search

ukanth / afwall

AFWall+ (Android Firewall +) - iptables based firewall for Android
GNU General Public License v3.0
2.81k stars 453 forks source link

Allow custom port with DNSCrypt Proxy. #1150

Open Ph0rk0z opened 4 years ago

Ph0rk0z commented 4 years ago

Describe the bug I want to use DNScrypt proxy. Unless I allow all root apps to connect the service never reaches any resolvers. But I don't want to allow all root apps. Is there another way?

The redirection script works fine to send all port 53 traffic to 5354 and dnscrypt appears to receive it. Would unblocking 5354 work? I already have DNS set to allowed. Or would the traffic still be blocked by UID? Can dnscrypt be run as a different UID?

Smartphone (please complete the following information):

Nougat 7.0

bonbonboi commented 3 years ago

I think you got confused between root e.g. magisk and root as linux, "(root) - Apps running as root" just works on the shell level as far as I know, what does that mean? it means DNSCrypt Proxy binary file will be exec under the android root e.g su , so "(root) - Apps running as root" applies to (su) but not to other graphical apps even if they got root via magisk. Correct me if I'm wrong here @ukanth