"Allow Local" does not work with SFTP-Clients?

[AndrewPy]

I allowed my local network and connected my phone to that network via WiFi.

However, I was unable to establish an SFTP or SSH connection to a Linux server on this network when the SFTP client was disabled in the Karma firewall settings.

I tried several (S)FTP clients and file managers but had no success.

[StarGW-net]

Which (S)FTP client are you using?

What subnet are you defining as local?

Turn on Karma Logging level 2, restart the firewall and send the log to fwlog at stargw.net

The log should break down the subnets so we can see whats going on.

Please use version 61+ of Karma if possible.

[StarGW-net]

So far using ConnectBot to my Linux on SSH, Karma is working as expected. App blocked to everywhere except local network.

I'll try moving my network from 192.168.x.x to 10.0.0.0/24 and see what happens.

[AndrewPy]

Thanks for trying.

I checked all my network settings and even tried a different wifi access point, but didn't find a solution.

Perhaps the cause is that IPv4 and IPv6 are activated. And unfortunately I can't deactivate IPv6 on my cable modem (which is also the DHCP server for the network).

[AndrewPy]

I have now tried it with a Samsung smartphone running Android 11 and it works as expected.

(My other smartphone is still running Android 10 and has dual SIM, and it doesn't work with that. Maybe there is something different in this system, for whatever reason.)

[StarGW-net]

To exclude IP subnets I include everything but the excluded subnet using:

builder.addRoute(include.address, include.prefix)

According to the Android documentation this has been around since API level 14 (Android 4)

Android 10 = API Level 29

So I am not sure why this would not work. I only have A12 and A13 to test with these days.