search

0xzfs / droidwall

Automatically exported from code.google.com/p/droidwall
0 stars 0 forks source link

Limit Ports for Applications - e.g. SSL only #228

Open GoogleCodeExporter opened 9 years ago

GoogleCodeExporter commented 9 years ago 
What version of the product are you using? On what operating system?
1.5.7

Please provide any additional information below.

First: Thanks for this great APP!!!

Feature Request:
It would be great to have an additional checkbox for every APP to limit the APP 
to TCP/UDP connections to Ports that are used for SSL encrypted connections. 
e.g. 443 (HTTPS)

This does not force encryption. Applications can still transfer unencrypted 
data on SSL Ports, but it is not very likely.

GUI Example:

Wifi 3G Name        SSLOnly
[ ] [ ] NameOfApp   [ ]

Additionally I would recommend to open the following ports for such 
applications:
nsiiops     261 IIOP Name Service over TLS/SSL
nntps       563 nntp protocol over TLS/SSL
sshell      614 SSLshell
ldaps       636 ldap protocol over TLS/SSL 
corba-iiop-ssl  684 CORBA IIOP SSL
ieee-mms-ssl    695 IEEE-MMS-SSL
ftps-data   989 ftp protocol, data, over TLS/SSL
ftps        990 ftp protocol, control, over TLS/SSL
telnets     992 telnet protocol over TLS/SSL
imaps       993 imap4 protocol over TLS/SSL
pop3s       995 pop3 protocol over TLS/SSL (was spop3)

Source: www.iana.org/assignments/port-numbers

best regards :)

Original issue reported on code.google.com by uli.koe...@gmail.com on 4 Jan 2012 at 10:19

GoogleCodeExporter commented 9 years ago 
yes, please

plus one (not in the google+1 sense)

Original comment by axel.how...@yopmail.com on 26 Jan 2012 at 9:35

GoogleCodeExporter commented 9 years ago 
constraining certain apps to use certain ranges of IP addresses would similarly 
be useful

Original comment by axel.how...@yopmail.com on 26 Jan 2012 at 9:37

GoogleCodeExporter commented 9 years ago 
it turns out the address:port has been pitched in an XDA thread

http://forum.xda-developers.com/showpost.php?p=12429121&postcount=406

I am reading my way through the posts ever so not quickly

Original comment by axel.how...@yopmail.com on 26 Jan 2012 at 10:07