c2c/af-wall
c2c/af-wall
2
0
Fork 0
Code Issues Pull requests Projects Releases 2 Packages Wiki Activity Actions

Repo created

Browse source
This commit is contained in:
Fr4nz D13trich 2025-11-20 14:05:38 +01:00
parent 51cf8bb4f9
commit ee0cddf35c
548 changed files with 93129 additions and 2 deletions
Download patch file Download diff file Expand all files Collapse all files

78
app/src/main/assets/rules.json Normal file
View file

@ -0,0 +1,78 @@
{
"author": "ukanth",
"version": "1.0",
"rules": [
{
"name": "Allow Multicast DNS",
"desc": "DNS based service discovery",
"v4": {
"on": [
"-A afwall-wifi-fork -d 224.0.0.0/24 -j afwall-wifi-lan"
],
"off": [
"-D afwall-wifi-fork -d 224.0.0.0/24 -j afwall-wifi-lan"
]
},
"v6": {
"on": [
"-A afwall-wifi-fork -d ffx2::/16 -j afwall-wifi-lan"
],
"off": [
"-D afwall-wifi-fork -d ffx2::/16 -j afwall-wifi-lan"
]
}
},
{
"name": "Allow ICMP",
"desc": "To allow ICMP packets",
"v4": {
"on": [
"-A INPUT -p icmp -m icmp --icmp-type echo-reply -j ACCEPT",
"-A INPUT -p icmp -m icmp --icmp-type echo-request -j ACCEPT",
"-A INPUT -p icmp -m icmp --icmp-type destination-unreachable -j ACCEPT"
],
"off": [
"-D INPUT -p icmp -m icmp --icmp-type echo-reply -j ACCEPT",
"-D INPUT -p icmp -m icmp --icmp-type echo-request -j ACCEPT",
"-D INPUT -p icmp -m icmp --icmp-type destination-unreachable -j ACCEPT"
]
},
"v6": {
"on": [
"-A INPUT -p icmp -m icmp --icmp-type echo-reply -j ACCEPT",
"-A INPUT -p icmp -m icmp --icmp-type echo-request -j ACCEPT",
"-A INPUT -p icmp -m icmp --icmp-type destination-unreachable -j ACCEPT"
],
"off": [
"-D INPUT -p icmp -m icmp --icmp-type echo-reply -j ACCEPT",
"-D INPUT -p icmp -m icmp --icmp-type echo-request -j ACCEPT",
"-D INPUT -p icmp -m icmp --icmp-type destination-unreachable -j ACCEPT"
]
}
},
{
"name": "Allow Loopback Interface",
"desc": "Allow lo interface routing (mostly on samsung)",
"v4": {
"on": [
"-A INPUT -i lo -j ACCEPT",
"-A afwall -o lo -j ACCEPT"
],
"off": [
"-D INPUT -i lo -j ACCEPT",
"-D afwall -o lo -j ACCEPT"
]
},
"v6": {
"on": [
"-A INPUT -i lo -j ACCEPT",
"-A afwall -o lo -j ACCEPT"
],
"off": [
"-D INPUT -i lo -j ACCEPT",
"-D afwall -o lo -j ACCEPT"
]
}
}
]
}