How to install and use the AFWall + Android firewall

Do you know who your phone is communicating with? It doesn't just send and receive emails and texts like you think.

Research has shown that when not in use Android devices still contact Google about 900 times a day, most of the apps you install record information about your daily usage habits.

Firewalls can help you to overcome this problem, one of the best Android firewall apps is AFWall +.

What is AFWall +?

AFWall + is a free and source code firewall for rooted Android devices. It gives you full control over which applications can connect to the Internet and what connections they use. You can download AFWall + from Play Store.

When running for the first time, AFWall + will ask for root access. Without root, the firewall will not be able to function.

Manual AFWall +

Applications that need access to the Internet are displayed with icons on the left and the name on the right, with 3 empty columns in the middle. By default, these columns will be a list of LAN, Wi-Fi, and mobile networks. It allows you to choose the connection type for any application.

First, let's set some options to unlock the full features of AFWall +. To see all the options, click on the 3-dot icon in the right corner to open the main menu, click on Preferences and select it as you wish.

User interface options

To easily differentiate between core, system, and user applications, click Show filters . Select Show UID for apps to see a unique identifier for your app. By selecting Confirm AFWall + disable , the submenu also allows you to enable alerts if AFWall + is disabled as a security measure.

Regulation / Connection

Here, you can enable additional connection controls for roaming, LAN, VPN, tethering, and Tor by ticking each option. It's best not to change the iptables string settings unless you are familiar with them.

Log

Click Turn on log service . This option is useful when you want to check if AFWall + is working or if something is wrong. Click on Enable show toasts to receive a notification every time the connection is blocked.

Security

You can set a password, security code or fingerprint lock to prevent malicious applications or others from entering the firewall. Activate stealth mode to hide security codes when entering them and specify the maximum number of password attempts before the application locks itself.

Experiment

Experimental options will give you more precise control:

1. The startup delay will be useful when AFWall + is inactive after reboot.
2. During the boot process, some applications may upload data before AFWall + has established its rules. Select Fix startup data leak to allow AFWall + to block this issue.
3. If more than one person is using your device, select Enable multi-user support to enable AFWall + for other accounts.
4. Tools like Shelter will let you create a Sandbox app or run a clone version.
5. Select Dual apps support to enable connection control for clone apps other than the main version.
6. There are some apps that may require a LAN connection like Samba or AirDroid. Select Enable inbound connections if you have problems with the connection between the network and the device.

file

AFWall + allows you to configure with custom application connections for use in different scenarios. For example, you can set up a specific profile to use when tethering your device to use as a hotspot. In addition, you can configure settings to allow or block all applications when activated.

How to prevent Android apps from connecting to the Internet

On the main screen of AFWall +, you will see a few new features.

On the connection controls section, there is a filter option that allows you to view all applications or show only faulty, system, or user applications. This option is suitable for defining blocking policies and for troubleshooting.

In addition, the connection bar also shows controls such as roaming, VPN, Bluetooth or USB.

By default, AFWall + will block everything and allow only the apps you selected to use for the connection. However, you can easily toggle the Allow selected and Block selected options on and off by clicking on the three-line icon .

To allow an application to connect to the Internet, check all the connection boxes that you want to access.

How to enable the firewall

Once you've set a few rules, you can save and activate the Android firewall.

Select the three dots icon in the right corner, click Save> Enable firewall . You will receive a confirmation message that the firewall has been activated. This does not require reboot. You can change the settings at any time and click Apply to apply the rules.

Tool to solve application errors

AFWall + offers a variety of ways to manage apps beyond filters and options.

If you choose the three-line icon, you can choose to list your apps by name, date of installation or update, or by UID.

If you want to allow all applications to use only one type of connection or block all, click on the connection icon to menu as shown below, check here or uncheck to adjust connection status of applications. in column.

Click the circular settings icon at the bottom of the connection bar to reverse the status of all applications in all connected columns.

Another feature allows you to copy a configuration from one column to another.

What should be blocked?

So what should you block to keep the device working properly?

Depending on your needs, AFWall + can help you block everything except apps that have a 'good' reason to access the Internet like a web browser, email or messaging app. However, for everyday use this setting can seem a bit burdensome.

Most users should allow network access to Google Play services, downloads, media storage or Download managers.

David Pac

Update 08 January 2021