NetGuard

NetGuard is a simple way to block access to the internet - no root required. Applications can individually be allowed or denied access via your Wi-Fi and/or mobile connection.

Blocking access to the internet can help:

• save your data allowance
• save your battery
• increase your privacy

Downloads:

• GitHub
• Play store (beta)
• F-Droid (unsupported)

Features

• No root required
• Simple to use
• Free of charge
• Open source
• No extra battery usage
• No calling home
• No tracking or analytics
• No ads
• IPv4/IPv6 TCP/UDP supported
• Block both system and user applications

NetGuard doesn't even require internet permission. NetGuard is possibly the first free and open source no-root firewall for Android.

Most of these features are the result of sending selected traffic to a sinkhole, instead of filtering all internet traffic. This means that advanced features, like address based filtering (needed for ad blocking), traffic logging and on demand configuration, are not possible. Routing selected traffic into a sinkhole relies on an API introduced in Android 5.0 (Lollipop), so older Android versions can unfortunately not be supported.

Usage

• Enable the firewall using the switch in the action bar
• Allow/deny WiFi/mobile internet access using the icons at the right side of the application list

Permissions

• ACCESS_NETWORK_STATE: to check if the device is connected to the internet through WiFi
• RECEIVE_BOOT_COMPLETED: to start the firewall when starting the device

Compatibility

Devices / ROMs with a broken VPN implementation:

• Samsung Galaxy A5 / Android 5.02 (all traffic blocked)

NetGuard will crash when the package com.android.vpndialogs has been removed.

Frequently Asked Questions (FAQ)

(1) Can NetGuard completely protect my privacy?

No - nothing can completely protect your privacy. NetGuard will do its best, but it is limited by the fact it must use the VPN service. This is the trade-off required to make a firewall which does not require root access. The firewall can only start when Android "allows" it to start, so it will not offer protection during early boot-up (although your network may not be loaded at that time). It will, however, be much better than nothing, especially if you are not rebooting often.

If you want to protect yourself more, you can (at least in theory) disable WiFi and mobile data before rebooting, and only enable them on reboot, after the firewall service has started (and the small key icon is visible in the status bar).

Thanks @pulser

(2) Can I use VPN applications while using NetGuard?

If the VPN application is using the VPN service, then no, because NetGuard needs to use this service, and Android allows only one application at a time to use this service.

(3) Can I use NetGuard on any Android version?

No, because the method addDisallowedApplication is being used, the minimum required Android version is 5.0 (Lollipop).

(4) Will NetGuard use extra battery power?

No, unlike most of the similar closed source alternatives.

(5) Can you add selective allowing/blocking applications/IP addresses?

Unfortunately this is not possible without using significant battery power and adding a lot of complex code to do network translation from OSI layer 3 to layer 4 (and thus implementing a TCP/IP stack), which will inevitably introduce bugs as well. This is how most (all?) other no root firewalls work. NetGuard is unique, because it doesn't implement a TCP/IP stack and is therefore both highly efficient and simple.

For more advanced use cases while not sacrificing battery usage, rooting and using a iptables based firewall, like AFWall+ might be a better option.

(6) Will NetGuard send my internet traffic to an external (VPN) server?

No, it even can't, because NetGuard has no internet permission.

Support

• Questions: please use this XDA-Developers forum thread
• Feature requests and bugs: please report an issue on GitHub

Please do not use GitHub for questions.

Contributing

Translations:

• Translations to other languages are welcomed
• Check if the language is supported by Android and find its locale
• Copy this file to the correct locale folder
• Translate the strings in the copied file and omit all lines with translatable="false"
• Create a pull request on GitHub for the new/updated translation

Please note that you agree to the license below by contributing, including the copyright.

License

GNU General Public License version 3

Copyright (c) 2015 Marcel Bokhorst (M66B)

All rights reserved

This file is part of NetGuard.

NetGuard is free software: you can redistribute it and/or modify it under the terms of the GNU General Public License as published by the Free Software Foundation, either version 3 of the License, or (at your discretion) any later version.

NetGuard is distributed in the hope that it will be useful, but WITHOUT ANY WARRANTY; without even the implied warranty of MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the GNU General Public License for more details.

You should have received a copy of the GNU General Public License along with NetGuard. If not, see http://www.gnu.org/licenses/.