search

ukanth / afwall

AFWall+ (Android Firewall +) - iptables based firewall for Android
GNU General Public License v3.0
2.78k stars 456 forks source link

Version 3.5.1 (Donate) breaks internet access #1208

Open jw243 opened 3 years ago

jw243 commented 3 years ago

Describe the bug Since version 3.5.1 internet access is not possible anymore upon restart of device. It seems to be related to Private DNS, as internet access does not work at all with Private DNS switched on. With Private DNS switched off, unencrypted access to DNS server on port 53 is blocked, although "Apps with root privileges" are enabled, while "Disbable DNS via netd" is enabled.

Firewall Logs Please get the log from Menu -> Show Rules -> (menu) Export to storage and attach it here

Smartphone (please complete the following information):

Additional context Add any other context about the problem here.

iWARR commented 3 years ago

Bug is confimed on v3.5.2

Permissions do not work (in spite of the allow-checkboxes) for:

[0] (root) - applications with root access

Accordingly, the dnscrypt-proxy binary does not get access to the network and Internet (namely, DNS) is unavailable. In the upper toolbar, next to the app icon, a crossed out circle is constantly appears. The log also reports blocking [0] (root).

P.S. v3.4.0 was OK on same config.

@Author - Anti-leaking Script (Another one old known issue) Please, test and fix your anti-leaking script (Experimental) with dnscrypt-proxy Also "Override DNS" used in tandem to provide reliable 127.0.0.1 for dnscrypt-proxy. (Other apps can't win ugly and agressive Android's built-in DNS daemon)

I can't use this useful anti-leaking feature because:

Braintoe commented 3 years ago

Can confirm as well - with 3.5.0/3.5.1 (donate version) Wireguard fails to get DNS resolution, while 3.4.0 and below work fine with the following settings:

Device: Sony Xperia XZ1 compact Android OS: LOS17.1 ROOT [0] Apps with Root privileges: access enabled at all times Wireguard: access enabled at all times DNS proxy - set to "Disable DNS via netd"

brerk commented 3 years ago

Having same issues with Private DNS, after some time i can't connect to internet, so i have to:

My device is a Redmi Note 8 rooted with Magisk v23 and DNS Proxy as "Disable DNS via netd"

Braintoe commented 3 years ago

Tried again with 3.5.2.1 (most current version) and with log enabled. No change so far - Apps with Root access are not allowed to get out despite being allowed in the settings.

AfWall-Log-overview AfWall-permissions

H-H-M commented 2 years ago

I am having the same issue. I actually already had it with my previous phone, as soon as I updated to 3.5.0. (running LineageOs 16, Magisk 21.2, EdXposed and XprivacyLua Pro).

I just bought the FP3+, i.e. I installed everything from scratch and I only installed the apps mentioned below + SDMaid Pro up until now.
As long as Afwall+ was not installed, Internet connection worked like a charm. But after I installed and activated Afwall+ 3.5.2, it was not possible to get any connection anymore when using the "Allow Selected" Firewall Mode, even when I allowed access for literally everything.

=> The workaround I found is to use the "Block Selected" Firewall Mode in connection with the DNS proxy "Auto" setting.

I would rather prefer the "Allow Selected" / whitelisting approach, but I could not get it to work...

Device: Fairphone 3+ Android OS: LineageOS 17.1

Afwall Settings: IPtables binary: Built-in BusyBox binary: Built-in DNS proxy: Auto