Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

netguard.me

Post reply on HN
Print view View original

71–80 of 142 posts

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#71

Post by thatloststudent »

transpute wrote: post #4
dsissitka wrote: post #3

From the developer of FairEmail. Every once in a while I consider making the switch to KeePassXC. I trust KeePassXC but I don't really trust the mobile apps so last time around I looked into NetGuard. It's really nice but it wasn't a good fit for my use case: > NetGuard will do its best, but it is limited by the fact it must use the Android VPN service. This is the trade-off required to make a firewall which does not…

> better than nothing Is "nothing" the only Android per-app outbound firewall alternative to NetGuard?

There's RethinkDNS [1](not affiliated to them, just like their software). Sometimes it gets killed on my phone, but otherwise it's a great replacement, adds some much-needed features like proxies and wireguard VPNs on top of a DNS and app level control.

[1] - https://f-droid.org/packages/com.celzero.bravedns/

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#72

Post by ilbeeper »

qwertox wrote: post #38

Its' really telling that Google doesn't offer an API to access a firewall which provides a clear list of connections and the apps which create them and a way to prohibit such specific connections, possibly also according to blacklists. They really don't want users to have control over this.

Is it? Do Fedora or Ubuntu provide an API like that?

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#73

Post by [deleted] »

ignoramous wrote: post #16
transpute wrote: post #6

Earlier quoted context omitted.

> similar but open source Netguard (per HN title) is open-source GPLv3: https://github.com/M66B/NetGuard Rethink uses cloud services by default? The [DNS] resolver is deployed to Fly.io at max.rethinkdns.com and Deno Deploy at rdns.deno.dev too, apart from the default deployment on Cloudflare Workers.

rdns dev here > Rethink uses cloud services by default? There isn't anything sinister going on here with the use of "cloud services" [0][1]. Rethink, which is geared more towards anti-censorship, has its default resolver "ip-fronted" on Cloudflare (whose IPs are seldom blocked) and it works great in countries where the app is popular. Users can opt to switch to any DoH, DoT, ODoH, DNSCrypt v3 resolver of their choice…

[deleted]

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#74

Post by immibis »

udev4096 wrote: post #56
aucisson_masque wrote: post #47

Earlier quoted context omitted.

> still wonder why such an important feature is not in the AOSP itself Really? Remind yourself who works on Android. Google have been removing functionalities that benefit privacy for ever, and then put half backed alternative buried under tons of settings.

I am well aware of that. AOSP still has quite a lot of contributors outside of google

Which company decides which contributions get accepted?

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#75

Post by lightdot »

ilbeeper wrote: post #72
qwertox wrote: post #38

Its' really telling that Google doesn't offer an API to access a firewall which provides a clear list of connections and the apps which create them and a way to prohibit such specific connections, possibly also according to blacklists. They really don't want users to have control over this.

Is it? Do Fedora or Ubuntu provide an API like that?

You mean, like unrestricted access to the kernel with full firewalling capabilities? ;)

Yes, GNU/Linux distributions provide exactly that.

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#76

Post by octygen »

g-b-r wrote: post #50
aucisson_masque wrote: post #48

Pcapdroid is a very good alternative that allows to see which connections are made from what app to what server and at what time. You just leave it in background, check one day later and see what sneaky app you never thought of have been sending tons of data in the background. For me it helped me remove and search alternative for 4 apps, including a pill reminder (mytherapy). I would never have thought the trade-off…

Except that... that doesn't block anything??

Yeah, but you can just uninstall offenders

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#77

Post by t0bia_s »

It drains battery because of VPN service solution, which is only non-rooted solution. Also if you use VPN (like Wireguard), you cannot use both.

Every app has own settings for allowing WiFi, data, VPN, background data connections natively in Android. I use custom ROM that has turned off internet connection for all apps by default and you need manually allow them to connect. Which solve mine problem with constant unwanted connections.

If you want really control over traffic on Android and combine with VPN, try ReThing DNS.

https://www.rethinkdns.com/

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#78

Post by irundebian »

lightdot wrote: post #75
ilbeeper wrote: post #72

Earlier quoted context omitted.

Is it? Do Fedora or Ubuntu provide an API like that?

You mean, like unrestricted access to the kernel with full firewalling capabilities? ;) Yes, GNU/Linux distributions provide exactly that.

No, you have to install additional software for that.

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#80

Post by oever »

p0w3n3d wrote: post #23

I'm using netguard. It's really good, but conflicts with wireguard (another VPN I am using). It's because the firewall is realised using VPN API, when running netguard it uses VPN API to control the traffic

You could put a firewall at the other end of the wireguard connection.
Post reply on HN