Database Info

Real Android firewall - doable? Does it exist?

DroidWall in the marketplace allows full WiFi access to all apps.
Is it possible to code an application for Android (perhaps with root access) that can:
- deny all outbound data access per app basis
- specify the rules (ip-range/port-range) per app basis
Like a real alternative to a desktop software firewall?
Way too many apps are leaking all sorts of information (in plain text!) from the user account database to the Internet.
The android security makes me really scared to use the platform for anything requiring security. The privacy/security model is basically a swiss cheese that can be poked through by almost any app that just asks for certain rights at install time.
I'm hoping a firewall would be able to limit this issue, no?

I don't know about the other stuff you mentioned, but my version of DroidWall has a block/allow option for wifi and 3g, separately. It's the latest version from the market place, 1.4.2

Thanks, I just checked it out and it seems DroidWall indeed has a Wifi side blocking by app basis as well. I'm still testing though.
Ah, just tried it. Force closes on Galaxy S (rooted). Sigh.

[Q] How to block certain apps from accessing Internet On lollipop?

I had been using Droidwall on kitkat to block access, but on lollipop, none of the firewalls with ip tables implementation works good. Most of those ad hogging apps and games somehow finds a way to access and display those ads. Afwall+ Droidwall, all fail. Mobiwall might work, but it messed up my WiFi settings and creates some stupid vpn with more stupid notification icon at the top. Any good firewall or method that works to block ads on lollipop? I am rooted with stock lollipop and elementalx kernel.

Try this firewall:
http://www.appsapk.com/android-firewall/

Ok, tried, doesn't work, same problem Any other options?

madarchod said:
Ok, tried, doesn't work, same problem Any other options?
Click to expand...
Click to collapse
If you wan't to disable app background data you can do it in Settings/Data usage. Click on app and switch toggle.
Best working adblocker also on Lollipop for me is AdAway.

zagorteney said:
If you wan't to disable app background data you can do it in Settings/Data usage. Click on app and switch toggle.
Best working adblocker also on Lollipop for me is AdAway.
Click to expand...
Click to collapse
thanks, would try that and report back. I already disabled the background data usage, but my main goal is to stop all those ads that keep popping up when i am into an app, once i got charged from my carrier by accidentally clicking on one such ad from some application, so i just want to block every app that i don't want to connect to internet and display those ads.

madarchod said:
thanks, would try that and report back. I already disabled the background data usage, but my main goal is to stop all those ads that keep popping up when i am into an app, once i got charged from my carrier by accidentally clicking on one such ad from some application, so i just want to block every app that i don't want to connect to internet and display those ads.
Click to expand...
Click to collapse
AdAway.

Aerowinder said:
AdAway.
Click to expand...
Click to collapse
zagorteney said:
If you wan't to disable app background data you can do it in Settings/Data usage. Click on app and switch toggle.
Best working adblocker also on Lollipop for me is AdAway.
Click to expand...
Click to collapse
Thanks, it worked just the way i wanted. :good::highfive:

security app

Are security apps really necessary?
I tried CM security and AIO, however, both of them make my phone lagging.

cm good app

OnLuxy said:
Are security apps really necessary?
I tried CM security and AIO, however, both of them make my phone lagging.
Click to expand...
Click to collapse
If you are downloading tons of apps and visiting shady websites, absolutely. If you only use a handful of apps that don't require tons of permissions, you'll be OK. I don't use anything on my rooted S3.
Also, find a good browser that allows you to disable flash. I use one called Privacy Browser and I got it off FDroid. Not Play Store. Its lightweight on your system and basic. 80% of the websites I visit don't require flash to operate. But one click turns it on if I need it. It only needs a data connection and able to create shortcuts for permissions.
If you need an antivirus/malware app, I always recommend ESET NOD32. I've been using it on my home PC's for years. The definitions are constantly being updated and has saved me a few times. Its lightweight on your system too.

KernelCorn said:
If you are downloading tons of apps and visiting shady websites, absolutely. If you only use a handful of apps that don't require tons of permissions, you'll be OK. I don't use anything on my rooted S3.
Also, find a good browser that allows you to disable flash. I use one called Privacy Browser and I got it off FDroid. Not Play Store. Its lightweight on your system and basic. 80% of the websites I visit don't require flash to operate. But one click turns it on if I need it. It only needs a data connection and able to create shortcuts for permissions.
If you need an antivirus/malware app, I always recommend ESET NOD32. I've been using it on my home PC's for years. The definitions are constantly being updated and has saved me a few times. Its lightweight on your system too.
Click to expand...
Click to collapse
Thanks for your suggestion. I suppose I can go with ESET, I like explore new apps with my Samsung

OnLuxy said:
Are security apps really necessary?
I tried CM security and AIO, however, both of them make my phone lagging.
Click to expand...
Click to collapse
No especially if you are careful. Do not install crappy apps, use Firefox (bêta) + advanced mode of uBlock Origin, a firewall (+ additional security/privacy apps if you are rooted).

App with trackers, permissions

Hi there,
I am a newbie with Android and smart phones.
As an old-school tech, from Windows 3.0 to Gnu/Linux, I want for long time avoid all GAFAM stuff and keep a bit of privacy and security.
I came across the Exodus site and try to find app with zero tracker and minimum permission.
Do you care about that?
Do you use FOSS apps?
Do you have a list of usual apps that fulfill your need AND privacy?
Any help, advise, list of apps (browser, messaging, files management, maintenance, ...) are welcome.
Thank you

IMHO it doesn't matter where you fetch apps from: F-Droid, Google Play Store, etc.pp.
Apps typically request normal premissions and dangerous permissoins.
Dangerous persmissions are
READ_CALENDAR
WRITE_CALENDAR
CAMERA
READ_CONTACTS
WRITE_CONTACTS
GET_ACCOUNTS
ACCESS_FINE_LOCATION
ACCESS_COARSE_LOCATION
RECORD_AUDIO
READ_PHONE_STATE
READ_PHONE_NUMBERS
CALL_PHONE
ANSWER_PHONE_CALLS
READ_CALL_LOG
WRITE_CALL_LOG
ADD_VOICEMAIL
USE_SIP
PROCESS_OUTGOING_CALLS
BODY_SENSORS
SEND_SMS
RECEIVE_SMS
READ_SMS
RECEIVE_WAP_PUSH
RECEIVE_MMS
READ_EXTERNAL_STORAGE
WRITE_EXTERNAL_STORAGE
and only become activated if user clicks ALLOW to them: so it's on user what permissions can be used by an app.
So-called normal permissions get allowed by default without any user interaction.

jwoegerbauer said:
and only become activated if user clicks ALLOW to them: so it's on user what permissions can be used by an app.
So-called normal permissions get allowed by default without any user interaction.
Click to expand...
Click to collapse
I you sure only normal permissions get allowed by default without any user interaction? and where can I separately allow or deny them? Is there a place where all these permissions are explained and what I'll block in the app when denied?
What about tracker? Is it possible to deactivate them?
I think trackers are more intrusive than permissions. Am I right?

MrNice said:
I you sure only normal permissions get allowed by default without any user interaction? and where can I separately allow or deny them? Is there a place where all these permissions are explained and what I'll block in the app when denied?
What about tracker? Is it possible to deactivate them?
I think trackers are more intrusive than permissions. Am I right?
Click to expand...
Click to collapse
Yes, only normal permissions get allowed by default, the apps will ask for the rest of them and you can deny them if you want. Also the only way to disable trackers is with aurora appwarden or trackercontrol, but sometimes the apps with disabled trackers could crash.

@MrNice
an app only can track you if it has the related Android permission granted to do so.

The Penguin said:
Also the only way to disable trackers is with aurora appwarden or trackercontrol,
Click to expand...
Click to collapse
jwoegerbauer said:
an app only can track you if it has the related Android permission granted to do so.
Click to expand...
Click to collapse
Hummm, for me, these 2 sentences look like an oxymoron.
Could you explain?

My last 2 cents here:
An app doesn't have trackers, it only has granted permissions, but an app may behave as tracker - where it doesn't matter whatever it will track - if it got granted the related permissions.
Have a nice day.

I use Karma Firewall to log/see what's accessing the internet and block it if needed.
Many don't need internet access to be functional.
Some of the worst offenders I uninstalled.
Gookill is the worst offender, I keep Google play Services and Playstore disabled 99% of the time.
Some freeware apps are perfect. They do nothing except what they're suppose to do and never attempt internet access; keepers.

Question Question on privacy

My knowledge is limited.And I wonder,
A non-rooted A53 with default stock rom, removed bloatware, with usage only of open source apps, NetGuard VPN with allowence only to few used apps and all system stuff blocked. How private is this?
I know that networks have layers, and VPN works on an upper layer, where it cannot block traffic happening on lower levels.
But I'm just curious?
What is the most private configuration set you can have with non-rooted stock rom?

And there is that meta app (com.facebook.appmanager), it can be disabled with ADB...

The most private should be disabling the internet use and never enabling or using it. Other words, factory reset and don't sign into wifi and have no sim card then sideload any apps and that will be private.
Privacy of what you state will involve various data and info being spread around. Even open source can include malware, etc. Its been done before. VPN should be able to glean certain info. Etc. There's no easy way to say exactly how private it is or not. It all depends on various factors.

If you're that concerned about privacy, try a privacy centric OS like CalyxOS or GrapheneOS