Firewall

Firewall (iptables frontend), based on DroidWall which is no longer being developed. A paid "donate"-version with more features it advertised within the app. * Import/Export Rules to external storage * Search Applications * Multiple profiles with custom names * Highlights system applications with custom color * Notify on new installations * VPN Support * Device Admin support to protect against being uninstalled Requires root: Yes. iptables must run as root.

Update your IP on Open DNS server.

A Free and Open Source ad blocker for Android. The application is available for rooted and non-rooted devices. Using rooted device, the application update your system hosts file that contains a list of mappings between host names and IP addresses. Using non-rooted device, the application use the VPN feature to block outgoing connections to ads and trackers. So when an app requests an ad or a tracker from a host in that file, this request is redirected to the local IP 127.0.0.1, which does nothing. You can download predefined ads and blocker lists as hosts files from within the app to incorporate. It is also possible to use your own files and to add certain hosts to allowed and blocked lists. There are options to run a local web server to respond to blocked host names and to direct requests to the IP address of your choosing instead.

AdGuard Content Blocker is an app that will block all ads only in Yandex Browser and Samsung Internet browser without requiring you to root your device. AdGuard Content Blocker doesn't block ads in any other apps. Customize the app to suit your needs - choose any from more than 20 language-specific and general filtering rules lists available to you. The app is open source and can be found on GitHub: https://github.com/AdGuardTeam/ContentBlocker Follow us and ask any questions on social media: • Facebook: https://www.facebook.com/AdGuardEn/ • Twitter: https://twitter.com/AdGuard • Instagram: https://www.instagram.com/adguard/ • Telegram: https://t.me/adguard_en

This DNS client allows you to perform customized DNS queries directly from your mobile phone. In contrast to most other DNS clients, it does not impose restrictions on what you can query. Features: * Select recursive or authoritative server to query (default: system resolver) * Specify any question type (not just the most common A/AAAA/MX ....), you can even enter the type ID for new/experimental question types * Supports IN/CH/HS query class * Set question flags * DNSSEC aware (request / show RRSIGs ) - but it does not validate

Athena Firewall combines powerful DNS-based ad blocking with complete network control. Block ads, trackers, and unwanted connections across all apps. Works with Root, Shizuku, or VPN mode - choose what fits your device. ✓ DNS ad & tracker blocking ✓ Custom & pre-made blocklists ✓ Per-app firewall rules ✓ Root, Shizuku & VPN modes ✓ Network monitor & kill switch ✓ Material 3 design 🚫 DNS AD BLOCKING & FILTERING Stop ads and trackers before they load with powerful DNS filtering. Block ads in apps, games, and browsers system-wide. - DNS-based ad & tracker blocking - Pre-made blocklists (AdGuard, Steven Black, more) - Custom blocklists - add your own URLs - Auto-update blocklists daily - Custom DNS servers (Cloudflare, Quad9, AdGuard DNS, custom) - Block specific domains manually - Allow/block by IP address - DNS request logging - See every DNS query in real-time 🔥 FIREWALL - THREE POWERFUL MODES Choose the mode that works for YOUR device: ROOT MODE (Rooted devices) - Direct iptables firewall control - Most powerful option - System-level blocking - Maximum control SHIZUKU MODE (No root needed) - Advanced features without rooting - Enhanced firewall capabilities - Works with Shizuku app - Power user features VPN MODE (Any device) - Works on stock Android - Local VPN only (no external servers) - No root or Shizuku needed - Privacy-focused 🔒 PER-APP NETWORK CONTROL Control exactly which apps can access the internet. Block apps individually or by category. - Block apps from WiFi or mobile data - Separate rules for WiFi/data - Whitelist or blacklist mode - System app control - Show offline apps - Track install source - Real-time connection monitoring - Connection logs per app - See app permissions Perfect for stopping background data usage, preventing tracking, and saving battery. 📊 ADVANCED MONITORING Watch your network activity in real-time with comprehensive logging and monitoring. - Status bar network monitor - Real-time connection logs - DNS query logs - Per-app connection history - See which domains apps contact - Export logs for analysis - Live traffic statistics - Bandwidth usage tracking 📡 NETWORK SECURITY FEATURES - Kill switch block all traffic when firewall stops - Allow local network IPs (for printers, smart home) - Block specific IP addresses - Screen protection bypass - VPN slot functions - Auto-start on boot - Background protection 🎨 MODERN MATERIAL 3 DESIGN - Material You dynamic colors - AMOLED dark theme (true black) - Clean, intuitive interface - Smooth animations - Tablet optimized - Multi-language support 🌐 CUSTOM DNS CONTROL Take full control of your DNS for privacy and speed. - Custom DNS servers (DoH coming soon) - Popular DNS providers built-in: - Custom DNS IPs - DNS leak protection - Encrypted DNS queries (roadmap) - Change DNS per network 🛡️ PRIVACY & OPEN SOURCE - 100% open-source (GPL) - No data collection - No analytics or tracking - No ads anywhere - Community-driven 🔧 POWER USER FEATURES - Import/export blocklists - Backup/restore settings - Root OR non-root operation - Shizuku integration - Detailed logging - Custom filtering rules - Advanced DNS options - Developer options ⚡ LIGHTWEIGHT & EFFICIENT - Minimal battery drain - Low memory footprint - Runs efficiently in background - Optimized for performance - No bloat - focused features 📱 PERFECT FOR: - Blocking ads in apps & games - Stopping trackers & analytics - Reducing mobile data usage - Privacy-conscious users - Parents controlling kid's devices - Developers & security researchers - Users who want DNS control - Anyone wanting network visibility - Rooted AND non-rooted devices 🎯 USE CASES Stop App Tracking: Block analytics and trackers in all apps Save Mobile Data: Block ads = less data used Parent Controls: Block inappropriate domains Gaming: Block ads in free games Privacy:Stop apps phoning home Security Research: Monitor all connections Custom Blocking: Block specific domains/IPs

A Graphical user interface of Clash.Meta for Android. Features Local HTTP/HTTPS/SOCKS server VMess, Shadowsocks, Trojan, Snell protocol support for remote connections Built-in DNS server that aims to minimize DNS pollution attack impact, supports DoH/DoT upstream and fake IP Rules based off domains, GEOIP, IPCIDR or Process to forward packets to different nodes Remote groups allow users to implement powerful rules. Supports automatic fallback, load balancing or auto select node based off latency Remote providers, allowing users to get node lists remotely instead of hardcoding in config

DNS Hero let you inspect DNS zones easily. This app will give you information about the root nameserver, nameservers associated with the domain and various other DNS records (A, AAAA, MX, CNAME, TXT, SOA). You can also view the domain health as a diagnostic is run. This project is opensource at https://github.com/devgianlu/DNSHero. Built using the http://zone.vision API by DNSimple.

Change the used DNS server for specific wifi networks.

DNSNet allows you to take more control over what internet traffic goes in and out of your device. You can download host files to block a set of known advertising or malicious host names and then create exemptions where you see fit. It works by creating a lightweight VPN service that filters your internet traffic as you use your device. If you ever have trouble with connecting to a site or using an app, you can always exempt an app from filtering or create an exception for a specific host name.

DNSSetter lets you change your DNS servers. It currently uses the "setprop" method and works for mobile connections (3G, 4G, etc.). This is temporary and it will not resist if your IP address changes or if you reboot your device. As DNS management changes depending on Android version, this might not work for you. If so, please let me know so I can try adding other methods. Requires root: Yes. To edit system properties.

This application can create a VPN tunnel to modify the DNS settings on Android. Features * No root access required, no ads contained * Functional under data connection * A tester for DNS servers * IPv6 support (including Rules!) * Custom DNS server * Custom hosts and DNSMasq configuration * EXTREME LOW power consume * Material Design Supported DNS Query Methods: * UDP * TCP * DNS over TLS (RFC7858) * DNS over HTTPS (RFC8484) * DNS over HTTPS (Google JSON) Users must comply with local laws and regulations. Read more: Wiki

De1984 is a powerful Firewall and Package Manager for Android devices with multiple backend support for maximum flexibility and performance. The name **De1984** is inspired by George Orwell’s novel Nineteen Eighty-Four, reflecting the app’s philosophy of resisting surveillance and reclaiming digital privacy. It symbolizes a reversal of the dystopian control described in the book, empowering users to take back control over their devices and data. FIREWALL FEATURES - Multiple firewall capabilities: iptables (root/Shizuku), ConnectivityManager (Android 13+), and VPN fallback - Automatic firewall method selection based on device capabilities - Comprehensive iptables method for rooted devices provides kernel-level blocking with superior performance - ConnectivityManager for Android 13+ devices without root - VPN backend as fallback for maximum compatibility (no root required) - Block apps from accessing WiFi, Mobile Data, or Roaming independently - Global firewall policies: "Block All by Default" (allowlist) or "Allow All by Default" (blocklist) - Screen-off blocking to save battery and data - Real-time network state monitoring and automatic rule application PACKAGE MANAGEMENT (with Shizuku or root) - Enable/disable system apps - Force stop running apps - Uninstall system and user apps - Works with Shizuku (no root required) or traditional root access - Filter packages by system/user apps, enabled/disabled state - Search functionality for quick package lookup PRIVACY FIRST - Zero tracking or analytics - No telemetry - Local-only data storage - No proprietary libraries - No Google Play Services - 100% open source (MIT License) - Buildable from source REQUIREMENTS - Android 8.0 (API 26) or higher - For iptables firewall: Root access OR Shizuku in root mode - For ConnectivityManager firewall: Shizuku + Android 13+ - For VPN firewall: VPN permission (no root required, works on all Android versions) - For package management: Shizuku or root access PERMISSIONS - ACCESS_NETWORK_STATE: Monitor network connectivity for automatic rule application - BIND_VPN_SERVICE: Create local VPN for VPN-based firewall backend - QUERY_ALL_PACKAGES: View all installed apps - POST_NOTIFICATIONS: Show notifications for new app installations (optional) - RECEIVE_BOOT_COMPLETED: Auto-start firewall on device boot - Shizuku or root access: For iptables firewall and package management (optional) OPEN SOURCE Source code: https://github.com/dorumrr/de1984 License: MIT Issues: https://github.com/dorumrr/de1984/issues Late nights for brighter days. Created by Doru Moraru

Intra is an experimental tool that allows you to test new DNS-over-HTTPS services that encrypt domain name lookups and prevent manipulation by your network. It currently supports services from Cloudflare and Google, and additional options may be added over time. Features: * Built-in support for public DNS services from Cloudflare and Google * Visualization of server performance and application query behavior * Geocoding of query results to compare against expected regional results

Preserves privacy, prevents tracking, and provides access to restricted and hidden online content. InviZible Pro combines the strengths of Tor, DNSCrypt, and Purple I2P to provide a comprehensive solution for online privacy, security, and anonymity. Tor is responsible for privacy and anonymity. It acts like an unlimited free VPN proxy, but does so in the most secure way possible. Tor uses military-grade encryption and routes your internet traffic through a network of volunteer-run proxy servers. This helps protect your identity and location by hiding your IP address. It allows you to browse the internet anonymously, access websites that are otherwise restricted, and communicate privately. Tor also allows access to websites hosted on the Tor network, known as "onion services" or dark web, which are not accessible through regular browsers. DNSCrypt is responsible for security. Every phone uses DNS (Domain Name System) when visiting online resources. But this traffic is usually not encrypted and can be intercepted and spoofed by third parties. DNSCrypt ensures that your DNS traffic is encrypted and secure. It prevents unauthorized access and tampering of your DNS queries, providing an additional layer of protection against surveillance and data interception. I2P (Invisible Internet Project) provides secure and anonymous access to internal I2P websites, chat forums and other services that are not available through regular browsers. You may know it as the deep web. It works by routing your internet traffic through a network of volunteer-run proxy servers, allowing you to hide your identity and location. I2P provides a secure and private online environment, making it a great option for those who value anonymity and privacy. Firewall is a security feature that helps protect your device from unauthorized access and potential threats. It acts as a filter for incoming and outgoing network traffic, allowing you to control which apps can access the internet. By setting up firewall rules, you can choose to block or allow internet connection for individual apps. This helps enhance your privacy and security by preventing unauthorized communication and protecting your data while using your phone. InviZible Pro can utilize root access, if available on your device, or use a local VPN to deliver internet traffic directly to the Tor, DNSCrypt, and I2P networks. Core Features: ✔ Tor Network - Achieve full anonymity, bypass censorship, and access .onion sites securely ✔ DNSCrypt - Encrypt DNS queries to prevent ISP monitoring and manipulation ✔ I2P (Invisible Internet Project) - Secure and private decentralized networking ✔ Advanced Firewall - Restrict internet access per app and block unauthorized connections ✔ No Root Access Required - Works seamlessly on all devices without modifications ✔ Maintain complete privacy without a paid VPN - Stay anonymous for free ✔ Stealth Mode - Evade Deep Packet Inspection (DPI) and regional restrictions ✔ Free & Open Source - No ads, no tracking, no compromises

Karma Firewall app lets you take control back of your phone and block internet traffic to and from specific apps. This is a simple yet powerful firewall with an easy to use intuitive GUI which allows you to protect your sensitive data. Ever wondered why lots of apps that have no need for Internet access require Internet Permissions? Its usually either to display adverts or send your sensitive data back to servers in USA, China or Russia. Karma Firewall can block this traffic and protect your personal data. You do not need any technical skills to use, no complicated IP Addressing, Ports, Packet Filtering etc. Simply select the apps you want to block, and you are protected. Karma Firewall is the safest, most trusted Android Firewall. Karma FW is completely different from all other VPN Firewalls. We intercept no allowed traffic. Karma FW requires NO Internet permissions. Without Internet permissions Karma FW CANNOT steal your data and send it anywhere.

LANShield lets you monitor and control LAN traffic of other apps on your device. Any app with the INTERNET permission can also access devices on your local network—such as your laptop, router, IP camera, or IoT devices. Some apps misuse this capability to gather data or compromise other devices. LANShield helps you protect your local network by blocking LAN access for apps that don’t need it. Features: Block or allow apps from accessing your local network. Gain insights into which apps are interacting with your LAN. Receive notifications when apps attempt to access your LAN. Note: LANShield uses the VpnService API to create a local virtual VPN interface. It does not establish any external VPN connection.

Android Motioneye Client App using Backend of motionEye Why using this instead other client apps: It's fast, because you are not loading HTML and CSS at all Using ONLY motionEye Backend, which is faster than Webviews Auto DDNS and Local switching, which will increase Video framerate and quality in local Wifi newtork Fullscreen support Features: Auto DDNS and Local Network Switching Using ONLY motionEye Backend Mulitple Devices and Cameras Fullscreen

NetGuard provides simple and advanced ways to block access to the internet - no root required.Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection.Blocking access to the internet can help:reduce your data usagesave your batteryincrease your privacyFeatures:Simple to useNo root required100% open sourceNo calling homeNo tracking or analyticsNo advertisementsActively developed and supportedAndroid 5.1 and later supportedIPv4/IPv6 TCP/UDP supportedTethering supportedOptionally allow when screen onOptionally block when roamingOptionally block system applicationsOptionally notify when an application accesses the internetOptionally record network usage per application per addressMaterial design theme with light and dark themePRO features:Log all outgoing traffic; search and filter access attempts; export PCAP files to analyze trafficAllow/block individual addresses per applicationNew application notifications; configure NetGuard directly from the notificationDisplay network speed graph in a status bar notificationSelect from five additional themes in both light and dark versionThere is no other no-root firewall offering all these features.If you have a question or problem, you can send an e-mail to marcel+netguard@faircode.euIf you like to help people less fluent in English, you can help translate NetGuard in your languageIf you like to test new features, you can participate in the test programAll required permissions are described here

NextDNS Manager is an Android application that simplifies managing your NextDNS configuration. NextDNS is a cloud-based DNS filter and firewall designed to protect your home, family, and online privacy. With NextDNS Manager, you can effortlessly control your NextDNS settings to ensure a safer and more secure digital experience. NextDNS Manager is compatible with any Android device running Android 12L or later. Features: - Intuitive Interface: Enjoy a user-friendly experience enhanced with dark mode, dynamic/themed icons, and support for 14 languages. - Comprehensive Configuration Management: Easily manage your NextDNS settings including filtering modes, blocklists, and whitelists. - Real-Time Statistics: Monitor DNS queries, blocked requests, and security events as they happen. - Enhanced Security and Privacy: Benefit from NextDNS' robust filtering capabilities to safeguard your online activities. An app lock using biometrics or PIN code secures your NextDNS settings and configuration from prying eyes. - Multiple Installation Options: Download and install NextDNS Manager via the Google Play Store, F-Droid, or directly from GitHub. NextDNS Manager is a completely open-source project and is not officially affiliated with NextDNS.

* Quick presentation OpenDNS Updater is an extremely easy to use android app to perform dynamic IP updates on OpenDNS services. * Presentation OpenDns is a very famous DNS service used by a lot of people, but not everybody knows that they also provide some filtering product for individuals. This type of service is free and can be very useful to filter websites such as porn, phishing, malware, and many other category. The service rely on your external IP to perform filter actions. Why an android application for a DNS service ? As I said on the previous line, the service rely on your external IP address, so when you change access point or start using mobile data, you request will not be filtered. Updater exist for almost Windows, Mac and Linux, but not for Android or IOS. ( https://support.opendns.com/hc/en-us/articles/227988607-OpenDNS-Compatible-Dynamic-DNS-DDNS-Clients ) * Other informations This is an open source project; For more information on the app and the source code, please go to android.guillaumevillena.fr.

Quad9 Connect is an Android and ChromeOS app that sends your DNS queries to Quad9's secure, private, open recursive DNS service. Quad9 Connect adds additional functionality and features compared to using Android's Private DNS feature to utilize encrypted DNS or configured Quad9 in Chrome on ChromeOS. The application creates a split VPN tunnel with Android API "VpnService" to configure an alternate DNS server on Android and ChromeOS. ## Features - DNS over TLS or DNS over UDP - DNS Query Log - Trusted Networks - Blocked Query Notifications - Local Domains - Excluded Applications

Say hello to a safer, transparent, and secure Android. VPN: Connects to multiple WireGuard VPNs of your choice. Safe: Reveals network activity of installed apps and lets you disable, uninstall, or firewall them. Secure: First line of defense against spyware, ransomware, and malware that steal personal information and takeover accounts. Protects from DNS manipulation typically employed to censor websites, social media, and messaging apps. Fast: DNS Servers deployed to 300+ locations world-wide to ensure your internet is as fast and highly available as it can be. Open: Open source and free of any trackers. ***Features*** Firewall: Prevent apps from connecting to the Internet. Block spyware, malware, ransomware and more. A firewall blocks any app connecting to the Internet over WiFi or Mobile data. Since most forms of surveillance require the data to be sent the network to a server, firewalling them effectively mitigates the threat (File Managers, Alarm Clock, Calculator are few such examples of apps that do not require any Internet access to function). The firewall feature uses Accessibility Service to detect and firewall background applications. Monitoring: Keep tabs on incoming and outgoing Internet traffic. If enabled, the connectivity logs are collected and analyzed. Automated reports flag previously unknown or suspicious connections, and reveal the extent of attempt to steal data by spyware networks. In our tests, around 60% of the traffic is flagged and reported as being initiated by known spyware. Logs generated are made available in near-real time to the user for their own analysis. WireGuard: Secure outgoing Internet traffic. The app uses fast, modern, light-weight, and secure WireGuard protocol to encrypt outgoing connections to any compatible VPN provider of your choice. Anti-censorship: The app encrypts your internet connection to Domain Name System (DNS) server run by Rethink with presence in our 300+ locations world-wide. DNS servers are the address book of the internet: A DNS server provides the exact addresses you need to visit a website or open an app. Data Monitor: Track per-app and per-connection Mobile or WiFi data usage.

Why this app? When you travel near country borders, your phone may automatically connect to a stronger cell tower across the border—even if you never left your country. This can quickly result in costly roaming fees. Manually toggling roaming is inconvenient and easy to forget.Roaming Borders automates the guardrails so you don’t have to. What it does Block roaming when you don’t want it: Select allowed countries; if your device connects outside that list, data traffic is blocked. Avoid surprise charges: Prevent accidental cross-border roaming near national frontiers. Simple presets or full control: Choose ready-made country presets or build your own list for upcoming trips. On-device only: Uses Android’s VpnService as a local firewall. No tunneling to servers. How it works Roaming Borders runs a lightweight, on-device VPN that filters traffic based on your current country. When your current country is not in your allow-list → block data traffic system-wide. When your current country is allowed → allow traffic as normal. When connected to Wi-Fi, the guard pauses automatically and resumes once Wi-Fi disconnects. Note on reboot: After restarting your phone, the guard re-enables after a short delay. To be extra safe, enable Airplane mode before restarting.