mirror
/
NetGuard
mirror of https://github.com/M66B/NetGuard.git
1
0
Fork 0
Code Issues Releases Wiki Activity

Many enhancements 

Hope you are doing well Marcel.  BTW, I sent you an email...
This commit is contained in:
Gitoffthelawn 2017-06-02 00:28:56 -07:00 committed by GitHub
parent 83fe810eab
commit 3c8e7d3b3d
1 changed files with 50 additions and 51 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

101
FAQ.md
View File

@ -12,7 +12,7 @@ Frequently Asked Questions (FAQ)
* Enable the firewall using the switch in the action bar
* Allow (greenish) or deny (reddish) Wi-Fi or mobile internet access using the icons next to an application
You can use the settings menu to change from blacklist mode (allow all in *Settings* but block unwanted applications in list) to whitelist mode (block all in *Settings* but allow favorite applications in list).
You can use the *Settings* menu to change from blacklist mode (allow all in *Settings* but block unwanted applications in list) to whitelist mode (block all in *Settings* but allow favorite applications in list).
* Red/orange/yellow/amber = internet access denied
* Teal/blue/purple/grey = internet access allowed
@ -24,13 +24,13 @@ No - nothing can completely protect your privacy.
NetGuard will do its best, but it is limited by the fact it must use the VPN service.
This is the trade-off required to make a firewall which does not require root access.
The firewall can only start when Android "allows" it to start,
so it will not offer protection during early boot-up (although your network may not be loaded at that time).
It will, however, be much better than nothing, especially if you are not rebooting often.
so it will not offer protection during early boot-up (although you can disable your network before rebooting).
It will, however, be much better than nothing.
Android N will allow NetGuard to be an [Always-On VPN](https://developer.android.com/preview/features/afw.html#always-on-vpn).
Android N allows NetGuard to be an [Always-On VPN](https://developer.android.com/preview/features/afw.html#always-on-vpn).
If you want to protect yourself more, you can (at least in theory) disable Wi-Fi and mobile data before rebooting,
and only enable them on reboot, after the firewall service has started (and the small key icon is visible in the status bar).
To protect yourself more, remember to disable Wi-Fi and mobile data before rebooting,
and only enable them on reboot, after the firewall service has started (and the key icon is visible in the status bar).
Thanks @[pulser](https://github.com/pulser/)
@ -53,14 +53,14 @@ which was added in Android 4.0.
<a name="FAQ4"></a>
**(4) Will NetGuard use extra battery power?**
If you didn't enable IP filtering, probably not.
However, the network speed graph notification will use extra battery power.
This is why the notification is shown only when the screen is on.
You can decrease the update frequency using the settings to reduce the battery usage.
If you don't enable IP filtering or the network speed graph notification, probably not.
The battery usage when IP filtering is enabled depends on the quality of your Android VPN service implementation and the efficiency of the CPU of your device.
Generally the battery usage on older devices might be unacceptable and hardly noticeable on modern devices with an efficient CPU.
Generally the battery usage on older devices might be unacceptable, yet hardly noticeable on modern devices with an efficient CPU.
The network speed graph notification will use extra battery power.
This is why the notification is shown only when the screen is on.
You can decrease the update frequency using the settings to reduce the battery usage.
Note that Android often (incorrectly) contribute battery usage of other applications to NetGuard,
because the network traffic of other applications is flowing through NetGuard.
@ -70,11 +70,11 @@ because the network traffic of other applications is flowing through NetGuard.
No, depending on the mode of operation basically one of two things will happen with your internet traffic:
* When IP filtering is disabled, blocked internet traffic will be routed into the local VPN which will operate as sinkhole (in effect dropping all blocked traffic)
* When IP filtering is enabled, both blocked and allowed internet traffic will be routed into the local VPN and only allowed traffic will be forwarded to the intended destination (so not to a VPN server)
* When IP filtering is disabled, blocked internet traffic will be routed into the local VPN which will operate as a sinkhole (in effect dropping all blocked traffic)
* When IP filtering is enabled, both blocked and allowed internet traffic will be routed into the local VPN and only allowed traffic will be forwarded to the intended destination (and not to a VPN server)
The [Android VPN service](http://developer.android.com/reference/android/net/VpnService.html) is being used to locally route all internet traffic to NetGuard so no root is required to build a firewall application.
NetGuard is unlike all other no-root firewalls applications 100% open source, so when you are in doubt you can check [the source code](https://github.com/M66B/NetGuard/) yourself.
The [Android VPN service](http://developer.android.com/reference/android/net/VpnService.html) is being used to locally route all internet traffic to NetGuard so no root is required to build this firewall application.
NetGuard, unlike all other no-root firewalls applications, is 100% open source, so when you are in doubt you can check [the source code](https://github.com/M66B/NetGuard/) yourself.
<a name="FAQ7"></a>
**(7) Why are applications without internet permission shown?**
@ -94,22 +94,22 @@ You need 3 packages (applications) enabled (use search in NetGuard to find them
Since the Google Play™ store app has a tendency to check for updates or even download them all by itself (even if no account is associated),
one can keep it in check by enabling "*Allow when device in use*" for all 3 of these packages.
Click on the down arrow on the left side of an application name and check that option,
but leave the network icons set to red (hence blocked).The little human icon will appear for those packages.
but leave the network icons set to red (hence blocked). The little human icon will appear for those packages.
Note that NetGuard does not require any Google service to be installed.
Note that NetGuard does *not* require any Google service to be installed.
<a name="FAQ9"></a>
**(9) Why is the VPN service being restarted?**
The VPN service will be restarted when you turn the screen on or off and when connectivity changes (Wi-Fi, mobile)
to apply the rules with the conditions '*Allow when screen is on*' and '*Block when roaming*'.
to apply the rules with the conditions *'Allow when screen is on'* and *'Block when roaming'*.
See [here](http://forum.xda-developers.com/showpost.php?p=65723629&postcount=1788) for more details.
<a name="FAQ10"></a>
**(10) Will you provide a Tasker plug-in?**
If disabling NetGuard is allowed to Tasker, any application can disabled NetGuard too.
No, because if Tasker is allowed to disable NetGuard, any application can disabled NetGuard.
Allowing to disable a security application from other applications is not a good idea.
<a name="FAQ13"></a>
@ -122,8 +122,8 @@ Allowing to disable a security application from other applications is not a good
* the **App Notifications** screen and you can toggle the '*Block*' slider to on
Note that, whether or not you get a dialog warning to agree upon,
this operation will disable any information or warning notifications from NetGuard as well,
like the new application installed notification.
this operation will also disable any information or warning notifications from NetGuard,
such as the new application installed notification.
To read about the need for the notification in the first place, see [question 24](#FAQ24).
@ -134,7 +134,7 @@ This notification can unfortunately not be removed.
**(14) Why can't I select OK to approve the VPN connection request?**
There might be another (invisible) application on top of the VPN connection request dialog.
Some known (screen dimming) applications which can cause this are *Lux Brightness*, *Night Mode* and *Twilight*.
Some known (screen dimming) applications which can cause this are *Lux Brightness*, *Night Mode*, and *Twilight*.
To avoid this problem, at least temporary, close all applications and/or services which may be running in the background.
<a name="FAQ15"></a>
@ -153,23 +153,23 @@ Disabled applications and applications without internet permission are shown dim
<a name="FAQ17"></a>
**(17) Why is NetGuard using so much memory?**
It isn't, NetGuard doesn't allocate any memory, except a little for displaying the user interface elements.
It appeared that on some Android variants the Google Play™ store app connection, using almost 150 MB and needed for in-app donations,
is incorrectly attributed to NetGuard instead to the Google Play™ store app.
It isn't. NetGuard doesn't allocate any memory, except a little for displaying the user interface elements.
It appears, on some Android variants, that the Google Play™ store app connection uses almost 150 MB. It is needed for in-app donations,
and is incorrectly attributed to NetGuard instead to the Google Play™ store app.
<a name="FAQ18"></a>
**(18) Why can't I find NetGuard in the Google Play™ store app?**
NetGuard requires at least Android 4.0, so it is not available in the Google Play™ store app for devices running older Android versions.
NetGuard requires at least Android 4.0, so it is not available in the Google Play™ store app on devices running prior Android versions.
<a name="FAQ19"></a>
**(19) Why does application XYZ still have internet access?**
If you block internet access for an application, there is no way around it.
However, applications could access the internet through other (system) applications.
Google Play services is handling incoming push messages for most applications for example.
For example, Google Play services handles incoming push messages for most applications.
You can prevent this by blocking internet access for the other application as well.
This can best be diagnosed by checking the global access log (three dot menu, Show log).
This can best be diagnosed by checking the global access log (three dot menu, *Show log*).
Note that some applications keep trying to access the internet, which is done by sending a connection request packet.
This packet goes into the VPN sinkhole when internet access for the application is blocked.
@ -181,7 +181,7 @@ and will be visible in the speed graph notification as well.
No. [Greenifying](https://play.google.com/store/apps/details?id=com.oasisfeng.greenify)
or otherwise hibernating NetGuard will result in rules not being applied
when connectivity changes from Wi-Fi/mobile, screen on/off and roaming/not roaming.
when connectivity changes from Wi-Fi/mobile, screen on/off, and roaming/not roaming.
<a name="FAQ21"></a>
**(21) Does doze mode affect NetGuard?**
@ -189,23 +189,23 @@ when connectivity changes from Wi-Fi/mobile, screen on/off and roaming/not roami
I am not sure, because the [doze mode documentation](http://developer.android.com/training/monitoring-device-state/doze-standby.html)
is not clear if the [Android VPN service](http://developer.android.com/reference/android/net/VpnService.html) will be affected.
To be sure you can disable battery optimizations for NetGuard manually like this:
To be sure, you can disable battery optimizations for NetGuard manually like this:
```
Android settings > Battery > three dot menu > Battery optimizations > Dropdown > All apps > NetGuard > Don't optimize > Done
```
This cannot be done from the application,
because according to Google NetGuard is [not an application type allowed to do this](http://developer.android.com/training/monitoring-device-state/doze-standby.html#whitelisting-cases).
because according to Google, NetGuard is [not an application type allowed to do this](http://developer.android.com/training/monitoring-device-state/doze-standby.html#whitelisting-cases).
<a name="FAQ22"></a>
**(22) Can I tether / use Wi-Fi calling while using NetGuard?**
Yes, but this needs to be enabled in the settings.
If it works depends on your Android version,
because some Android versions have a bug preventing tethering and the VPN service to work together.
Yes, but this needs to be enabled in NetGuard's settings.
Whether or not it works depends on your Android version
because some Android versions have a bug preventing tethering and the VPN service working together.
Some devices hibernate Wi-Fi preventing tethering to work when the screen is off.
Some devices hibernate Wi-Fi, preventing tethering from working when the screen is off.
This behavior can be disabled in the Android enhanced/advanced Wi-Fi settings.
<a name="FAQ24"></a>
@ -221,20 +221,20 @@ which should result in moving it to the bottom of the list.
The key icon and/or the VPN running notification,
which is shown by Android and not by NetGuard, can unfortunately not be removed.
The [Google documentation](http://developer.android.com/reference/android/net/VpnService.html) says:
"*A system-managed notification is shown during the lifetime of a VPN connection*".
The [Google documentation](http://developer.android.com/reference/android/net/VpnService.html) states:
*"A system-managed notification is shown during the lifetime of a VPN connection"*.
<a name="FAQ25"></a>
**(25) Can you add a 'select all'?**
**(25) Can you add a 'Select All' function?**
There is no need for a select all function,
because you can switch from black list to white list mode using the settings.
There is no need for a 'Select All' function
because you can switch from blacklist to whitelist mode using Netguard's settings.
See also [question 0](#FAQ0).
<a name="FAQ27"></a>
**(27) How do I read the blocked traffic log?**
The columns have the following meaning:
The columns have the following meanings:
1. Time (tap on a log entry to see the date)
1. Application icon (tap on a log entry to see the application name)
@ -317,9 +317,9 @@ These applications can only be allowed/blocked access to the internet as a group
<a name="FAQ32"></a>
**(32) Why is the battery/network usage of NetGuard so high?**
This is because Android contributes battery and network usage which is normally contributed to other applications
to NetGuard in IP filtering mode. The total battery usage is slightly higher when IP filtering mode is enabled.
IP filtering mode is always enabled on Android version before 5.0 and optionally enabled on later Android versions.
This is because Android counts battery and network usage which is normally counted for other applications
against NetGuard in IP filtering mode. The total battery usage is slightly higher when IP filtering mode is enabled.
IP filtering mode is always enabled on Android versions before 5.0, and optionally enabled on later Android versions.
<a name="FAQ33"></a>
**(33) Can you add profiles?**
@ -545,23 +545,22 @@ NetGuard connects to Amazon / [ipinfo.io](https://ipinfo.io/) to show to names a
If you don't want this, just disable showing names and organizations using the three dot menu in the global log view.
<a name="FAQ56"></a>
**(56) NetGuard allows all internet traffic!**
**(56) Why does NetGuard allows all internet traffic?!**
First of all, NetGuard can block each and every application, even system applications and components.
NetGuard by default allows all traffic to prevent hard to find problems,
so you need to selectively block traffic yourself by tapping on the mobile or Wi-Fi icons.
NetGuard by default allows all traffic to prevent hard to find problems. You need to selectively block traffic yourself by tapping on the mobile or Wi-Fi icons.
Be aware that NetGuard will allow traffic to an application when the screen is on and the condition 'when screen on' is enabled.
<a name="FAQ57"></a>
**(57) Why does NetGuard use so much data?**
Basically NetGuard doesn't use data itself.
However, a lot of Android versions incorrectly account data of other applications flowing through NetGuard to NetGuard instead of to the applications.
Basically, NetGuard doesn't use data itself.
However, many Android versions incorrectly account data of other applications flowing through NetGuard to NetGuard instead of to the applications.
The data usage of other applications will be zero with NetGuard enabled in this case.
tl;dr; the total data usage of your device will be the same with and without NetGuard.
The total data usage of your device will be the same with and without NetGuard.
<br />