# AFWall+ (Android Firewall+)
[](https://github.com/ukanth/afwall/actions) [](https://crowdin.net/project/afwall)    
> **Your Privacy, Your Control** - AFWall+ gives you complete control over which apps can access the internet on your Android device.
---
## ๐ Support AFWall+ Development
AFWall+ is developed and maintained by volunteers in their free time. If you find it useful, consider supporting the project:
### ๐ฐ **Making Donations**
**Why Donate?** AFWall+ is completely free and open-source. Your donations help:
- ๐ง **Continue development** - Fund new features and maintenance
- ๐ **Bug fixes and testing** - Keep the app stable and secure
- ๐ฑ **Device compatibility** - Support more Android versions and devices
- ๐ **Community support** - Help users and maintain documentation
**Donation Options:**
- **PayPal**: [](https://www.paypal.com/cgi-bin/webscr?cmd=_s-xclick&hosted_button_id=6E4VZTULRB8GU)
- **Google Play**: Purchase the [unlocker key](https://play.google.com/store/apps/details?id=dev.ukanth.ufirewall.donate) for additional features
- **Amazon Gift Cards**: `cumakt+amazon@gmail.com`
- **Bitcoin**: `bc1q54nf3y9zmdcpasxx9sywkprd6309rfhav3mape`
- **Ethereum**: `0x5e65649C2B26eD816fCeD25a8E507C90D4b1D697`
### ๐ **Other Ways to Help**
- โญ Star this repository
- ๐ Report bugs and test new features
- ๐ Contribute translations on [Crowdin](http://crowdin.net/project/afwall)
- ๐ Improve documentation
- ๐ฌ Help other users in forums
---
## ๐ฅ What is AFWall+?
**AFWall+ (Android Firewall+)** is a powerful, open-source firewall application for rooted Android devices. Built on Linux's robust `iptables` framework, AFWall+ provides **granular network control** at the system level - something impossible with standard Android permissions.
### ๐ฏ **Core Purpose**
- **Block unwanted network access** by apps, even when they have internet permission
- **Prevent data leaks** and unauthorized background connections
- **Monitor network activity** with comprehensive logging
- **Save battery and data** by controlling which apps can connect when
- **Enhance privacy** by blocking tracking and analytics
### ๐ก๏ธ **How It Works**
AFWall+ operates at the **Linux kernel level** using `iptables` rules to:
1. **Intercept all network requests** before they leave your device
2. **Apply custom firewall rules** based on your preferences
3. **Allow or block connections** per app, per network type (WiFi, mobile, VPN)
4. **Log blocked attempts** for monitoring and analysis
This approach is **far more powerful** than app-level solutions because it works regardless of how apps try to connect to the internet.
---
## ๐ฅ Download
๐ **Release Notes**: Check the [changelog](https://github.com/ukanth/afwall/blob/beta/Changelog.md) for what's new in each version.
---
## ๐ Key Features
### ๐ **Granular Control**
- **Per-app network rules** - Allow/block individual apps
- **Network type filtering** - Different rules for WiFi, mobile data, VPN, tethering
- **IPv4 & IPv6 support** - Complete protocol coverage
- **Custom rule scripting** - Advanced users can write custom iptables rules
### ๐๏ธ **User Experience**
- **Clean, intuitive interface** - Easy to understand app list with clear allow/block controls
- **Quick search & filtering** - Find apps instantly, sort by name, install date, or permissions
- **Bulk operations** - Enable/disable rules for multiple apps at once
- **Profile management** - Switch between different rule sets (home, work, travel)
### ๐ **Monitoring & Logging**
- **Real-time network monitoring** - See which apps are trying to connect
- **Detailed connection logs** - Track blocked attempts with timestamps and destinations
- **Notification system** - Get alerts for blocked connection attempts
- **Export/import rules** - Backup your configuration or share with others
### ๐ง **Advanced Features**
- **Boot protection** - Apply rules before apps start (prevents data leaks during startup)
- **Startup delay management** - Robust boot rule application with network change handling
- **Multi-user support** - Different profiles for different Android users
- **Tasker/Locale integration** - Automate firewall based on conditions
- **Password protection** - Secure your firewall settings
- **Tor and VPN detection** - Special handling for privacy networks
### ๐ **Network Types Supported**
- ๐ถ **Mobile Data** (3G/4G/5G) - including roaming detection
- ๐ก **WiFi** - home, work, public hotspots
- ๐ **VPN** - all VPN types and providers
- ๐ **Tethering** - WiFi hotspot, USB, Bluetooth
- ๐ง
**Tor** - onion routing support
- ๐ **LAN** - local network access
---
## ๐ System Requirements
### โ
**Compatibility**
- **Android versions**: 5.0 (API 21) to 14+ (actively maintained)
- Legacy support: Android 4.x (version 2.9.9), Android 2.x (version 1.3.4.1)
- **Root access**: Required (Magisk, SuperSU, LineageOS su)
- **Architectures**: ARM, ARM64, x86, x86_64
- **Storage**: ~15MB app + ~5MB for binaries
### ๐ง **Root Methods Supported**
- โ
**Magisk** (recommended)
- โ
**LineageOS built-in su**
- โ
**SuperSU** (legacy)
- โ
**KingRoot** (not recommended)
### ๐ซ **Limitations**
- **Requires root access** - No root = no functionality
- **Not an antivirus** - Doesn't scan files for malware
- **Not an ad-blocker** - Blocks network access, not ads within allowed connections
- **VPN conflicts** - Some VPN apps may interfere with firewall rules
- **System-level apps** - Some system processes may bypass rules if they have root access
---
## ๐ Quick Start Guide
### 1. **Pre-Installation**
```bash
# Verify root access
su -c "id"
# Should return: uid=0(root) gid=0(root)
```
### 2. **Installation**
- Install AFWall+ from your preferred source
- Grant root permission when prompted
- Enable firewall in main screen
### 3. **Basic Configuration**
1. **Enable the firewall** - Toggle the main switch
2. **Configure apps** - Tap apps to allow WiFi (green) or mobile data (orange)
3. **Apply rules** - Tap the apply button (firewall icon)
4. **Test connectivity** - Verify apps work as expected
### 4. **Essential Settings**
- **Boot startup delay**: Prevents rule conflicts during boot
- **Notification settings**: Control alert behavior
- **Log settings**: Enable if you want connection monitoring
---
## ๐ง Advanced Configuration
### ๐ **Custom Rules**
AFWall+ supports custom iptables rules for advanced users:
```bash
# Example: Allow specific IP range
-A afwall-wifi -d 192.168.1.0/24 -j ACCEPT
# Example: Block specific port
-A afwall -p tcp --dport 443 -j REJECT
```
### ๐ **Profiles**
Create different rule sets for different scenarios:
- **Home**: Relaxed rules for trusted network
- **Work**: Restrictive rules for corporate network
- **Public**: Maximum security for public WiFi
- **Travel**: Balanced rules for mobile use
### ๐ **Logging Configuration**
- **Packet logging**: Uses nflog for detailed connection tracking
- **Log rotation**: Automatic cleanup of old logs
- **Export options**: Save logs for external analysis
---
## ๐ Language Support
AFWall+ is available in **40+ languages** thanks to our community translators:
๐บ๐ธ English โข ๐ช๐ธ Espaรฑol โข ๐ซ๐ท Franรงais โข ๐ฉ๐ช Deutsch โข ๐ฎ๐น Italiano โข ๐ท๐บ ะ ัััะบะธะน โข ๐จ๐ณ ไธญๆ โข ๐ฏ๐ต ๆฅๆฌ่ช โข ๐ฐ๐ท ํ๊ตญ์ด โข ๐ต๐น Portuguรชs โข ๐ณ๐ฑ Nederlands โข ๐ต๐ฑ Polski โข ๐น๐ท Tรผrkรงe โข ๐ธ๐ฆ ุงูุนุฑุจูุฉ โข ๐ฎ๐ณ เคนเคฟเคเคฆเฅ โข And many more!
**Want to help translate?** Join our [Crowdin translation project](http://crowdin.net/project/afwall).
---
## ๐ ๏ธ Development
### ๐๏ธ **Building from Source**
#### **Prerequisites**
- Android SDK (API level 21+)
- Java 17+
- Git
- Android NDK (for native binaries)
#### **Quick Build**
```bash
git clone https://github.com/ukanth/afwall.git
cd afwall
./gradlew clean assembleDebug
```
#### **Native Binaries**
To compile iptables, busybox, and other native components:
```bash
# Requires Android NDK
export NDK=/opt/android-ndk-r25
make -C external NDK=$NDK
```
### ๐ **Project Structure**
```
afwall/
โโโ app/src/main/java/dev/ukanth/ufirewall/
โ โโโ Api.java # Core iptables interface
โ โโโ MainActivity.java # Main UI
โ โโโ InterfaceTracker.java # Network state monitoring
โ โโโ util/BootRuleManager.java # Boot rule application
โ โโโ service/ # Background services
โ โโโ broadcast/ # System event receivers
โ โโโ log/ # Logging subsystem
โโโ app/src/main/res/raw/ # Native binaries (iptables, busybox)
โโโ external/ # Native binary sources
โโโ scripts/ # Build scripts
```
### ๐งช **Testing**
```bash
# Run lint checks
./gradlew lint
# Run unit tests
./gradlew test
# Install debug build
./gradlew installDebug
```
---
## ๐ค Contributing
We welcome contributions! Here's how you can help:
### ๐ **Bug Reports**
- Check [existing issues](https://github.com/ukanth/afwall/issues) first
- Follow our [bug report guide](https://github.com/ukanth/afwall/wiki/HOWTO-Report-Bug)
- Include device info, Android version, and logs
### ๐ก **Feature Requests**
- Open an issue with the "enhancement" label
- Describe the use case and expected behavior
- Consider if it fits AFWall+'s scope and philosophy
### ๐จโ๐ป **Code Contributions**
```bash
# Standard GitHub workflow
1. Fork the repository
2. Create a feature branch: git checkout -b feature-name
3. Make your changes and test thoroughly
4. Submit a pull request with clear description
```
### ๐ **Translations**
- Join our [Crowdin project](http://crowdin.net/project/afwall)
- No technical knowledge required
- Help make AFWall+ accessible worldwide
---
## ๐ Community & Support
### ๐ฌ **Discussion Forums**
- **XDA Thread**: [Official community discussion](http://forum.xda-developers.com/showthread.php?t=1957231)
- **GitHub Issues**: Technical problems and feature requests
- **Wiki**: [Comprehensive documentation](https://github.com/ukanth/afwall/wiki)
### โ **Frequently Asked Questions**
Before reporting issues, check our [FAQ](https://github.com/ukanth/afwall/wiki/FAQ) for common solutions.
### ๐ **Getting Help**
1. Check the FAQ and wiki
2. Search existing GitHub issues
3. Ask on XDA forums
4. Create a new GitHub issue (last resort)
---
## ๐ Technical Details
### ๐ง **Architecture**
AFWall+ uses a **layered architecture**:
1. **UI Layer**: Android activities and fragments for user interaction
2. **Service Layer**: Background services for rule application and monitoring
3. **Core Layer**: iptables rule generation and management
4. **System Layer**: Native binaries and root shell interface
### ๐๏ธ **Key Components**
- **BootRuleManager**: Robust boot-time rule application with race condition prevention
- **InterfaceTracker**: Network interface monitoring and change detection
- **Api.java**: Central iptables command generation and execution
- **FirewallService**: Background service for continuous monitoring
- **LogService**: Network packet logging and analysis
### ๐ฑ **Android Integration**
- **Broadcast Receivers**: Monitor system events (boot, network changes, app installs)
- **Content Providers**: Share configuration data securely
- **Notification System**: User alerts for blocked connections
- **Quick Settings Tile**: Fast firewall toggle (Android 7+)
---
## ๐ Acknowledgements
AFWall+ builds upon the work of many open-source projects and contributors:
### ๐ **Origins**
- **Original concept**: Derived from [DroidWall](http://code.google.com/p/droidwall) by Rodrigo Rosauro
- **Current maintainer**: [Umakanthan Chandran](https://github.com/ukanth)
### ๐ **Libraries & Dependencies**
| Component | License | Purpose |
|-----------|---------|---------|
| [iptables](http://netfilter.org/projects/iptables/) | GPL v2 | Linux firewall framework |
| [BusyBox](http://www.busybox.net) | GPL v2 | Unix utilities |
| [libsuperuser](https://github.com/Chainfire/libsuperuser) | Apache 2.0 | Root access management |
| [libsu](https://github.com/topjohnwu/libsu) | Apache 2.0 | Modern root interface |
| [Material Dialogs](https://github.com/afollestad/material-dialogs) | MIT | UI components |
| [DBFlow](https://github.com/Raizlabs/DBFlow) | MIT | Database ORM |
| [PrettyTime](https://github.com/ocpsoft/prettytime) | Apache 2.0 | Human-readable timestamps |
### ๐ฅ **Contributors**
Thanks to all contributors who have helped improve AFWall+ over the years!
---
## ๐ License
AFWall+ is released under the **GNU General Public License v3.0**.
```
Copyright (C) 2009-2011 Rodrigo Zechin Rosauro
Copyright (C) 2011-2024 Umakanthan Chandran
This program is free software: you can redistribute it and/or modify
it under the terms of the GNU General Public License as published by
the Free Software Foundation, either version 3 of the License, or
(at your option) any later version.
This program is distributed in the hope that it will be useful,
but WITHOUT ANY WARRANTY; without even the implied warranty of
MERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See the
GNU General Public License for more details.
```
**Full license text**: [LICENSE](LICENSE) file or [gnu.org/licenses/gpl-3.0](https://www.gnu.org/licenses/gpl-3.0.html)
---
Made with โค๏ธ for Android privacy and security
AFWall+ - Your Network, Your Rules