Firewall Software for Android ?

[Intuit]

Coming from Windows Mobile, I am completely new to Android. (busy stripping OEM crap out of my new phone now)

Anyway, my question is, do you have experience with firewall products that perform like these?

https://forums.grc.com/threads/windows-embedded-firewall-configuration-prevent-lan-snooping.542/

That means, an ability to review logs and tailor rules without stupid restrictions.

I've had some experience with other Windows products that literally ignore and/or rewrite rules on errant assumptions such as, users won't know what they're doing or/and don't want to block their own phone-home traffic. Nothing annoys me more than products like those.

Thanks.

 

[pmikep]

I have removed my content

 

[Intuit]

Interesting; thanks. I'll have to learn IPTables. (been putting that off for awhile LoL) Ooh... look'n it up now https://app.itpro.tv/course/linux-xk0004/filtering-trafficiptables ...

 

[pmikep]

I have removed my content

 

[Barry Wallis]

(I kinda assume that everyone in this forum roots their Android phones.)

Bad assumption.

 

[Intuit]

I should have added that, in order to use AFWall+, you have to be rooted. (I kinda assume that everyone in this forum roots their Android phones.)

There is a non-root firewall that I use on my (yikes) Tracfone. But it's not very good in that it won't stop google from spying on you.

Thanks for the additional info. @Barry Wallis is right. Still in the process of answering a few million questions LoL.

First thing I do with any computer from HP/Dell/Asus/Toshiba is use PnPUtil to export the drivers from the OEM O/S, format the partition, (not the drive,) go directly to Microsoft and load a fresh O/S from a bootable Flash drive. There are literally zero risks/consequences from doing this and the time required is minimal. Looking to find out whether it's possible/practical to do the same with the phone... export the OEM drivers, wipe it and install an O/S directly from Google and whether there are any risks/consequences? (not buying an expensive Pixel phone)

Not entirely firm on what it means to run rooted or how it differs from jailbreak. Obviously have more access to the file and operating system. I suspect jailbreak just refers to an ability to run unsigned apps from outside Google's App Store.
I'd imagine one can sideload unsigned code in developer mode but I guess the phone leaves developer mode the minute it's restarted; at which point those apps won't run?
The sites often discuss rooting as if it's permanent. Looking to answer whether that's necessarily the case?

Does rooted simply mean that you're running an unsigned bootloader and/or kernel?
Is it correct to say that apps running on a rooted phone won't necessarily have any more access than those on one that isn't rooted?
A rooted phone will still be able to auto-update?

 

[pmikep]

I have removed my content

 

[PHolder]

Android isn't just like Unix, it IS Linux, just with a Java based phone UI on top. For example, on my Nexus 6P, long out of support, and stuck on Android 8, in the "About phone" page it says Android version 8.1.0 Kernel Version 3.10.73-g309d642 (gcc version 4.9.x-google 20140827(prerelease) (GCC) ) android-build@abfarm909 #1 Thu Oct 11 19:39:39 UTC 2018

That's a hella version, but that means it's based on Linux kernel 3.10.73. (For now... Google is working on their next project named Fuchsia. https://www.forbes.com/sites/barryc...roid-replacement-fuchsia-moves-a-step-closer/ )

Anyway, rooting the phone means enabling code to be able to run as root. This is a benefit, and a danger. I would NOT root my phone, because it gives the opportunity to malware to get root too.

 

[pmikep]

I have removed my content

 

[LikesCookies]

I should have added that, in order to use AFWall+, you have to be rooted. (I kinda assume that everyone in this forum roots their Android phones.)

There is a non-root firewall that I use on my (yikes) Tracfone. But it's not very good in that it won't stop google from spying on you.

I've never rooted my Android phones. Don't understand why I'd want to. My wife and I both use Tracfone - she has a Galaxy A51 and I have a Pixel 4a. Each of us pays less that $20/month for our service.

 

[MichaelRSorg]

I suggest turning on Private DNS (an Android system configuration setting somewhere in the Networking section) and using NextDNS with it. You will need to setup a free account at nextdns.io. NextDNS has optional logs and you can also setup white and black lists for domains where the default behavior is not what you want. And, they defend against CNAME cloaking.

The NextDNS logs are on their website, for logs on the Android device itself, I suggest Intra, a DNS app from Google. It can be configured to use NextDNS.

 

[joet12345]

Adguard is the best I have found https://adguard.com/en/welcome.html

I have tried many and this is the best all around...it also includes a free VPN of free 3GB of use each month.... no other is better than this one...trust me just try it and test it... You can also encrypt your DNS...

Aside from that the most invasive of them all is "Google Play services" this services even uploads your GPS location constantly using Google maps... without your permission. You know Google maps is free so it is installed by default in all androids.

You cannot disable that service from your phone so you need to disable it from a computer...