Firewall

Firewall (iptables frontend), based on DroidWall which is no longer being developed. A paid "donate"-version with more features it advertised within the app. * Import/Export Rules to external storage * Search Applications * Multiple profiles with custom names * Highlights system applications with custom color * Notify on new installations * VPN Support * Device Admin support to protect against being uninstalled Requires root: Yes. iptables must run as root.

Update your IP on Open DNS server.

Acutis Firewall is a parental control app that protects your family by blocking adult content, malware, and dangerous websites. All filtering happens locally on your device for maximum privacy. Key Features Content Protection • Block adult and pornographic websites with a comprehensive blocklist • Protect against malware and phishing attacks with real-time DNS filtering • Optional blocking for gambling sites and social media platforms • Works across ALL apps, not just browsers Time-Based Controls • Set daily screen time limits for specific sites or categories • Schedule blocking during homework time, bedtime, or family hours • Choose which days of the week rules apply Parental Controls • PIN-protect settings so children cannot disable protection • One-tap activation with no configuration required • Auto-start protection when device boots Privacy First • All filtering happens on your device - no data sent to external servers • No analytics, tracking, or data collection • DNS queries go directly to your system DNS or Cloudflare • PIN stored with Android's encrypted storage How It Works Acutis Firewall creates a local VPN tunnel on your device to intercept DNS queries. When a blocked domain is requested, it returns "not found" - preventing the content from loading. Allowed traffic passes through normally with no slowdown. Requirements • Android 10 or higher • No root required • No subscription - completely free and open source Named after Blessed Carlo Acutis, patron of the internet.

A Free and Open Source ad blocker for Android. The application is available for rooted and non-rooted devices. Using rooted device, the application update your system hosts file that contains a list of mappings between host names and IP addresses. Using non-rooted device, the application use the VPN feature to block outgoing connections to ads and trackers. So when an app requests an ad or a tracker from a host in that file, this request is redirected to the local IP 127.0.0.1, which does nothing. You can download predefined ads and blocker lists as hosts files from within the app to incorporate. It is also possible to use your own files and to add certain hosts to allowed and blocked lists. There are options to run a local web server to respond to blocked host names and to direct requests to the IP address of your choosing instead.

AdGuard Content Blocker is an app that will block all ads only in Yandex Browser and Samsung Internet browser without requiring you to root your device. AdGuard Content Blocker doesn't block ads in any other apps. Customize the app to suit your needs - choose any from more than 20 language-specific and general filtering rules lists available to you. The app is open source and can be found on GitHub: https://github.com/AdGuardTeam/ContentBlocker Follow us and ask any questions on social media: • Facebook: https://www.facebook.com/AdGuardEn/ • Twitter: https://twitter.com/AdGuard • Instagram: https://www.instagram.com/adguard/ • Telegram: https://t.me/adguard_en

This DNS client allows you to perform customized DNS queries directly from your mobile phone. In contrast to most other DNS clients, it does not impose restrictions on what you can query. Features: * Select recursive or authoritative server to query (default: system resolver) * Specify any question type (not just the most common A/AAAA/MX ....), you can even enter the type ID for new/experimental question types * Supports IN/CH/HS query class * Set question flags * DNSSEC aware (request / show RRSIGs ) - but it does not validate

Athena Firewall combines powerful DNS-based ad blocking with complete network control. Block ads, trackers, and unwanted connections across all apps. Works with Root, Shizuku, or VPN mode - choose what fits your device. ✓ DNS ad & tracker blocking ✓ Custom & pre-made blocklists ✓ Per-app firewall rules ✓ Root, Shizuku & VPN modes ✓ Network monitor & kill switch ✓ Material 3 design 🚫 DNS AD BLOCKING & FILTERING Stop ads and trackers before they load with powerful DNS filtering. Block ads in apps, games, and browsers system-wide. - DNS-based ad & tracker blocking - Pre-made blocklists (AdGuard, Steven Black, more) - Custom blocklists - add your own URLs - Auto-update blocklists daily - Custom DNS servers (Cloudflare, Quad9, AdGuard DNS, custom) - Block specific domains manually - Allow/block by IP address - DNS request logging - See every DNS query in real-time 🔥 FIREWALL - THREE POWERFUL MODES Choose the mode that works for YOUR device: ROOT MODE (Rooted devices) - Direct iptables firewall control - Most powerful option - System-level blocking - Maximum control SHIZUKU MODE (No root needed) - Advanced features without rooting - Enhanced firewall capabilities - Works with Shizuku app - Power user features VPN MODE (Any device) - Works on stock Android - Local VPN only (no external servers) - No root or Shizuku needed - Privacy-focused 🔒 PER-APP NETWORK CONTROL Control exactly which apps can access the internet. Block apps individually or by category. - Block apps from WiFi or mobile data - Separate rules for WiFi/data - Whitelist or blacklist mode - System app control - Show offline apps - Track install source - Real-time connection monitoring - Connection logs per app - See app permissions Perfect for stopping background data usage, preventing tracking, and saving battery. 📊 ADVANCED MONITORING Watch your network activity in real-time with comprehensive logging and monitoring. - Status bar network monitor - Real-time connection logs - DNS query logs - Per-app connection history - See which domains apps contact - Export logs for analysis - Live traffic statistics - Bandwidth usage tracking 📡 NETWORK SECURITY FEATURES - Kill switch block all traffic when firewall stops - Allow local network IPs (for printers, smart home) - Block specific IP addresses - Screen protection bypass - VPN slot functions - Auto-start on boot - Background protection 🎨 MODERN MATERIAL 3 DESIGN - Material You dynamic colors - AMOLED dark theme (true black) - Clean, intuitive interface - Smooth animations - Tablet optimized - Multi-language support 🌐 CUSTOM DNS CONTROL Take full control of your DNS for privacy and speed. - Custom DNS servers (DoH coming soon) - Popular DNS providers built-in: - Custom DNS IPs - DNS leak protection - Encrypted DNS queries (roadmap) - Change DNS per network 🛡️ PRIVACY & OPEN SOURCE - 100% open-source (GPL) - No data collection - No analytics or tracking - No ads anywhere - Community-driven 🔧 POWER USER FEATURES - Import/export blocklists - Backup/restore settings - Root OR non-root operation - Shizuku integration - Detailed logging - Custom filtering rules - Advanced DNS options - Developer options ⚡ LIGHTWEIGHT & EFFICIENT - Minimal battery drain - Low memory footprint - Runs efficiently in background - Optimized for performance - No bloat - focused features 📱 PERFECT FOR: - Blocking ads in apps & games - Stopping trackers & analytics - Reducing mobile data usage - Privacy-conscious users - Parents controlling kid's devices - Developers & security researchers - Users who want DNS control - Anyone wanting network visibility - Rooted AND non-rooted devices 🎯 USE CASES Stop App Tracking: Block analytics and trackers in all apps Save Mobile Data: Block ads = less data used Parent Controls: Block inappropriate domains Gaming: Block ads in free games Privacy:Stop apps phoning home Security Research: Monitor all connections Custom Blocking: Block specific domains/IPs

Tired of intrusive ads slowing down your phone? BlockAds blocks ads across all your apps and browsers with just one tap — no root required. KEY FEATURES - System-Wide Ad Blocking: Smart DNS-based filtering for every app and browser. No root access required. - Privacy Protection: Blocks trackers and spyware. Zero data collection — everything stays locally on your device. - App Firewall & Profiles: Block internet access for specific apps (Wi-Fi/Mobile). Switch instantly between Default, Strict, Family, and Gaming profiles. - Parental Controls: Enforce SafeSearch (Google/Bing) and YouTube Restricted Mode via Family-safe DNS providers. - Detailed Statistics: View real-time blocked ad counters, 24-hour activity charts, and detailed DNS query logs. - Fully Customizable: Add custom filter lists via URL (ABPVN, AdGuard, EasyList, etc.), create allow/block rules, and use custom DoH/DoT encrypted DNS. - Modern UI: Material 3 design built with Jetpack Compose. Features Dark/Light themes, custom accent colors, Quick Settings tile, and Home screen widgets. - Backup & Restore: Export your configuration to JSON and easily import it on a new device. - Battery & Data Friendly: Minimal performance impact. Filters only DNS traffic, reducing unnecessary ad data downloads. HOW TO USE - Open BlockAds. - Tap the power button and allow the VPN connection. - Enjoy an ad-free internet experience! (You can also toggle protection via Quick Settings tile or widget). FAQ - Is BlockAds safe? Yes. BlockAds only filters DNS queries locally. No personal data is intercepted or transmitted to external servers. - Why does it need VPN permission? It creates a local VPN tunnel on your device to route and filter DNS requests on-device. It is not a remote VPN service. - Does it work with all apps? Yes, it works system-wide. You can also whitelist specific apps or use the firewall feature to manage access. - Is it really free? Yes! BlockAds is 100% free, open-source, and contains no in-app purchases or ads. - Will it slow down my internet? No. DNS filtering is extremely lightweight. It actually speeds up your browsing and saves battery by preventing ads from loading. BlockAds is free, open source, and built with privacy in mind. Download now and take back control of your Android experience!

A Graphical user interface of Clash.Meta for Android. Features Local HTTP/HTTPS/SOCKS server VMess, Shadowsocks, Trojan, Snell protocol support for remote connections Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP Rules based off domains, GEOIP, IPCIDR or Process to forward packets to different nodes Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing or auto select node based off latency Remote providers, allowing users to get node lists remotely instead of hardcoding in config

DNS Hero let you inspect DNS zones easily. This app will give you information about the root nameserver, nameservers associated with the domain and various other DNS records (A, AAAA, MX, CNAME, TXT, SOA). You can also view the domain health as a diagnostic is run. This project is opensource at https://github.com/devgianlu/DNSHero. Built using the http://zone.vision API by DNSimple.

Change the used DNS server for specific wifi networks.

DNSNet allows you to take more control over what internet traffic goes in and out of your device. You can download host files to block a set of known advertising or malicious host names and then create exemptions where you see fit. It works by creating a lightweight VPN service that filters your internet traffic as you use your device. If you ever have trouble with connecting to a site or using an app, you can always exempt an app from filtering or create an exception for a specific host name.

DNSSetter lets you change your DNS servers. It currently uses the "setprop" method and works for mobile connections (3G, 4G, etc.). This is temporary and it will not resist if your IP address changes or if you reboot your device. As DNS management changes depending on Android version, this might not work for you. If so, please let me know so I can try adding other methods. Requires root: Yes. To edit system properties.

This application can create a VPN tunnel to modify the DNS settings on Android. Features * No root access required, no ads contained * Functional under data connection * A tester for DNS servers * IPv6 support (including Rules!) * Custom DNS server * Custom hosts and DNSMasq configuration * EXTREME LOW power consume * Material Design Supported DNS Query Methods: * UDP * TCP * DNS over TLS (RFC7858) * DNS over HTTPS (RFC8484) * DNS over HTTPS (Google JSON) Users must comply with local laws and regulations. Read more: Wiki

De1984 is a powerful Firewall and Package Manager for Android devices with multiple backend support for maximum flexibility and performance. The name **De1984** is inspired by George Orwell’s novel Nineteen Eighty-Four, reflecting the app’s philosophy of resisting surveillance and reclaiming digital privacy. It symbolizes a reversal of the dystopian control described in the book, empowering users to take back control over their devices and data. FIREWALL FEATURES - Multiple firewall capabilities: iptables (root/Shizuku), ConnectivityManager (Android 13+), and VPN fallback - Automatic firewall method selection based on device capabilities - Comprehensive iptables method for rooted devices provides kernel-level blocking with superior performance - ConnectivityManager for Android 13+ devices without root - VPN backend as fallback for maximum compatibility (no root required) - Block apps from accessing WiFi, Mobile Data, or Roaming independently - Global firewall policies: "Block All by Default" (allowlist) or "Allow All by Default" (blocklist) - Screen-off blocking to save battery and data - Real-time network state monitoring and automatic rule application PACKAGE MANAGEMENT (with Shizuku or root) - Enable/disable system apps - Force stop running apps - Uninstall system and user apps - Works with Shizuku (no root required) or traditional root access - Filter packages by system/user apps, enabled/disabled state - Search functionality for quick package lookup PRIVACY FIRST - Zero tracking or analytics - No telemetry - Local-only data storage - No proprietary libraries - No Google Play Services - 100% open source (MIT License) - Buildable from source REQUIREMENTS - Android 8.0 (API 26) or higher - For iptables firewall: Root access OR Shizuku in root mode - For ConnectivityManager firewall: Shizuku + Android 13+ - For VPN firewall: VPN permission (no root required, works on all Android versions) - For package management: Shizuku or root access PERMISSIONS - ACCESS_NETWORK_STATE: Monitor network connectivity for automatic rule application - BIND_VPN_SERVICE: Create local VPN for VPN-based firewall backend - QUERY_ALL_PACKAGES: View all installed apps - POST_NOTIFICATIONS: Show notifications for new app installations (optional) - RECEIVE_BOOT_COMPLETED: Auto-start firewall on device boot - Shizuku or root access: For iptables firewall and package management (optional) OPEN SOURCE Source code: https://github.com/dorumrr/de1984 License: MIT Issues: https://github.com/dorumrr/de1984/issues Late nights for brighter days. Created by Doru Moraru

Intra is an experimental tool that allows you to test new DNS-over-HTTPS services that encrypt domain name lookups and prevent manipulation by your network. It currently supports services from Cloudflare and Google, and additional options may be added over time. Features: * Built-in support for public DNS services from Cloudflare and Google * Visualization of server performance and application query behavior * Geocoding of query results to compare against expected regional results

Preserves privacy, prevents tracking, and provides access to restricted and hidden online content. InviZible Pro combines the strengths of Tor, DNSCrypt, and Purple I2P to provide a comprehensive solution for online privacy, security, and anonymity. Tor is responsible for privacy and anonymity. It acts like an unlimited free VPN proxy, but does so in the most secure way possible. Tor uses military-grade encryption and routes your internet traffic through a network of volunteer-run proxy servers. This helps protect your identity and location by hiding your IP address. It allows you to browse the internet anonymously, access websites that are otherwise restricted, and communicate privately. Tor also allows access to websites hosted on the Tor network, known as "onion services" or dark web, which are not accessible through regular browsers. DNSCrypt is responsible for security. Every phone uses DNS (Domain Name System) when visiting online resources. But this traffic is usually not encrypted and can be intercepted and spoofed by third parties. DNSCrypt ensures that your DNS traffic is encrypted and secure. It prevents unauthorized access and tampering of your DNS queries, providing an additional layer of protection against surveillance and data interception. I2P (Invisible Internet Project) provides secure and anonymous access to internal I2P websites, chat forums and other services that are not available through regular browsers. You may know it as the deep web. It works by routing your internet traffic through a network of volunteer-run proxy servers, allowing you to hide your identity and location. I2P provides a secure and private online environment, making it a great option for those who value anonymity and privacy. Firewall is a security feature that helps protect your device from unauthorized access and potential threats. It acts as a filter for incoming and outgoing network traffic, allowing you to control which apps can access the internet. By setting up firewall rules, you can choose to block or allow internet connection for individual apps. This helps enhance your privacy and security by preventing unauthorized communication and protecting your data while using your phone. InviZible Pro can utilize root access, if available on your device, or use a local VPN to deliver internet traffic directly to the Tor, DNSCrypt, and I2P networks. Core Features: ✔ Tor Network - Achieve full anonymity, bypass censorship, and access .onion sites securely ✔ DNSCrypt - Encrypt DNS queries to prevent ISP monitoring and manipulation ✔ I2P (Invisible Internet Project) - Secure and private decentralized networking ✔ Advanced Firewall - Restrict internet access per app and block unauthorized connections ✔ No Root Access Required - Works seamlessly on all devices without modifications ✔ Maintain complete privacy without a paid VPN - Stay anonymous for free ✔ Stealth Mode - Evade Deep Packet Inspection (DPI) and regional restrictions ✔ Free & Open Source - No ads, no tracking, no compromises

Karma Firewall app lets you take control back of your phone and block internet traffic to and from specific apps. This is a simple yet powerful firewall with an easy to use intuitive GUI which allows you to protect your sensitive data. Ever wondered why lots of apps that have no need for Internet access require Internet Permissions? Its usually either to display adverts or send your sensitive data back to servers in USA, China or Russia. Karma Firewall can block this traffic and protect your personal data. You do not need any technical skills to use, no complicated IP Addressing, Ports, Packet Filtering etc. Simply select the apps you want to block, and you are protected. Karma Firewall is the safest, most trusted Android Firewall. Karma FW is completely different from all other VPN Firewalls. We intercept no allowed traffic. Karma FW requires NO Internet permissions. Without Internet permissions Karma FW CANNOT steal your data and send it anywhere.

LANShield lets you monitor and control LAN traffic of other apps on your device. Any app with the INTERNET permission can also access devices on your local network—such as your laptop, router, IP camera, or IoT devices. Some apps misuse this capability to gather data or compromise other devices. LANShield helps you protect your local network by blocking LAN access for apps that don’t need it. Features: Block or allow apps from accessing your local network. Gain insights into which apps are interacting with your LAN. Receive notifications when apps attempt to access your LAN. Note: LANShield uses the VpnService API to create a local virtual VPN interface. It does not establish any external VPN connection.

lumine-mobile is a Clash-style Android implementation built on top of enimul (formly lumine). It brings enimul's core to Android with a VPN/TUN pipeline and a mobile-friendly UI, offering a more Clash-like experience with smarter routing and rule management. You can also view it as a mobile-side functional extension of SniShaper. Features Native Android implementation built with Kotlin and gomobile Proxying and routing powered by enimul core Clash-style configuration management UI Subscription URL import and rule switching Dedicated rule page for viewing, editing, and creating rules Blacklist-driven routing based on GFWlist for smarter traffic splitting Flexible Fake IP implementation Upstream enimul (formly lumine): https://github.com/lzpls/enimul This project uses enimul as its core and includes a number of local modifications. Some modes may still be unstable. The configuration file syntax remains compatible with upstream. To optimize mobile performance, some original IP-range rules were removed and the routing behavior was adjusted. Notes This repository is not the official upstream enimul repository. It is an Android-focused implementation and adaptation layer. The project is still in an early stage, and some websites may behave unstably. Feedback is welcome.

Android Motioneye Client App using Backend of motionEye Why using this instead other client apps: It's fast, because you are not loading HTML and CSS at all Using ONLY motionEye Backend, which is faster than Webviews Auto DDNS and Local switching, which will increase Video framerate and quality in local Wifi newtork Fullscreen support Features: Auto DDNS and Local Network Switching Using ONLY motionEye Backend Mulitple Devices and Cameras Fullscreen

NetGuard provides simple and advanced ways to block access to the internet - no root required.Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection.Blocking access to the internet can help:reduce your data usagesave your batteryincrease your privacyFeatures:Simple to useNo root required100% open sourceNo calling homeNo tracking or analyticsNo advertisementsActively developed and supportedAndroid 5.1 and later supportedIPv4/IPv6 TCP/UDP supportedTethering supportedOptionally allow when screen onOptionally block when roamingOptionally block system applicationsOptionally notify when an application accesses the internetOptionally record network usage per application per addressMaterial design theme with light and dark themePRO features:Log all outgoing traffic; search and filter access attempts; export PCAP files to analyze trafficAllow/block individual addresses per applicationNew application notifications; configure NetGuard directly from the notificationDisplay network speed graph in a status bar notificationSelect from five additional themes in both light and dark versionThere is no other no-root firewall offering all these features.If you have a question or problem, you can send an e-mail to marcel+netguard@faircode.euIf you like to help people less fluent in English, you can help translate NetGuard in your languageIf you like to test new features, you can participate in the test programAll required permissions are described here

NextDNS Manager is an Android application that simplifies managing your NextDNS configuration. NextDNS is a cloud-based DNS filter and firewall designed to protect your home, family, and online privacy. With NextDNS Manager, you can effortlessly control your NextDNS settings to ensure a safer and more secure digital experience. NextDNS Manager is compatible with any Android device running Android 12L or later. Features: - Intuitive Interface: Enjoy a user-friendly experience enhanced with dark mode, dynamic/themed icons, and support for 14 languages. - Comprehensive Configuration Management: Easily manage your NextDNS settings including filtering modes, blocklists, and whitelists. - Real-Time Statistics: Monitor DNS queries, blocked requests, and security events as they happen. - Enhanced Security and Privacy: Benefit from NextDNS' robust filtering capabilities to safeguard your online activities. An app lock using biometrics or PIN code secures your NextDNS settings and configuration from prying eyes. - Multiple Installation Options: Download and install NextDNS Manager via the Google Play Store, F-Droid, or directly from GitHub. NextDNS Manager is a completely open-source project and is not officially affiliated with NextDNS.

OPNsense Manager is a professional mobile application for managing OPNsense firewall routers. Monitor system status, manage firewall rules, view logs, control services, and manage your network security from your mobile device. FEATURES: 🔐 Authentication & Security • Secure API authentication with encrypted storage • Multiple profile management for different OPNsense instances • PIN lock with 4-6 digit code • Biometric authentication (Face ID, Touch ID, Fingerprint) • Auto-lock with configurable timeout • Platform-specific encrypted credential storage 📊 Dashboard • Real-time system overview (hostname, version, platform) • Live CPU and memory usage monitoring • Service management (start, stop, restart) • Gateway status monitoring • System uptime display • Pull-to-refresh and auto-refresh 🔥 Firewall Management • View, create, edit, and delete firewall rules • Toggle rules on/off with a single tap • Comprehensive rule configuration • Support for multiple interfaces and protocols • CIDR notation support 📋 Firewall Logs • Real-time log viewing • Filter by action (Pass, Block, Reject) • Search functionality • Detailed packet information • Auto-refresh with configurable intervals 🌐 Live Network Monitoring • Real-time network activity monitoring • Device discovery and connection tracking • Connection details (IPs, ports, protocols) • Device blocking capability • Search and filter options 📡 DHCP Lease Management • View active DHCP leases • Complete lease information • Device blocking from leases view • Search by IP, MAC, or hostname 🔧 VPN Management • OpenVPN connection management • Tailscale integration • WireGuard support • VPN status monitoring ℹ️ System Information • Firmware details and version • System status and uptime • Platform information • Repository details ⚙️ Settings • Light/dark theme toggle • PIN lock configuration • Biometric authentication setup • Session timeout configuration • Profile management • Multi-language support (English, Arabic, German, Spanish, French) REQUIREMENTS: • Android 5.0 (API 21) or higher • OPNsense 20.7 or higher with API access enabled • Network connectivity to OPNsense firewall PRIVACY: • No data collection or tracking • All data stored locally on device • No third-party services • Direct connection to your firewall only • Open source - verify our claims LICENSE: GNU General Public License v3.0