this eve and report tomorrow.

safeelhd2 said:
Ive just come accross this app and have downloaded, but Nobody tested this with ICS? thats surprising! lol
Will test it this eve and report tomorrow.
Click to expand...
Click to collapse
It doesnt work.lol
I connected to wifi and did some browsing on other devices. I.e tablets.
didnt find anything.

It works for me, but there's a mess with sessions. Probably you should consider mapping each session to each Wifi network and not showing old ones with new networks... Just a suggestion

It is working on ICS, perhaps you have IP client isolation on WiFi router...

Not working for me on Galaxy Note ICS... Do you think it's related to my conection? How should I change it?
EDIT i installed the v15 version and know it's perfect!

It shows up under my kapersky as potential virus, any reason for this??

nm

crxforya said:
It shows up under my kapersky as potential virus, any reason for this??
Click to expand...
Click to collapse
Thats normal for Droidsheep.
+ working on my SGS2 (ICS)

[APP][Android 2.1+] Element53 (DNS Tunnel) [With demonstration video]

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
You should read this before clicking this post away, I bet you like this: HERE, because it's for Android now!
Note: for the best user experience, you need a rooted device, there are many tutorials on XDA how to root your device.
Hello,
Today I want to introduce you my new application. I and of friend mine have created this application.
Element53 is a ready-to-use DNS-tunnel for Android. It can be used for different things. If you don't know what a DNS-tunnel can do, you can find it HERE (really, you should do this, I am sure you want this on your phone!) (first 2 chapters). So this application should be perfect if you are going abroad. Beside that it can also be used for penetration testing.
Element53 creates a TCP-tunnel to a SOCKS proxy server. The client side of the tunnel is localhost:3128. For your convenience the server part is provided.
If you have rooted your device (this is no requirement) you can install ProxyDroid and route all internet traffic into the tunnel.
You have to configure ProxyDroid before you can use all the functions of Element53. You should apply the following settings:
Host should be: 127.0.0.1
port should be: 3128
Proxy type: SOCKS5
After that, you have to start Element53 by pressing the 'green button', after that you can start ProxyDroid. Because Element53 creates a DNS tunnel, the connection is not very fast, but it works fine.
Element53 Lite allows you to test until you have reached 10 mb traffic. If you like Element53, you can upgrade to the Pro version.
Youtube demonstration video:
Lite: Market link up here.
Pro: Market link up here
I have tried to test this application as much as I can, but I guess there are still some bugs.
If you encounter a bug a problem, please make a reply on this post, and I will work on it. If you think it works great, please leave a positive review on the market, thanks! If you have any other feature request, please tell me.
Or, if you have any questions, please ask me, and I will reply ASAP .
Update: (5 july 2012)
Full support from SDK7 (Android 2.1) from now!
Update: (4 july 2012)
Today I have updated Element52 to version 1.1. I fixed some bugs and added some buttons for switching between screens, because not everybody knows that you can 'swipe' between them.
Source:
GitHub here!

Good App
I have been testing this on my school network, and it works fine. When I am going on vacation I will use this application very much I think, thanks!

I have been testing this on a few networks, and for so far, it works fine! I am glad you like it!

You are the best! Thx for the great app.
Sent from my Galaxy Nexus using XDA Premium HD app

I really appreciate that, thanks! If you have any bugs or whatever, please tell me!

N/A

Small update:
I have added a demonstration video of Element53 now, you should watch it!
Youtube demonstration video:

"For your convenience the server part is provided."
Does this mean that you are running server to which android client is connecting?

porcupine02 said:
"For your convenience the server part is provided."
Does this mean that you are running server to which android client is connecting?
Click to expand...
Click to collapse
Yes, that's correct. You only have to install Element53, and for the best user experience a rooted device with ProxyDroid.
If you have any questions, please ask!

Ok, thanks. I will test it on vacation - paying for wifi in 2012 just doesn't feel right

porcupine02 said:
Ok, thanks. I will test it on vacation - paying for wifi in 2012 just doesn't feel right
Click to expand...
Click to collapse
Haha, that's fine! Please tell me your experience with Element53!

Guys,
Element53 has been updated to 1.5
Changes:
- Some small bug fixed.
- Improved GUI.

Hey, this app is a simple yet useful tool, anyway i wanted to use my server instead of using yours, it's set up correctly and waiting for connections,
anyway when i change the settings on the phone it won't allow me to connect to it. Did you hardcode something into the app so that i cannot use my server?
here is a screenshot of the logs

Nikooo777 said:
Hey, this app is a simple yet useful tool, anyway i wanted to use my server instead of using yours, it's set up correctly and waiting for connections,
anyway when i change the settings on the phone it won't allow me to connect to it. Did you hardcode something into the app so that i cannot use my server?
here is a screenshot of the logs
Click to expand...
Click to collapse
Hi, thanks for using my application. Do your server receive any DNS requestst? So far I know there is nothing hardcoded, in the app, I will look into this tomorrow!
Sorry for my late reply by the way.

Rednasman said:
Hi, thanks for using my application. Do your server receive any DNS requestst? So far I know there is nothing hardcoded, in the app, I will look into this tomorrow!
Sorry for my late reply by the way.
Click to expand...
Click to collapse
Hi, I have my own DNS tunnel server based on iodined, how do I make your app work with my server?

thatonemorekid said:
Hi, I have my own DNS tunnel server based on iodined, how do I make your app work with my server?
Click to expand...
Click to collapse
Hi,
I am sorry for my late reply!
We have build a custom server for Element53, the server is made in NodeJS.
You can find the source here: Element53 GitHub

Hello everyone.
Tried to roll-out this application in the test environment and has a problem.
Looks lite the tunnel is up normally but when i tried to open any page i see something like that (screenshot)
So the setup is:
1. Server for DNS: Windows XP SP3 ENG CORP, NODE.js (node-v0.10.20-x86.msi, config53.js, element53.js downloaded yesterday).
config53.js:
------------------------------------------
exports.config =
{
domain: 'xxx.yyyyy.zz',
port: 53,
server_ip: '192.168.1.140',
server_port: 3128,
max_client_inactive_ms: 5 * 60 * 1000,
status_interval_ms: 3000
}
------------------------------------------
2. Proxy server: 192.168.1.140 (Kerio Control with no authorization)
3. Client: Android phone Asus Nexus 7 (firmware: Paranoid), Element53 Lite from google play
May be i should use another client from this link ?
Any suggestions will be appreciated.

speed_boy said:
Hello everyone.
Tried to roll-out this application in the test environment and has a problem.
Looks lite the tunnel is up normally but when i tried to open any page i see something like that (screenshot)
So the setup is:
1. Server for DNS: Windows XP SP3 ENG CORP, NODE.js (node-v0.10.20-x86.msi, config53.js, element53.js downloaded yesterday).
config53.js:
------------------------------------------
exports.config =
{
domain: 'xxx.yyyyy.zz',
port: 53,
server_ip: '192.168.1.140',
server_port: 3128,
max_client_inactive_ms: 5 * 60 * 1000,
status_interval_ms: 3000
}
------------------------------------------
2. Proxy server: 192.168.1.140 (Kerio Control with no authorization)
3. Client: Android phone Asus Nexus 7 (firmware: Paranoid), Element53 Lite from google play
May be i should use another client from this link ?
Any suggestions will be appreciated.
Click to expand...
Click to collapse
Hello,
Thanks for using Element53, do you get the same problems with my (default Element53) server? The other link is someone who merged Proxydroid and Element53 together. Your problem looks like something with the characterset.
Sander

Rednasman said:
Hello,
Thanks for using Element53, do you get the same problems with my (default Element53) server? The other link is someone who merged Proxydroid and Element53 together. Your problem looks like something with the characterset.
Sander
Click to expand...
Click to collapse
Okey.
Just tried your server.
I went to settings/apps/element53/clear data.
Then open element53 and pushed the button. Tunnel looks like has established.
But when i opened a browser (firefox and default one) it couldn't fine any page. The error was like "there was a network error".
See screenshot of some logs

speed_boy said:
Okey.
Just tried your server.
I went to settings/apps/element53/clear data.
Then open element53 and pushed the button. Tunnel looks like has established.
But when i opened a browser (firefox and default one) it couldn't fine any page. The error was like "there was a network error".
See screenshot of some logs
Click to expand...
Click to collapse
Hmm, that's weird. What are you configs for Proxydroid? Restarting the browser could solve the problem too.
Sander

[APP][4.0+] Icy Monitor - Monitor your PC from your Android device

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
Hello everyone!
Yesterday I released my first Android App called Icy Monitor, it helps you monitor your PC using your android device.
Features
Get graphs about your CPU (load, temperature, clock, power), GPU (load, clock, temperature, fan) and system (fans, temperature, voltages).
Customize graph colors to your liking.
Get information about each filesystem and each process running.
Save and monitor multiple computers effortlessly.
Clean, beautiful interface with tablet support.
The app is free, without advertisments and open source!
Downloads
Play Store
Windows Server
Github (for source)
Setup
Download the server application using the link above. Extract all files somewhere and run the application as administrator (otherwise, I am not allowed to read most sensors). An icon should appear at your system tray, right click it and select 'Open Firewall', this will open port 26822 which is used by the app (This only works with Window's Firewall, if you are using something else you must open port 26822 yourself). Now you can connect from the phone app by typing in your computer's IP address followed by ":26822". If you want to access the server through the Internet you will have to setup port forwarding, which is a different procedure for every router so I cannot help you.
If you don't know your IP, open a command line window and write "ipconfig". You should find your IPv4 address there.
More info
For more info, please visit my page or just ask here. Feel free to mail me at any time.
Thanks a lot for trying my app! Any feedback (positive/negative) is extremely appreciated!

Would love to use this with my Linux box
Sent from Cappy via Tapatalk 4 Beta

MDMonster said:
Would love to use this with my Linux box
Sent from Cappy via Tapatalk 4 Beta
Click to expand...
Click to collapse
Theoritically, the server could run on Linux with Mono but being a former Linux user I know Mono is not the best option. I am brainstorming this, I hope to be able to support Linux soon.
Thanks for the interest however!

Harmless little bump.

I followed all the instructions then tried setting it up on my device. I was a little confused why it refused to use a domain name. Nonetheless I entered my IP address. Now I get the error "Incompatible server version". Am I doing something wrong?

rpcob said:
I followed all the instructions then tried setting it up on my device. I was a little confused why it refused to use a domain name. Nonetheless I entered my IP address. Now I get the error "Incompatible server version". Am I doing something wrong?
Click to expand...
Click to collapse
There was no activity in this thread so I forgot to update the server download link. Try this version. Sorry for the trouble.
Also it SHOULD accept domain names, it worked with mine (looks like this: something.dyndns.info). Maybe it's a port forwarding issue?

sakisds said:
There was no activity in this thread so I forgot to update the server download link. Try this version. Sorry for the trouble.
Also it SHOULD accept domain names, it worked with mine (looks like this: something.dyndns.info). Maybe it's a port forwarding issue?
Click to expand...
Click to collapse
Everything works now, thanks! Once I installed the new server version I was able to connect via IP and domain. Before the domain said it couldnt connect and the IP said incompatible.
This is a very handy app for on the go.

rpcob said:
Everything works now, thanks! Once I installed the new server version I was able to connect via IP and domain. Before the domain said it couldnt connect and the IP said incompatible.
This is a very handy app for on the go.
Click to expand...
Click to collapse
Thanks a lot for trying it! More features are coming soon (like push notifications).

Network monitoring?
Will you be adding network traffic monitoring in the future?

foldedpaper said:
Will you be adding network traffic monitoring in the future?
Click to expand...
Click to collapse
Yes, I am currently working on push notifications, after that I will work on adding network traffic monitoring.

sakisds said:
Yes, I am currently working on push notifications, after that I will work on adding network traffic monitoring.
Click to expand...
Click to collapse
Great app, any roadmap regarding new features?
Sent from my C6903 using Tapatalk

Tillsats said:
Great app, any roadmap regarding new features?
Sent from my C6903 using Tapatalk
Click to expand...
Click to collapse
I am currently focusing on server-side features and bug fixes. Next version will include a better designed interface, disk space notifications and better error handling. Thing is, my phone's screen is currently broken so I am delaying this release until I can test it properly. Hopefully it will be ready next week.

[CLOSED][APP][6.0+] NetGuard - No-root firewall

{
"lightbox_close": "Close",
"lightbox_next": "Next",
"lightbox_previous": "Previous",
"lightbox_error": "The requested content cannot be loaded. Please try again later.",
"lightbox_start_slideshow": "Start slideshow",
"lightbox_stop_slideshow": "Stop slideshow",
"lightbox_full_screen": "Full screen",
"lightbox_thumbnails": "Thumbnails",
"lightbox_download": "Download",
"lightbox_share": "Share",
"lightbox_zoom": "Zoom",
"lightbox_new_window": "New window",
"lightbox_toggle_sidebar": "Toggle sidebar"
}
NetGuard provides simple and advanced ways to block access to the internet - no root required.
Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection.
Blocking access to the internet can help:
reduce your data usage
save your battery
increase your privacy
Features:
Simple to use
No root required
100% open source
No calling home
No tracking or analytics
No advertisements
Actively developed and supported
Android 5.1 and later supported
IPv4/IPv6 TCP/UDP supported
Tethering supported
Optionally allow when screen on
Optionally block when roaming
Optionally block system applications
Optionally forward ports, also to external addresses (not available if installed from the Play store)
Optionally notify when an application accesses the internet
Optionally record network usage per application per address
Optionally block ads using a hosts file (not available if installed from the Play store)
Material design theme with light and dark theme
PRO features
Log all outgoing traffic; search and filter access attempts; export PCAP files to analyze traffic
Allow/block individual addresses per application
New application notifications; configure NetGuard directly from the notification
Display network speed graph in a status bar notification
Select from five additional themes in both light and dark version
There is no other no-root firewall, except for clones, offering all these features.
This XDA thread is about using the latest version of NetGuard.
Off topic comments are allowed as long they are related to NetGuard and are in the general interest of the followers of this thread.
Discussion of purchases is not allowed here, please contact me via here instead.
NetGuard is being maintained and community supported, but new features won't be added anymore.
For ad blocking, see here. Ad blocking is provide "as-is".
More information on Github:
Description
Compatibility
Frequently Asked Questions (FAQ)
Permissions
Support
Contributing
Attribution
License
Downloads:
GitHub
Play store (stable)
Play store (beta)
XDA Labs (web page)
Screenshots:
For more screenshots, see here.

Reserved

NetGuard is currently in alpha testing phase.
Please report any problems you encounter.
It would be nice if someone could design an appropriate icon.

So what exactly does this do sir? I Thx
Sent from my SAMSUNG-SM-N920A using Tapatalk

1977theone said:
So what exactly does this do sir? I Thx
Click to expand...
Click to collapse
NetGuard can prevent applications from using the internet (=firewall).
You can allow/deny internet access for each application, even system applications.

So what the best setting... Use the pic U posted as a reference
Sent from my SAMSUNG-SM-N920A using Tapatalk

1977theone said:
So what the best setting... Use the pic U posted as a reference
Sent from my SAMSUNG-SM-N920A using Tapatalk
Click to expand...
Click to collapse
There's no "best" - this is subjective.
You have a list of apps, and you can choose whether or not to allow an app access to the Internet over WiFi or Mobile data.
Whether or not you want to let an app access the Internet is up to you.

I have just released alpha version 0.2 with quite some things improved.
https://github.com/M66B/NetGuard/releases/tag/0.2

I have just released beta version 0.3
https://github.com/M66B/NetGuard/releases/tag/0.3
I am using this version as production software myself now, hence why alpha changed into beta.

Will test on rooted SIII Lollipop

r25txe said:
Will test on rooted SIII Lollipop
Click to expand...
Click to collapse
Root is not needed, but please let me know about your experiences.

I have just released beta version 0.4.
Changelog/download:
https://github.com/M66B/NetGuard/releases/tag/0.4

M66B, Huge fan of your apps They are awesome.

Thanks M66B . Always nice to see your apps
Sent from my SM-N920W8 using Tapatalk

I have just released beta version 0.5.
Changelog/download:
https://github.com/M66B/NetGuard/releases/tag/0.5
Your feedback, both positive and negative, is appreciated.

Is it (technically) possible to add "on-demand" feature ?
Maybe something close to how LBE works ... Yes/No/Don't ask again
Suggestion...

Jeff_i said:
Is it (technically) possible to add "on-demand" feature ?
Maybe something close to how LBE works ... Yes/No/Don't ask again
Suggestion...
Click to expand...
Click to collapse
Not on a granular, per-app basis, at least right now.
NetGuard for Android works by creating a VPN service at system level. Based on your choices in the allow/deny screen, NetGuard will set up VPN rules for which apps are forced through the "VPN". The "VPN" isn't a real VPN; rather, it just sinkholes the traffic to nowhere.
The limitation here is that when creating these rules, we can only set which applications' traffic enters the VPN. We can't granularly control which requests or hosts they can talk to, on a per-app basis. It would be possible to set "for all apps" a whitelist/blacklist of IP addresses, but this would be quite different, and would likely be less useful as a firewall, and more useful as simply an "ad blocker".
The VPN interface doesn't tell us which app is trying to access the internet though - we need to set it up before-hand. There are ways to tell, but Google (or a careful OEM) could easily block those with SELinux policy updates, and the goal here is to try to get all the functionality we need without any kind of root access.

Nice app for non rooted users.
I've just created an issue on Github though.
French translation done.
I'll try to create an icon this weekend if I have free time. Let me know if you want a specific color,... etc.

Primokorn said:
Nice app for non rooted users.
I've just created an issue on Github though.
French translation done.
I'll try to create an icon this weekend if I have free time. Let me know if you want a specific color,... etc.
Click to expand...
Click to collapse
The problem you have reported is probably caused by a broken VPN implementation in your ROM. I will look into it later this week more detailed.
I like to keep the current colors, realizing not everybody will like them, but I know from experience I can't make everybody happy anyway.
Thanks for your translation!

@Primokorn can you please try if you have the same problem with one of the no root firewalls from the Play store?