NoRoot firewall - it gets shut down often - Security Discussion

I've used NoRoot Firewall previously, but I've never encountered it being shut down so often as it's the case on my latest gadget (MiMax3 running 8.1). Is there any way to make it stick/run at all times, no matter what? I have its box "auto start at boot" checked, and under "Battery & Performance" / Battery saver, I've chosen "No restrictions" for it. I guess it has something to do with memory management then?

Neuromancer said:
I've used NoRoot Firewall previously, but I've never encountered it being shut down so often as it's the case on my latest gadget (MiMax3 running 8.1). Is there any way to make it stick/run at all times, no matter what? I have its box "auto start at boot" checked, and under "Battery & Performance" / Battery saver, I've chosen "No restrictions" for it. I guess it has something to do with memory management then?
Click to expand...
Click to collapse
"No root" firewalls only work as VPN's. Did you already check your VPN settings?
For the before mentioned reason I'm not using a "no root" firewall but AFWall+ Pro (that requires root) as I need to be able to establish my own secure VPN to my PiVPN on my RaspberryPi.

Yes, it creates a "local VPN" connection. And it works great when it's on. But sometimes it gets somehow shut down (which I first noticed because I didn't get any more prompts for apps or services requiring internet access, so I opened the app and the START button was available and STOP was gray; and later on I occasionally checked it - sometimes it was off again).

Related

[Q] What is listening on ports 55555 and 55556?

Hi all
Was just playing around with "OS Monitor" on my Evita and it is reporting that ports 55555 and 55556 are in LISTEN state:
Code:
127.0.0.1:55555
TCP4 0.0.0.0:* LISTEN
Android System
127.0.0.1:55556
TCP4 0.0.0.0:* LISTEN
Android System
Anyone know what these are for, or how I could find out? I tried running "netstat" from "ConnectBot" and "Terminal Emulator" but neither will show anything useful (none of the usual command line switches appear to do anything).
I did have a search of the forums, but found nothing. This makes me nervous, since if it was a common sight, I would have expected to find something at least.
Currently running CyanogenMod 10.1-20130304-EXPIRIMENTAL-evita-M2. This is the latest Stable version for evita - only nightlies since. If it helps, I am SuperCID, S-OFF, HBOOT 2.14, TWRP2.3.0.0 recovery.
Thanks,
Coffman
Adb over network uses 55555, but I thought that defaulted to off. You can turn it on in developer settings, but it is supposed to reset at reboot. Are these ports fire walled off?
Sent from my One X using xda app-developers app
lauterm said:
Adb over network uses 55555, but I thought that defaulted to off. You can turn it on in developer settings, but it is supposed to reset at reboot. Are these ports fire walled off?
Sent from my One X using xda app-developers app
Click to expand...
Click to collapse
Thanks for your response, lauterm.
I use Avast! Mobile Security with whitelist-mode firewall, but if I don't enable "system" a whole bunch of things fail to work properly. I never leave debugging mode on, but I just enabled it to see what happened. The ADB over network option actually started listening on 5555 (4x 5s), not 55555 (5x 5s).
coffman said:
Thanks for your response, lauterm.
I use Avast! Mobile Security with whitelist-mode firewall, but if I don't enable "system" a whole bunch of things fail to work properly. I never leave debugging mode on, but I just enabled it to see what happened. The ADB over network option actually started listening on 5555 (4x 5s), not 55555 (5x 5s).
Click to expand...
Click to collapse
When I run a bare netstat, I don't see anything in a LISTEN state. I downloaded OS monitor, and I see pretty much the same thing on its connection tab as I saw with netstat. There is nothing in a LISTEN state.
It's probably the avast daemon.
exad said:
It's probably the avast daemon.
Click to expand...
Click to collapse
Ah, you're probably right...either avast or AVG. Does avast have a locate my phone feature? I can't figure out any other reason an anti-virus program would need to listen on a port all the time.
lauterm said:
Ah, you're probably right...either avast or AVG. Does avast have a locate my phone feature? I can't figure out any other reason an anti-virus program would need to listen on a port all the time.
Click to expand...
Click to collapse
no idea, never used an antivirus on a phone.
exad said:
It's probably the avast daemon.
Click to expand...
Click to collapse
Avast! does have a find-my-phone feature, but freezing the app (with TitaniumBackup) didn't close the port, nor did full uninstall. I also used Titanium Backup to freeze practically all of my apps (including some core services) but the port persists.
My app drawer now just contains:
KeepassDroid, OS Monitor, People, Phone, Settings, SuperSU and Titanium Backup.
The port is *still* there. I am just backing up my SD card to my PC, then I will try a reboot. Don't want to reboot until backup has finished in case I was a bit overzealous in the freezing process!
If it is still there, I may re-flash and see what happens...
Whoops! As suspected, rebooting with so many apps frozen prevented CM from booting properly.
So, I wiped cache/dalvik, performed factory reset and reflashed the same ROM (without gapps).
netstat from Terminal Emulator shows the port still there!
I find this quite unusual especially as lauterm sees nothing (thanks for downloading OS monitor to double-check, btw)
Not sure where to g from here... maybe a different version of CM? Different ROM altogether? Which version are you guys (exad & lauterm) running that doesn't show this port?
Is it possible that TWRP recovery uses this port, and it is somehow left over after booting? The only references I can find on Google suggest nefarious usage: an IRC host and Metasploit
Update:
Just installed an old nightly that I used a few weeks ago (cm-10.1-20130713-NIGHTLY-evita.zip) and the mysterious ports 55555 and 55556 are no longer present. Maybe they were a quirk of the last experimental build.
Also, I ran netstat directly from console within TWRP and these ports were not LISTENing, so my previous thought was incorrect.

[Q] Force app to use WIFI only

How can I force a specific app not to use mobile data but only WIFI?
My use case is:
I like reading news through Play Newsstand, but it uses up way too much data for my plan... I would be happy to let it sync every night through WIFI and then just read the stuff from yesterday, without it constantly pulling new stuff using tens of MBs.
Any way to do that without using flight mode every time??
Thanks!
Disable background data on the app
Settings > Data > choose app then restrict background of said app.
radicalisto said:
Disable background data on the app
Settings > Data > choose app then restrict background of said app.
Click to expand...
Click to collapse
I looked at that already, but for example today I see 25MB of Foreground data and only 5MB of background data, enough to make me think that the effect of that flag would be minimal.
In fact, the most data is downloaded while I use the app rather than in background.
Anything else I could try? I am also rooted.
Hmm, Xprivacy (xposed module) may work although I have never personally used it. But from what I have read about it, it restricts app data etc. Give it a whirl and see perhaps?
The play newsstand app has it's own setting:
'Download via Wi-Fi only'
Does this not work as advertised, or am I missing something?
eddiehk6 said:
The play newsstand app has it's own setting:
'Download via Wi-Fi only'
Does this not work as advertised, or am I missing something?
Click to expand...
Click to collapse
It does not unfortunately
That flag only controls how data is synced in the background, but my problem is when I actually open the app to read the news. In that particular moment it starts downloading all news (and images) for the feed I open every time, and that generates tens of MB of mobile traffic.
Gatz said:
It does not unfortunately
That flag only controls how data is synced in the background, but my problem is when I actually open the app to read the news. In that particular moment it starts downloading all news (and images) for the feed I open every time, and that generates tens of MB of mobile traffic.
Click to expand...
Click to collapse
you could get a firewall program (maybe you'll need root for it), and block it from accessing 3G (but allow through wifi)
then use tasker to turn on wifi when you are using the app. this way, the app will never use 3G
radicalisto said:
Hmm, Xprivacy (xposed module) may work although I have never personally used it. But from what I have read about it, it restricts app data etc. Give it a whirl and see perhaps?
Click to expand...
Click to collapse
paperWastage said:
you could get a firewall program (maybe you'll need root for it), and block it from accessing 3G (but allow through wifi)
then use tasker to turn on wifi when you are using the app. this way, the app will never use 3G
Click to expand...
Click to collapse
Thanks for the suggestions.
I could try both, but waiting for Android 4.4.3 to install Xposed.
If any of those can do "Prevent app XYZ from using mobile data" then it's fine.
Xprivacy could be a better choice as it doesn't sound like it's going to use up as much cpu/mem/battery as a firewall.
Gatz said:
Thanks for the suggestions.
I could try both, but waiting for Android 4.4.3 to install Xposed.
If any of those can do "Prevent app XYZ from using mobile data" then it's fine.
Xprivacy could be a better choice as it doesn't sound like it's going to use up as much cpu/mem/battery as a firewall.
Click to expand...
Click to collapse
i'm using Xprivacy... XPrivacy isn't completely foolproof either.
there's an option to block "internet".
In android, you can call "isConnected()" function to check if you are connected, and then not do anything. XPrivacy overrides that function and can return "false".
however, apps can "ignore" or not use those functions, and just force it's way to connect to the internet. it can still succeed (you can test to see if this happens)...
firewall shouldn't be using a lot of your CPU cycles...
paperWastage said:
i'm using Xprivacy... XPrivacy isn't completely foolproof either.
there's an option to block "internet".
In android, you can call "isConnected()" function to check if you are connected, and then not do anything. XPrivacy overrides that function and can return "false".
however, apps can "ignore" or not use those functions, and just force it's way to connect to the internet. it can still succeed (you can test to see if this happens)...
firewall shouldn't be using a lot of your CPU cycles...
Click to expand...
Click to collapse
Thanks.
Could you suggest a firewall app in particular, considering that I don't need advanced functions at all, but merely the bit to turn mobile data off?
Gatz said:
It does not unfortunately
That flag only controls how data is synced in the background, but my problem is when I actually open the app to read the news. In that particular moment it starts downloading all news (and images) for the feed I open every time, and that generates tens of MB of mobile traffic.
Click to expand...
Click to collapse
Lol 'Download via Wi-Fi only' is a misleading setting!
Another possible way, xposed and 'App Settings' module, could also prevent internet access I believe, but not sure if it can specifically block mobile only.
eddiehk6 said:
Lol 'Download via Wi-Fi only' is a misleading setting!
Another possible way, xposed and 'App Settings' module, could also prevent internet access I believe, but not sure if it can specifically block mobile only.
Click to expand...
Click to collapse
FYI, AFWall+ seems to work just fine!
I will also maybe try Xprivacy when 4.4.3 comes out and I will install Xposed.
So far, happy with the firewall approach, might come in handy for more apps that I want to prevent from using up data when underway.

[Q] Wi-Fi won't stay off

I am quite given up with this issue in my phone; my Wi-Fi connection won't stay off. I want to manually activate/deactivate it, but it seems to have a life of its own.
This is apparently a very recurrent issue among Android phones, but the fix that applies to most doesn't apply to my phone. Most phones come with a Smart Wi-Fi, or in Xperia L's case, Location-based Wi-Fi, which you can disable and hopefully never have Wi-Fi respawn against command again.
In other phones you just have to disable notifications of present Wi-Fi networks, and the Wi-Fi can sleep tight until awoken.
However, I have disabled both modes, and my Wi-Fi still goes back on, no matter what. Can somebody shed some light?
wolterh said:
I am quite given up with this issue in my phone; my Wi-Fi connection won't stay off. I want to manually activate/deactivate it, but it seems to have a life of its own.
This is apparently a very recurrent issue among Android phones, but the fix that applies to most doesn't apply to my phone. Most phones come with a Smart Wi-Fi, or in Xperia L's case, Location-based Wi-Fi, which you can disable and hopefully never have Wi-Fi respawn against command again.
In other phones you just have to disable notifications of present Wi-Fi networks, and the Wi-Fi can sleep tight until awoken.
However, I have disabled both modes, and my Wi-Fi still goes back on, no matter what. Can somebody shed some light?
Click to expand...
Click to collapse
You can try set wifi turn on only when charge throu advance setting in wifi tab..
Or use battery doctor app
faizalotai said:
You can try set wifi turn on only when charge throu advance setting in wifi tab..
Or use battery doctor app
Click to expand...
Click to collapse
I was looking for a fix rather than a workaround, but I will follow up on that Battery Doctor app, it may well relieve my headaches with this meanwhile.
However, how can I get some kind of debug log about the Wi-Fi activity (like events that trigger it on)?
I found a way to access debugging messages and these 3 messages appear on separate occasions but repeatedly:
Code:
Start proc com.sonyericsson.android.locationbasedwifi:service for broadcast com.sonyericsson.android.locationbasedwifi/.LbwBroadcastReceiver
Code:
Process com.sonyericsson.android.locationbasedwifi:service has died
Code:
D/WifiService( 776): setWifiEnabled: true pid=991, uid=10133
These are the only messages with relevant information about the wifi business. And 2 of these 3 seem to mention the "Location Based WiFi" service, which needless to say, was set to OFF in the Power Management Settings. However, this process has been rendered quite rebelious.
So, what I am trying now is to disable the "Location Based WiFi" built-in app from the Apps Settings (after having forcefully stopped it, of course) and waiting on to see if this application is the culprit.
Did you tried to disable (in Settings/Applications) wifi display mirroring and throw settings?
I have kicked off SomcWifiDisplay.apk and problem has gone. Of course my phone is rooted, if yours is not try to disable application in apps list.
id202 said:
Did you tried to disable (in Settings/Applications) wifi display mirroring and throw settings?
I have kicked off SomcWifiDisplay.apk and problem has gone. Of course my phone is rooted, if yours is not try to disable application in apps list.
Click to expand...
Click to collapse
Hmm, my phone is not rooted so that last suggestion is not an option, however I have searched for the mirroring and throw settings in the Apps settings and have only found "Screen mirroring", which I disabled as an application.
The problem seems to have become a lot less present. Yesterday I went almost through the whole day without it occurring once, but just as I plugged in the phone to charge it, the Wi-Fi turned on.
I have posted a similar thread to Sony's own forum, and they're telling me to repair my phone software with the PC Companion. I'm going to see how that goes and I'll report back to the community.
wolterh said:
Hmm, my phone is not rooted so that last suggestion is not an option, however I have searched for the mirroring and throw settings in the Apps settings and have only found "Screen mirroring", which I disabled as an application.
The problem seems to have become a lot less present. Yesterday I went almost through the whole day without it occurring once, but just as I plugged in the phone to charge it, the Wi-Fi turned on.
I have posted a similar thread to Sony's own forum, and they're telling me to repair my phone software with the PC Companion. I'm going to see how that goes and I'll report back to the community.
Click to expand...
Click to collapse
Tried that with repair already and problem in original untouched firmware disappeared for ... 2 days
Try to clear data of Smart connect, looks like misbehaving of Smart Connect (or at least this is less hurting decision).
id202 said:
Tried that with repair already and problem in original untouched firmware disappeared for ... 2 days
Try to clear data of Smart connect, looks like misbehaving of Smart Connect (or at least this is less hurting decision).
Click to expand...
Click to collapse
Up to now I've had the problem virtually disappear; I had disabled the applications Location Based Wi-Fi and Screen Mirroring. Since I did it, my Wi-Fi only turned on once against my will when I connected my phone to the charger *—I didn't sweat it.
I am going to try your solution, and to be honest I'm quite offput by Sony's solution suggestion; I don't even use Windows/Mac plus I'd have to install the PC Companion.
Data cleared. Let's wait and see. :cyclops:
wolterh said:
Up to now I've had the problem virtually disappear; I had disabled the applications Location Based Wi-Fi and Screen Mirroring. Since I did it, my Wi-Fi only turned on once against my will when I connected my phone to the charger *—I didn't sweat it.
I am going to try your solution, and to be honest I'm quite offput by Sony's solution suggestion; I don't even use Windows/Mac plus I'd have to install the PC Companion.
Data cleared. Let's wait and see. :cyclops:
Click to expand...
Click to collapse
I am still hoping that your problem has gone. I do not have any more aces in my pockets beyond this. All my suggestions were based on my previous experiments.
Just clearing the Smart Connect's application data did not work for me. I enabled all Sony applications previously disabled and cleared the data of said application, but the problem returned. I have gone back to my workaround of disabling Location Based WiFi, Screen Mirroring and I have also disabled Smart Connect because these autoconnections have been all but smart.

[Q] Wi-Fi and Data gets enabled automatically, how to prevent this?

For past few weeks, the Wi-Fi & Data in my rooted LG L90 with Kitkat 4.4.2 gets automatically enabled. Earlier, when I disable these it stays disabled till I go and enable it.
I tried to restrict background data, turned off my Wi-Fi router at home, for data I created a new Access point in Mobile network and disabled auto sync, nothing worked.
I even tried applications like AutoData and others and these were of no use.
Please help me to disable Wi-Fi and Data permanently and it should be turned on only when I enable it.
santo21 said:
For past few weeks, the Wi-Fi & Data in my rooted LG L90 with Kitkat 4.4.2 gets automatically enabled. Earlier, when I disable these it stays disabled till I go and enable it.
I tried to restrict background data, turned off my Wi-Fi router at home, for data I created a new Access point in Mobile network and disabled auto sync, nothing worked.
I even tried applications like AutoData and others and these were of no use.
Please help me to disable Wi-Fi and Data permanently and it should be turned on only when I enable it.
Click to expand...
Click to collapse
Most likely you have an underlying app installed that wants to use WFi and phone data whenever it wants.
Go ahead and grab avast! Antivirus. This app allows you to control what apps use the Internet and when, as well as other features. Try disabling WiFi/data on each of the apps you've installed, and I can guarantee a 98.5% chance that this will solve your problem.
Issue partially resolved
thenookieforlife3 said:
Most likely you have an underlying app installed that wants to use WFi and phone data whenever it wants.
Go ahead and grab avast! Antivirus. This app allows you to control what apps use the Internet and when, as well as other features. Try disabling WiFi/data on each of the apps you've installed, and I can guarantee a 98.5% chance that this will solve your problem.
Post thank?
Click to expand...
Click to collapse
Installed Avast Anti Virus and through its Firewall settings, I was able to disable WiFi & Data to some extent. This is far better than my previous situation. Thanks for your help.
Maybe you can use Tasker to further curb this behaviour.

prevent android being "smart" about wifi connectivity

when I connect to a captive wifi, I want to use the connection as is (maybe I want to login without telling google - since the builtin authenticator uses their gstatic domain, or maybe I want to probe the network as it is being redirected, or maybe I just want firefox to manage my password to the portal, etc)
but after I select "use wifi as is" on the android webview builtin auth screen, android starts to route all and every traffic to my 3g/4g data connection instead, until I disable and re-enable wifi.
it will only ever redirect traffic to wifi after it successfully got the correct 204 from gstatic.com
is there anyway to work around this?
I am on android6, but I think I has always been like that.
gcbxda said:
when I connect to a captive wifi, I want to use the connection as is (maybe I want to login without telling google - since the builtin authenticator uses their gstatic domain, or maybe I want to probe the network as it is being redirected, or maybe I just want firefox to manage my password to the portal, etc)
but after I select "use wifi as is" on the android webview builtin auth screen, android starts to route all and every traffic to my 3g/4g data connection instead, until I disable and re-enable wifi.
it will only ever redirect traffic to wifi after it successfully got the correct 204 from gstatic.com
is there anyway to work around this?
I am on android6, but I think I has always been like that.
Click to expand...
Click to collapse
Do you have any kind of Linux ide? Have you tried making a tunnel?
Or is that what your looking for. I'm not 100% sure what your looking for. If your trying to skip Hotspot authentication? Or anything like that Then a tunnel would work fine.
Sorry I can't be of much else help
If your phone is rooted or has a custom ROM (Which would obviously indicate that the phone is rooted), there is a solution that you can try using a terminal (Or ADB shell).
Issue the command: "settings put global captive_portal_detection_enabled 0" That should prevent captive portal detection and gstatic confirmation. This should work, I haven't tried it personally though.
Additionally, you can setup a captive server.
Issue the command: "settings put global captive_portal_server g.cn"
Restart your phone, and you should have access to the pages.
Basically, connecting as is, requires you to reach a site that does not require 204 confirmation and afterward other sites should be accessible. Let me know if this helps.
Josh Ross said:
If your phone is rooted or has a custom ROM (Which would obviously indicate that the phone is rooted), there is a solution that you can try using a terminal (Or ADB shell).
Issue the command: "settings put global captive_portal_detection_enabled 0" That should prevent captive portal detection and gstatic confirmation. This should work, I haven't tried it personally though.
Additionally, you can setup a captive server.
Issue the command: "settings put global captive_portal_server g.cn"
Restart your phone, and you should have access to the pages.
Basically, connecting as is, requires you to reach a site that does not require 204 confirmation and afterward other sites should be accessible. Let me know if this helps.
Click to expand...
Click to collapse
no root on the phone (damn blackberry priv) and no control of the portal.
this is so infuriating. This is trivial, banal even, on any device i control. Feel like a kid on training wheels every time i touch my phone.

Categories

Resources