-
Notifications
You must be signed in to change notification settings - Fork 459
Similar Firewall solutions
Generally there are six categories of Android Firewalls:
- Firewalls which uses a local VPN for traffic filtering (Dr. Web Anti-Virus,[...])
- Firewalls which use a separate own VPN (Android doesn't allow to use two VPNs together the same time) like Opera's Max/Turbo feature to compress/reduce the web traffic (if it's enabled the firewall may not work)
- Firewalls which using iptables, like AFWall+, Droidwall, Avast,[...]
- Firewalls which using a local HTTP proxy (or integrate it in Android's VPN) like AdAway, AdGuard,...
- Browser or app related firewalls, like NoScript, Bluetooth Firewalls and such, which basically only blocking specific functions and not the traffic itself.
- Dynamic egress filtering: Monitors all outbound network traffic and issue dynamic prompts (on-demand) in order to determine egrees filter rules. The rules are defined per application.
IPTables based:
- Builtin iptables (no GUI, but can be controlled via external scripts any Terminal Emulator app or ADB)
- Android Firewall & Source [removed from Google Play Store!]
- FireWall Plus & Source [removed from Google Play Store!]
- Firewall Gold
- 3C Toolbox aka Android Tuner
-
DroidWalldeprecated - Avast Mobile Security & Antivirus & Forum
- LBE Privacy Master
- Advanced Firewall
Anti IMSI-Catcher (protects against IMSI/StingRay-Catchers and Silent/Stealth SMS):
- Android IMSI-Catcher Detector (AIMSICD) & Source (same link) + stingraymappingproject.org (site to show which information are collected by AIMSICD)
- SnoopSnitch + F-Droid + GSMMap Global Database
- Darshak & Source
Bluetooth Firewall:
Browser based Firewall (takes control over JavaScript,...):
VPN/Proxy based:
- LostNet Firewall
- Grey Shirts NoRoot Firewall
- Dr. Web AntiVirus + Firewall
- Kaspersky Internet Security
- Comodo Internet Security
- ...
Xposed based:
Real-time iptables logging:
Internet Diagnostic:
Dynamic egress filtering (links not working - it's only for historical reasons):
-
WhisperMonitordeprecated -
SnoopWalldeprecated
USB (not really a firewall but monitors the usb host):
-
Android USB Serial Monitor Litedeprecated
All of these firewalls working with a local Proxy/VPN service, which means that they not working with IPtables like AFWall+. They only work on a app-layer size which fake a VPN connection, means the rules are applied on the VPN servers and not on the Android OS. The VPN package will be created to monitor incoming and outgoing traffic (which not need root access). The biggest problem is that such VPN services not work with WiFi tethering or hotspots. And another con is that you can't run other VPN services and VPN/Proxy's apps at the same time together.
We not recommend to use any no-root firewall for above reasons, there are others too e.g. see an German article:
- NetSpark/Mobiwol NoRoot Data Firewall
- NoRoot Data Firewall
Final version 08.22.2015
Footer