Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

netguard.me

Post reply on HN
Print view View original

91–100 of 142 posts

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#91

Post by ignoramous »

miroljub wrote: post #89
ignoramous wrote: post #16

Earlier quoted context omitted.

rdns dev here > Rethink uses cloud services by default? There isn't anything sinister going on here with the use of "cloud services" [0][1]. Rethink, which is geared more towards anti-censorship, has its default resolver "ip-fronted" on Cloudflare (whose IPs are seldom blocked) and it works great in countries where the app is popular. Users can opt to switch to any DoH, DoT, ODoH, DNSCrypt v3 resolver of their choice…

> rdns dev here I have a question for you about RethinkDNS: Can you point me the link to one thread or question about Netguard on some major internet forums like HN, Reddit or similar, where you or other RethinkDNS devs did not jump in and hijacked the thread? Only one example, please? Your spammy marketing tactics of spamming makes your product looks like a scum, and I don't even have a desire to test. Also, why do…

> hijacked the thread

I (try and) mostly only respond to subthreads that mention Rethink.

> why do you keep comparing one on device firewall like Netguard with a cloud first solution like RethinkDNS

Rethink isn't cloud-first.

> where you or other RethinkDNS devs

There's 2 of us. The other one isn't on HN, or reddit, or any other forum.

> spammy marketing tactics of spamming makes your product looks like a scum

I'm sorry you think that.

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#92

Post by kristofferg »

ilbeeper wrote: post #72
qwertox wrote: post #38

Its' really telling that Google doesn't offer an API to access a firewall which provides a clear list of connections and the apps which create them and a way to prohibit such specific connections, possibly also according to blacklists. They really don't want users to have control over this.

Is it? Do Fedora or Ubuntu provide an API like that?

Yes.

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#93

Post by saganus »

transpute wrote: post #4
dsissitka wrote: post #3

From the developer of FairEmail. Every once in a while I consider making the switch to KeePassXC. I trust KeePassXC but I don't really trust the mobile apps so last time around I looked into NetGuard. It's really nice but it wasn't a good fit for my use case: > NetGuard will do its best, but it is limited by the fact it must use the Android VPN service. This is the trade-off required to make a firewall which does not…

> better than nothing Is "nothing" the only Android per-app outbound firewall alternative to NetGuard?

I have used GlassWire (not affiliated) for a few years without issues.

It's also rootless so I assume it has the same restrictions, but it's been very helpful with apps like Uber, which I use seldomly, but prefer not to have their notifications shoved in my face every 30 minutes.

It's also helpful for disabling access to most of the bloatware that comes with e.g. Samsung phones and such.

Probably not blocking everything, but I feel like it's at least something.

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#94

Post by qwertox »

oever wrote: post #80
p0w3n3d wrote: post #23

I'm using netguard. It's really good, but conflicts with wireguard (another VPN I am using). It's because the firewall is realised using VPN API, when running netguard it uses VPN API to control the traffic

You could put a firewall at the other end of the wireguard connection.

This doesn't tell you which app is connecting to which IP.

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#95

Post by [deleted] »

oever wrote: post #80
p0w3n3d wrote: post #23

I'm using netguard. It's really good, but conflicts with wireguard (another VPN I am using). It's because the firewall is realised using VPN API, when running netguard it uses VPN API to control the traffic

You could put a firewall at the other end of the wireguard connection.

[deleted]

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#96

Post by baby_souffle »

t0bia_s wrote: post #77

It drains battery because of VPN service solution, which is only non-rooted solution. Also if you use VPN (like Wireguard), you cannot use both. Every app has own settings for allowing WiFi, data, VPN, background data connections natively in Android. I use custom ROM that has turned off internet connection for all apps by default and you need manually allow them to connect. Which solve mine problem with constant unwa…

> It drains battery because of VPN service solution, which is only non-rooted solution.

It's not the _only_ solution. If you're on a modern (read: last 6 years or so) version of android, you can specify a DNS over TLS server to use.

If that DNS server also happens to be a PiHole, you have a good filter mechanism that doesn't hit battery life / data quotas quite like an always-on VPN does.

It's a bit old, but I put together a basic project for this here: https://github.com/kquinsland/skyhole/

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#97

Post by baby_souffle »

aucisson_masque wrote: post #48

Pcapdroid is a very good alternative that allows to see which connections are made from what app to what server and at what time. You just leave it in background, check one day later and see what sneaky app you never thought of have been sending tons of data in the background. For me it helped me remove and search alternative for 4 apps, including a pill reminder (mytherapy). I would never have thought the trade-off…

> including a pill reminder (mytherapy)

This is an app you wanted to replace? Or this is one of the apps that you found to be a good replacement?

(I am also looking for a basic medication reminder/logging app)

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#98

Post by esperent »

trissi1996 wrote: post #88
esperent wrote: post #43

Earlier quoted context omitted.

NextDNS as a manual DNS server on Android is the adblocking solution I've been using for years. Is there any reason to believe they would track you, any more than any other DNS provider?

Unlike most other dns providers, they often have an account or even payment to identify you, not just your outbound IP....

Do they keep logs though?

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#99

Post by t0bia_s »

baby_souffle wrote: post #96
t0bia_s wrote: post #77

It drains battery because of VPN service solution, which is only non-rooted solution. Also if you use VPN (like Wireguard), you cannot use both. Every app has own settings for allowing WiFi, data, VPN, background data connections natively in Android. I use custom ROM that has turned off internet connection for all apps by default and you need manually allow them to connect. Which solve mine problem with constant unwa…

> It drains battery because of VPN service solution, which is only non-rooted solution. It's not the _only_ solution. If you're on a modern (read: last 6 years or so) version of android, you can specify a DNS over TLS server to use. If that DNS server also happens to be a PiHole, you have a good filter mechanism that doesn't hit battery life / data quotas quite like an always-on VPN does. It's a bit old, but I put to…

I prefer to connect via Wireguard to home network that has DNS filters (ie Pi-hole or NextDNS), because I can benefit with connection to home network any time.

Re: NetGuard – rootless Android outbound per-app OSS firewall, like LittleSnitch

#100

Post by t0bia_s »

g-b-r wrote: post #83
t0bia_s wrote: post #77

It drains battery because of VPN service solution, which is only non-rooted solution. Also if you use VPN (like Wireguard), you cannot use both. Every app has own settings for allowing WiFi, data, VPN, background data connections natively in Android. I use custom ROM that has turned off internet connection for all apps by default and you need manually allow them to connect. Which solve mine problem with constant unwa…

> It drains battery because of VPN service solution It doesn't really, just try it (and take actual battery duration measurements, Android misreports VPN apps battery usages)

I did, battery drains 5-10% faster.
Post reply on HN