skullone / android_firewall

This is a fork of Droidwall by Rodrigo Zechin Rosauro - http://code.google.com/p/droidwall/
128 stars 91 forks source link

android firewall block all vpn transport #82

Open sbw983 opened 9 years ago

sbw983 commented 9 years ago

Hello

Android firewall in an excellent firewall on my android device,but today when i start a pppt vpn on my device, android firewall block all transport via vpn. I have select vpn support and enable vpn acces in rule set but the wall still block all transport

skullone commented 9 years ago

What version of android are you on? On Sep 16, 2014 9:56 PM, "sbw983" notifications@github.com wrote:

Hello

Android firewall in an excellent firewall on my android device,but today when i start a pppt vpn on my device, android firewall block all transport via vpn. I have select vpn support and enable vpn acces in rule set but the wall still block all transport

— Reply to this email directly or view it on GitHub https://github.com/skullone/android_firewall/issues/82.

sbw983 commented 9 years ago

android 4.3(CM 11) in Samsung Galaxy S III (i9300) the problem is solved just i enable 3g access in rule set each time i need vpn(by default i disable all 3g access for all app).

sbw983 commented 9 years ago

how to export log so i can send logs to you.

skullone commented 9 years ago

CM11 is 4.4.4. VPN was changed by Google with KitKat.

Before KitKat vpn data would only travel through the VPN tunnel interface. For example OpenVPN would create an interface called tun0. All data traveled through that.

With kitkat data comes from the normal interface and is more or less forwarded by the kernel to the vpn tunnel interface. So you need to allow both the VPN support check box and the WiFi/data check box.

The best thing you can do is make sure you use your profiles to their fullest extent as there isn't much more i can do about it. To try to make things easier for you check out the plugin for Tasked and shortcuts for Llama and Macrodroid.

Thanks! On Sep 16, 2014 10:10 PM, "sbw983" notifications@github.com wrote:

android 4.3(CM 11) in Samsung Galaxy S III (i9300) the problem is solved just i enable 3g access in rule set each time i need vpn(by default i disable all 3g access for all app).

— Reply to this email directly or view it on GitHub https://github.com/skullone/android_firewall/issues/82#issuecomment-55840087 .

sbw983 commented 9 years ago

Sorry, i use CM 10.2 android 4.3, I only use stable version and no additional plugin app in my phone. I have enable both wlan and vpn checkbox but not work for pptp vpn(it work when i use openvpn before). after i enable both date and vpn checkbox the app can access via vpn even without wlan checkbox enable.So i test these way

  1. enable vpn only - transport blocked 2.enable both wlan and vpn - transport blocked 3.enable wlan date and vpn - transport access 4.enable ONLY both date and vpn - transport access 5.enable DATE ONLY - transport access I try these test with wlane on and date access off on my phone. So i make conclution that to enable pptp vpn access on my phone i just need only enable date check box enable in android firewall rule set. the 5th test almost make me crazy.