NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
1–10 of 142 posts
Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#2Software worth paying for. I bought a license for a Google free lineage os phone that I’ve since moved on from, but still use as a media and general purpose computing device.
Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#3From the developer of FairEmail.
Every once in a while I consider making the switch to KeePassXC. I trust KeePassXC but I don't really trust the mobile apps so last time around I looked into NetGuard. It's really nice but it wasn't a good fit for my use case:
> NetGuard will do its best, but it is limited by the fact it must use the Android VPN service. This is the trade-off required to make a firewall which does not require root access. The firewall can only start when Android "allows" it to start, so it will not offer protection during early boot-up (although you can disable your network before rebooting). Also, the Android VPN service needs to be restarted to apply new rules when connectivity has changed or when the screen is being turned on or off. It will, however, be much better than nothing.
I believe that also means you can't use it with Tailscale or similar.
Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#4From the developer of FairEmail. Every once in a while I consider making the switch to KeePassXC. I trust KeePassXC but I don't really trust the mobile apps so last time around I looked into NetGuard. It's really nice but it wasn't a good fit for my use case: > NetGuard will do its best, but it is limited by the fact it must use the Android VPN service. This is the trade-off required to make a firewall which does not…
> better than nothing
Is "nothing" the only Android per-app outbound firewall alternative to NetGuard?
Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#5Similar but open source: https://github.com/celzero/rethink-app
Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#6Similar but open source: https://github.com/celzero/rethink-app
> similar but open source
Netguard (per HN title) is open-source GPLv3: https://github.com/M66B/NetGuard
Rethink uses cloud services by default?
The [DNS] resolver is deployed to Fly.io at max.rethinkdns.com
and Deno Deploy at rdns.deno.dev too,
apart from the default deployment on Cloudflare Workers.Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#7From the developer of FairEmail. Every once in a while I consider making the switch to KeePassXC. I trust KeePassXC but I don't really trust the mobile apps so last time around I looked into NetGuard. It's really nice but it wasn't a good fit for my use case: > NetGuard will do its best, but it is limited by the fact it must use the Android VPN service. This is the trade-off required to make a firewall which does not…
> better than nothing Is "nothing" the only Android per-app outbound firewall alternative to NetGuard?
No, if you have a rooted phone you can use AFWall+. And there are other non-root firewalls.
Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#8If you use a rootless firewall doesn't it act like a VPN? And then you aren't able to use VPNs unless you disable it? Useless IMO for heavy VPN users.
Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#9Similar but open source: https://github.com/celzero/rethink-app
> similar but open source Netguard (per HN title) is open-source GPLv3: https://github.com/M66B/NetGuard Rethink uses cloud services by default? The [DNS] resolver is deployed to Fly.io at max.rethinkdns.com and Deno Deploy at rdns.deno.dev too, apart from the default deployment on Cloudflare Workers.
Right, I saw their pro features listed and skipped over the oss mention.
Yes rethink uses public fly resolver by default but you can self host that as well. Apologies, that's something I should have mentioned.
Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch
#10Is there something like this for iOS? I know Adguard but it is not open source.