fineday009 / droidwall Goto Github PK

I've expected that all applications have access to MMS-AP enabled by default, 
because there no any possibility to set-up this in UI. 

But, to my surprise, i find out that MMS-AP and INTERNET-AP are combined to 
single UI element that u called: "3G". And when i wish to give access for some 
application to INTERNET-AP, it means, that this application simultaneously 
obtains access to MMS-AP. And this may not always be apparent and useful.

IMHO, MMS-AP access and INTERNET-AP access must be separated visually. So, u 
can keep "3G"-option for INTERNET-AP, and new "MMS" (for example) for MMS-AP 
access.

Sorry, for my bad english :)

What steps will reproduce the problem?
1.Install DroidWall 1.3.8 on Motorola Milestone 2.1
2.Launch application
3.Edit application blacklist/whitelist and click apply

What is the expected output? What do you see instead?
Expected output - settings applied
What actually happens - Exit code: 127, iptables: not found

What version of the product are you using? On what operating system?
Droidwall 1.3.8
Motorola Milestone 2.1 rooted

Please provide any additional information below.

What steps will reproduce the problem?
1.Select any item 
2.click menu
3.click apply rules

What is the expected output? What do you see instead?
No error

What version of the product are you using? On what operating system?
HTC Desire 2.1 update 1
Base 32.30.00.28u
Kernal 2.6.29.97da29ed

Please provide any additional information below.

What steps will reproduce the problem?
1. Launch droidwall
2. select white/blacklist
3. tick an item, apply rules
4. prompted wit SU Request (always allow)
5. 

What is the expected output? What do you see instead?

Pop up says: Could not acquire root access ..//.. make sure droid wall has
enough permissions to execute the "su" command.


What version of the product are you using? On what operating system?

v 1.3.7
htc hero 1.5
modaco rom


Please provide any additional information below.

What steps will reproduce the problem?
1. Have a rule set at boot (/system/etc/init.d/* script)
2. Boot phone and make sure rule is shown in "iptables -L -v -n"
3. Open Droid Wall
4. Enable (if not already) firewall
5. Disable firewall
6. Display current rules "iptables -L -v -n"

What is the expected output? What do you see instead?
I expect to have my custom rules still in effect.
Actual result is an empty rule set: my custom rules are no longer there.

What version of the product are you using? On what operating system?
1.3.8-dev, OpenDesire 3.5.2 (Android 2.2)

Please provide any additional information below.

Is is possible for Droid Wall to use custom targets instead of directly 
inserting rules in builtin targets? It would allow a more flexible way to 
disable only rules set by Droid Wall.
fail2ban (Linux software) does that:


# iptables -L -v -n
Chain INPUT (policy DROP 455 packets, 73559 bytes)
 pkts bytes target     prot opt in     out     source               destination
65227 5239K fail2ban-APACHE_OVERFLOW  all  --  *      *       0.0.0.0/0         
   0.0.0.0/0
65227 5239K fail2ban-APACHE_BADPATH_ACCESS  all  --  *      *       0.0.0.0/0   
         0.0.0.0/0
65225 5239K fail2ban-APACHE_AUTH  all  --  *      *       0.0.0.0/0            
0.0.0.0/0
65225 5239K fail2ban-SSH  all  --  *      *       0.0.0.0/0            0.0.0.0/0
65226 5239K fail2ban-APACHE_CONNECT  all  --  *      *       0.0.0.0/0          
  0.0.0.0/0

[...]

Chain fail2ban-APACHE_AUTH (1 references)
 pkts bytes target     prot opt in     out     source               destination
65225 5239K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain fail2ban-APACHE_BADPATH_ACCESS (1 references)
 pkts bytes target     prot opt in     out     source               destination
    2    96 DROP       all  --  *      *       218.38.34.18         0.0.0.0/0
65225 5239K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain fail2ban-APACHE_CONNECT (1 references)
 pkts bytes target     prot opt in     out     source               destination
65226 5239K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain fail2ban-APACHE_OVERFLOW (1 references)
 pkts bytes target     prot opt in     out     source               destination
65227 5239K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0

Chain fail2ban-SSH (1 references)
 pkts bytes target     prot opt in     out     source               destination
65225 5239K RETURN     all  --  *      *       0.0.0.0/0            0.0.0.0/0


Thanks

I have install droidwall on Android 2.2, it starts normally, shows me the 
software list. But when I click "Apply rules", it shows the error:
----------------
Error applying iptables rules. Exit code: 1
getsockopt for multiport failed strangely: Not such file or directory
getsockopt for multiport failed strangely: Not such file or directory
getsockopt for multiport failed strangely: Not such file or directory
getsockopt for multiport failed strangely: Not such file or directory
iptables: Protocol wrong type for socket
----------------
And "OK" button

After that in "Show rules" I see in OUTPUT:
getsockopt for multiport failed strangely: Not such file or directory
getsockopt for multiport failed strangely: Not such file or directory
getsockopt for multiport failed strangely: Not such file or directory

Where is the problem and how I can fix it?

It would be great if we could add custom rules :D

Like typical firewalls, allow blocking by port range, TCP/UDP instead of 
application.

Sometimes, I want to block a service.

Saving a configuration and being able to re-apply it when selecting from a
list.
It should be possible to save multiple profiles.

Enhancement request for a menu option in droidwall to view which programs
have been blocked when whitelisting is used.

This would make it easy to determine which programs need to be whitelisted,
and is easier to implement than the previous "confirm mode" (real-time
blocking notification) enhancement request.

This page has some good suggestions for logging the uid of the blocked packets:
http://superuser.com/questions/34782/with-linux-iptables-is-it-possible-to-log-t
he-process-command-name-that-initiate

Logging all the time might take up too many resources, so it's probably
best to use the "limit" module to severely limit the amount of logging, or
allow toggling of the logging mode in droidwall (i.e. a "training mode"
that can be enabled during a day of regular app usage, and then disabled
afterwards).

Thanks, this program is extremely useful

su is located in /data/bin for rooted archos. please make droidwall look in 
/data/bin for su program to work on this device.

thanks, program looks great,

I just found out about TaintDroid and it looks very interesting, but there are 
two problems: it's not available yet, and it requires installing a custom ROM.

So I searched some more and found DroidWall. If logging is enabled and the 
destination of blocked packets is recorded, that may amount to the most 
interesting part of TaintDroid's functionality - where do apps phone home?

If you install or remove applications, Droidwall won't (un)list them unless you 
reboot. A button to re-read the application list would be useful.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?


What version of the product are you using? On what operating system?


Please provide any additional information below.

Being able to execute the above mentioned actions on the list.

This is an enhancement request.
I'd like to propose a new mode, that adds along with blacklist and
whitelist: Confirm.
When droidwall is in this mode, it asks the user (with a popup) to let the
app use internet (of cource once per app, as soon as the app is open, and
again if the app is closed and opened again).

What steps will reproduce the problem?
1. install Enomther's 1.8.1 rom
2. install droidwall
3. run droidwall
4. set rules and apply

What is the expected output? What do you see instead?

Is expected to give no error, but it return an error message saying:

"getsocktopt for multiport failed strangely: No such file or directory"

What version of the product are you using? On what operating system?

1.3.6 version of droidwall on Enomther 1.8.1

What steps will reproduce the problem?
1.trying to apply the rules
2.
3.

What is the expected output? What do you see instead?
It should enable firwall, but, instead it says 
"Error applying iptables rules.
 Exit code: 127. 

iptables: not found"

What version of the product are you using? On what operating system?
the very last version on the market. android 1.6

Please provide any additional information below.
you could create your own iptable rules...
or at least tell me a way to create them

Would it be possible to add an option for a phone wide proxy, the proxy 
option in the settings is only for the browser

What steps will reproduce the problem?
1. Install 1.3.8 version on HTC Desire with rooted ROM
2. Launch the DroidWall
3. Select applications to block and click apply. 


What is the expected output? What do you see instead?
Expected results - Ok.
Actual result - Error applying iptables rules. Exit code: 1.
iptables: No chain/target/match by that name

What version of the product are you using? On what operating system?
Droid wall 1.3.8.
HTC Desire rooted ROM 2.1. 

Please provide any additional information below.

What steps will reproduce the problem?
1. Select any settings as desired.
2. Apply rules and start firewall; everything works fine by then.
3. Reboot

What is the expected output? What do you see instead?

Firewall is still active, but iptables rules is no set (empty list).
To restore the selected filtering, I have to hit "Apply rules".

What version of the product are you using? On what operating system?

Droid Wall v1.3.8-dev on HTC Desire running Android 2.2

Please provide any additional information below.

This might be due to Droid Wall not gaining root privilege on reboot, as 
suggested at
http://android.modaco.com/content/htc-hero-hero-modaco-com/299310/problem-with-d
roidwall-solved-solution-inside/#entry8
but the workaround given there wrt. Autostarts did not work for me
(at least when using Startup Manager instead of Autostarts).

Yet here is my workaround: add Droid Wall to the "Customize" list of Startup 
Manager.
In this way, after reboot, at least I do not forget to hit "Apply Rules".

What steps will reproduce the problem?
1.select the programs to be allowed
2.select apply rules
3.and select "always" as the permission dialogue pops out

What is the expected output? What do you see instead?
it says"Could not acquire root access. You need a rooted phone to run Droid
Wall. If this phone is already rooted, please make sure Droid Wall has
enough permissions to execute the "su" command."

What version of the product are you using? On what operating system?
I am using the latest version on Htc Hero

Please provide any additional information below.
I can be sure the root is required, and I have also tried v1.3 and v1.5,
and all failed. please help me out with this, I really need this awesome
app. Thanks a lot~

Tracy

What steps will reproduce the problem?
1. Install update (new version 1.4.1)
2. Click Enable firewall, Show rules, or Safe rule

What is the expected output? What do you see instead?
Even on rooted phone (where the previous version used to work fine)
sh: /data/data/com.googlecode.droidwall/cache/droidwall.sh: not found 

What version of the product are you using? On what operating system?
1.4.1. on HTC Desire with Froyo (yes, including iptables ;-))

Please provide any additional information below.
Actually, the file is present, and just contains "
exit 0
exit
"
(I cannot add an attachment here with the file contents; 
 the link "Attach a file" in this forum appears to be broken.)

Droidwall does not work with a rooted Epic 4G (Samsung Galaxy S)

There are several problems:

1) the stock /system/bin/sh shell does not support shell scripting! 
droidwall.sh fails on the first 'if' statement:
# sh droidwall.sh
[: not found
[: not found
[: not found
[: not found
--version: not found


2) droidwall does not generate rules for the 4G WiMax interface ("uwbr0" on 
this phone). A simple solution would be to apply the same rules to this 
interface as to the wifi interface, since sprint plans come with real unlimited 
4G (unlike the "unlimited" 3G that is really capped at 10GB/month). Or 
alternatively, apply the same rules to the 4G interface as to the 3G interface.

You can detect the existence of the WiMax interface when it's not loaded by 
grep'ing one of the following files:
/system/etc/dhcpcd/dhcpcd.conf:interface uwbr0
/system/bin/dhcpcd:uwbr0
/system/app/MobileAP.odex:dhcp.uwbr0.result
/system/etc/enable_uwbr.sh:iptables -t nat -D POSTROUTING -o uwbr0 -j MASQUERADE
/system/etc/initialize_nat.sh:iptables -t nat -D POSTROUTING -o uwbr0 -j 
MASQUERADE
/system/framework/framework.odex: /sys/class/net/uwbr0/statistics/

What steps will reproduce the problem?
1.open droidwall
2.set permissions 
3.apply rules 

What is the expected output? Applied sucessfully 
What do you see instead? Fails with errors 


What version of the product are you using? 
Nexus One
On what operating system? Android 2.2


Please provide any additional information below.

Can be possible create in GUI interface one option to configure the chain INPUT 
with default policy as DROP and ACCEPT only RELATED and ESTABLISHED connections?

This is actually a request for an enhancement, 
but I cannot how to set the type to "Enhancement" rather than "Defect".

Would be nice if one could tell which connections (by which app) have been 
blocked lately. 
For instance, it took me quite a while to figure out that application downloads 
with the Google Market only work when network access of the following three 
items/apps/IDs is enabled:
* 10041: Market
* 10021: Media Storage, DRM Protected Content Storage, Download Manager
* 10033: Talk
BTW, weird that sometimes several apps appear to share the same ID (e.g. 10021).

What steps will reproduce the problem?
1. Install Droidwall on my Acer Liquid
2. Apply the rules

What is the expected output? It should block the Wi-Fi and the GSM activities 
of a App

What do you see instead? App can download datas from the Internet (Wi-Fi and 
GSM)


What version of the product are you using? Droidwall v 1.3.7

On what operating system? Android Eclair 2.1 LCR 1.8.1 with patch 1


Hope for solving my problem :)

Lg

What steps will reproduce the problem?
1. setup whitelist mode on 2/3G iface
2. select some apps (Opera Mini, Dolphi Browser, GMaps)
3. aply rules
4. show rules (seem fine, UIDs are app_41, app_42, app_0 [because of 
GMaps])
5. reboot phone
6. run droidwall (selected apps are correct in GUI)
7. show rules

What is the expected output? 
same rules like in step 4 expected

What do you see instead?
all rules contain UID app_4294957295
(so none of selected apps has 2/3G access)

What version of the product are you using? On what operating system?
DroidWall 1.3.6, SuperD ROM v 1.10.2 RH-blk, T-mobile G1

Workaround:
Run droidwall after reboot and do "aply rules" manualy (it replaces wrong 
rules [app_4294957295] with correct rules).

Hi, this is not really an issue but I don't see another way to contact the
project owner.

I modified the source in order to make the interfaces independent (so it's
possible for applications to be permitted on WiFi but blocked on 2G/3G for
example, and others blocked or allowed on all interfaces, etc).

I also have a dirty fix for the fact that at least om my firmware (Android
1.6, RA 1.6.3) on Magic/MyTouch3G/Sapphire the rules are not applied on
boot (android.os.Process.getUidForName() fails).

Please let me know ( adrian.pasvante AT gmail.com ) if you're interested so
I can clean this up a bit and maybe put it on a branch.

Feel free to delete this issue after reading it. Thank you.

This post on the xda-developers forum 
(http://forum.xda-developers.com/showthread.php?p=4233576#post4233576) had an 
excellent idea: list somewhere the set of application IDs that shouldn't be 
blocked. I've updated that list below:

Market: Market (for search) "Media Storage, DRM Protected Content Storage, 
Download Manager" and "Calendar Sync Adapter, Google Services Framework, 
Contacts Sync Adapter" (for download)

Gmail: Gmail (only)

YouTube: YouTube (for searching), "Media Server" (for playback)

It would be easier to use the program if it only showed programs that had
the permission to access the Internet in the first place. Apart from that,
it's a great app!

Setting up rules for 2G/3G or WiFi interface only just doesn't work. Rules
for both interfaces work fine.

The problem is that in this device network interfaces named eth0 (wi-fi)
and pdp0 (3G) instead of tiwlan0 and rmnet0.

I've patched source with right names and the problem is gone, but it'll be
greate to fix this issue in the official release.

Thanx.

Click apply rules (black or white list) - get popup :
Error applying iptables rules.
Exit code 1

iptables: No chain/target/match by that name

> What steps will reproduce the problem?
1. Apply rules
2. Restart Milestone
3. Try if rules do work

> What is the expected output?

Permitted apps shoulde be able to connect as defined


> What do you see instead?

No network-access (either WLAN or mobile) does work for any app.


> What version of the product are you using?

v1.3.8-dev (latest from market)


> On what operating system?

Android 2.0.1 and 2.1!


I saw this probnlem already with 2.0.1 but was not sure if it is just a
problem of too much playing in the OS... ;) But now I installed 2.1 from
scratch but still the same problem.

As soon as my Milestone has booted completley and I apply the rules
manually, al is working as expected.


Best regards,
Robert


Please provide any additional information below.

It would be nice to log all blocked connection attempts in a log file on the SD 
card, so that it could be investigated what application wants to talk to which 
servers.

On January 24th, 2010 , Rogers forced an update due to a bug with 911 calls
crashing the phone if you have GPS on. To make certain everyone installed
the update, they cut off data access to everyone with an HTC dream or magic.

For anyone with an aftermarket firmware that cannot get the data back, even
after getting a "network reset", MAKE CERTAIN that you have disabled the
firewall while waiting for the refresh.

THIS IS NOT A DROIDWALL ISSUE, DROIDWALL is functioning exactly as
expected. But it also seems to block whatever initial registration
information the backend system requires to reregister your phone.

(I'm logging this here for posterity, I hope you don't mind)

What steps will reproduce the problem?
1. Install app on Motorola Milestone
2. Try to apply the rules

What is the expected output?
- Working firewall! :) 

What do you see instead?
- Errcode 127 - "iptables: not found"

What version of the product are you using?
- DroidWall 1.3.6

On what operating system?
- Android 2.0.1 on rooted Motorola Milestone

Trying trunk version I noticed that it is no simple way to allow unlimited
access for one of the interfaces. Checking all applications in list is a
lot of work and it must be done for each new one too.

So, it'll be very useful to have one checkbox top the list meaning "any
application".

I've try to use droidwall with Samsung Galaxy S I9000 (2.1) but get the 
following error when try to apply rules:

Error applying iptables rules.
[: not found
[: not found
[: not found
[: not found
-- version: not found

What steps will reproduce the problem?
1. Setup OpenVPN connection via UDP
2. Enable Firewall while whitelisting
3. Try to connect VPN network

What is the expected output? 
VPN client should connect. Probably affects any type of VPN connection.

What do you see instead?
Can't connect to VPN. System user 'vpn' not whitelisted - not listed in rules 
settings also. logcat dump attached.

What version of the product are you using? On what operating system?
Dream/G1 running CM-5.0.8, droidwall-1.3.8-dev (from Market).

Please provide any additional information below.
openvpn process runs as 'vpn' user. We can add VPN networking user like media 
server and root user - patch attached.

What steps will reproduce the problem?
1.Disabling firewall
2.Enabling firewall
3.Error

What is the expected output? What do you see instead?
For the firewall to work. I see Exit Code 1


What version of the product are you using? On what operating system?
Latest version on android 2.1 Droid Incredible


Please provide any additional information below.
Also have wireless tether installed.

What steps will reproduce the problem?
1.
2.
3.

What is the expected output? What do you see instead?
Need a rooted phone,but i have root access.

What version of the product are you using? On what operating system?
1.36,On HERO Android 1.5

Please provide any additional information below.

What steps will reproduce the problem?
1.I want work it in the emulator,but it need root access.
2.I dont know how can I get root access in the emulator.
3.If I get root access in the emulator,droidwall can work normally.

What steps will reproduce the problem?
applying any change or to the iptable rules or trying to list the rules via 
"show rules"

What is the expected output? What do you see instead?
Expected: rules are applied. Message: "Rules applied with success".
Actual: Rules are not applied. Message:
<Start Message>
Error applying iptable rules.
Exit code: 1

[: not found
[: not found
[: not found
[: not found
--version: not found
</Message>
What version of the product are you using? On what operating system?
1.4.1

Please provide any additional information below.
On Samsung's Galaxy S I9000 the generated script droidwall.sh fails since [ aka 
test is not available (neither as a shell built-in nore separatley).

Intermediate solution: install [ using busybox. 

What steps will reproduce the problem?
1.I have the root permission.
2.modify a rule
3.click "APPLY RULES"


What is the expected output? What do you see instead?

When I modified a rule and try to apply it,it shows"Error applying 
iptables rules. Exit code:1 no chains/target/match by that name"

What version of the product are you using? On what operating system?
droidwall_1.3.7    on HTC HERO , Android version is 1.5

Please provide any additional information below.

Even when the firewall is disabled, pushing the "Apply Rules" button activates 
it. 
Either disable "Apply Rules" in the disabled state, or change the "Enable 
Firewall" to "Disable Firewall" because applying the rules implicitly enables 
the firewall.

I'm not sure that this level of granularity is available from iptools, but the 
amount of data that passed thru the firewall for each application would be very 
handy, and would fit in well with the UI.

From the android api, per application data is not separated into wifi and 3G, 
nor are wifi and 3G apis separated into applications. Whilst is should be 
straightforward to poll both apis and figure out what belongs to what, it seems 
that the firewall is the place get the data directly from the os. 

Jake

What steps will reproduce the problem?
1. Trying to activate DroidWAll on Motorola ANDROID Phone
2. (iT USED TO WORK, BUT RECENTLY CEASED TO FUNCTION)
3.

What is the expected output? What do you see instead?
Product acticated for use.    I see NEED ROOTED PHONE
What version of the product are you using? On what operating system?
v1.3.6 - MOROTOLA ANDROID


Please provide any additional information below.
INSTUCTIONS RECOMMEND  ALLOWING PERMISSIONS FOR PROGRAM TO EXECUTE SU.  I 
DO NOT KNOW HOW TO DO THIS

What steps will reproduce the problem?
1. Try to install last version
2.
3.

logcat:
I/PackageParser(  542): Impliciting adding
android.permission.WRITE_EXTERNAL_STORAGE to old pkg com.googlecode.droidwall
I/PackageParser(  542): Impliciting adding
android.permission.READ_PHONE_STATE to old pkg com.googlecode.droidwall
E/PackageManager(  542): Package com.googlecode.droidwall signatures do not
match the previously installed version; ignoring!
W/PackageManager(  542): Package couldn't be installed in
/data/app/com.googlecode.droidwall.apk