xiongqihong / droidwall

Automatically exported from code.google.com/p/droidwall
0 stars 0 forks source link

Change default target rule to ACCEPT #192

Closed GoogleCodeExporter closed 9 years ago

GoogleCodeExporter commented 9 years ago
Hi,

I'm currently trying the Custom Script feature of DroidWall, I noticed that 
DroidWall is using RETURN as a default target rule in the OUTPUT chain. Can you 
make it to set to ACCEPT? Because this Custom Script feature is powerful enough 
to make a more complex rules and this will also allow us to default DROP the 
OUTPUT chain. Also when flushing rules/disabling firewall via DroidWall, I 
noticed that the INPUT chain rules created via Custom Script were not removed. 
DroidWall should flush all the chain rules and if possible set the default 
policy of all chains ACCEPT, effectively disabling the firewall even if the 
Custom Script sets it to DROP/REJECT.

Thanks,
Norbert

Original issue reported on code.google.com by nrbrt.c...@gmail.com on 8 Oct 2011 at 5:27

GoogleCodeExporter commented 9 years ago
Hello, DroidWall was designed to not interfere with other applications that use 
iptables (or at least attempt to). This is why it uses RETURN rather than 
accept.

The chains that are automatically purged by DroidWall are described in the 
CustomScripts wiki.

I will add support for a "on disable" Custom Script soon to fill this "gap" 
disabling the Firewall ;)

Original comment by rodrigo...@gmail.com on 10 Oct 2011 at 12:33