[Feature request] Mullvad Android - Firewall Feature

8227846265 commented 3 years ago

Feature Description

Firewall:

To provides simple and advanced ways to block apps on access to the internet - no root required. Applications and addresses can individually be allowed or denied access to your Wi-Fi and/or mobile connection.

Blocking access of an app to the internet can help:

reduce your data usage
save your battery
increase your privacy

Enhanced Use Cases:

Optionally allow when screen on
Optionally block when roaming
Optionally block system applications
Optionally forward ports, also to external addresses
Optionally notify when an application accesses the internet
New application notifications

Note

As a no root firewall requires using the Android VPN Service. Mullvad being a VPN app already fixes the first issue of usage.

faern commented 3 years ago

Thanks for the suggestion. This is currently not in our backlog. But I can add it as an idea.

kalekad commented 2 years ago

Hello, I use split tunneling and always on vpn and block connections without vpn in android settings to block apps connections to the internet on my mobile as a temporary solution. The apps that I select in split tunneling cannot connect to the internet.

Would it be possible to have all apps on my mobile in the split tunneling menu?

anon97945 commented 2 years ago

Thanks for the suggestion. This is currently not in our backlog. But I can add it as an idea.

Would love to see that feature.

JehanRock commented 1 year ago

Has there been any thought into implementing this yet?

eNTi commented 1 year ago

There's already an option to track blockers when creating a wireguard configuration for android. I just don't really know how to use this with the app?

faern commented 1 year ago

There's already an option to track blockers when creating a wireguard configuration for android. I just don't really know how to use this with the app?

In the stable version of the Android app we currently don't have the built in toggles for the various DNS based blocking services. You have to enter the relevant blocking DNS resolver in Custom DNS. We explain how here.

However! We have added the more convenient blocking toggles in the latest version of the app, that is currently being launched in beta. If you would like to try it out you can grab the APK installer here: https://github.com/mullvad/mullvadvpn-app/releases/tag/android%2F2023.1-beta1

eNTi commented 1 year ago

There's already an option to track blockers when creating a wireguard configuration for android. I just don't really know how to use this with the app?

In the stable version of the Android app we currently don't have the built in toggles for the various DNS based blocking services. You have to enter the relevant blocking DNS resolver in Custom DNS. We explain how here.

However! We have added the more convenient blocking toggles in the latest version of the app, that is currently being launched in beta. If you would like to try it out you can grab the APK installer here: https://github.com/mullvad/mullvadvpn-app/releases/tag/android%2F2023.1-beta1

Thanks. Would you consider adding a "beta version" to F-Droid as well? Or do you maybe have a custom repo?

rfhldnp431 commented 1 year ago

However! We have added the more convenient blocking toggles in the latest version of the app, that is currently being launched in beta. If you would like to try it out you can grab the APK installer here: https://github.com/mullvad/mullvadvpn-app/releases/tag/android%2F2023.1-beta1

@faern I appreciate that Mullvad gives us some dns blocking features on android but it is limited to 1 list that Mullvad hosts (which is not enough for mobile ads/trackers). It would be really helpful to be able to make our own list like NextDNS or have a built-in app tracker/firewall like Rethink DNS https://rethinkdns.com/

Because of the 1 vpn api limit on android we cannot use other DNS services for our privacy so we are left to only use Mullvad. I know you can also use the private DNS feature on android with NextDNS but I would rather trust Mullvad than NextDNS for my DNS queries.

netizeni commented 7 months ago

@faern Hi Linus, is there any update regarding this feature request or is it possible to bump its priority? I'm a long time customer of Mullvad and to be honest, of all these years, this is probably the only feature I ever needed and waiting to be implemented.

Blocking internet on app level like TrackControl does would be a godsend for propriety apps which must be installed on the device.

faern commented 6 months ago

@faern Hi Linus, is there any update regarding this feature request or is it possible to bump its priority?

I'm sorry, but this is currently not on our roadmap. We currently have other features we deem more important and more in line with our core functionality. This might be implemented in the future, but I can't give a time estimate. I don't expect this to be implemented in the near future.

MagicLike commented 4 months ago

Afaik NetGuard can be configured to use a SOCKS5 proxy, so this may be an option until a similar feature gets implemented into Mullvad. Maybe some parts of the NetGuard code can be merged into the app / translated into Rust.

AutonomousCat commented 2 months ago

+1

Since it's possible to select only 1 VPN app in a mobile device's settings, it leaves people to choose between a firewall app and Mullvad if they really want it.

The use case I have is blocking an app's internet access entirely for when I really need to download a closed source app that's a bit suspicious. I suppose in the meantime I can just turn off my device's internet (ie airplane mode, wifi off, data off).

@faern Should I make a new issue for this? It's not exactly a full fledged firewall I need, just a way to disable internet for apps in an interface similar to Split Tunneling.

mullvad / mullvadvpn-app

[Feature request] Mullvad Android - Firewall Feature #2786

Feature Description