Repository files navigation

Your Privacy, Your Control - AFWall+ gives you complete control over which apps can access the internet on your Android device.

AFWall+ is developed and maintained by volunteers. If you find it useful, please consider supporting the project:

Why donate? AFWall+ is free and open-source. Your support helps:

• Continue development and add new features
• Fix bugs and keep the app stable
• Support more Android versions and devices
• Maintain documentation and help the community

Donation options:

• PayPal:
• Google Play: Purchase theunlocker key for extra features
• Amazon Gift Cards:cumakt+amazon at gmail.com (not preferred)
• Bitcoin:bc1q54nf3y9zmdcpasxx9sywkprd6309rfhav3mape
• Ethereum:0x5e65649C2B26eD816fCeD25a8E507C90D4b1D697

After donating, please send your receipt tocontact@portgenix.com to receive an unlocker. Please allow 1-2 days for a response.

• Star this repository
• Report bugs and test new features
• Contribute translations onCrowdin
• Improve documentation
• Help other users in forums

AFWall+ (Android Firewall+) is a powerful, open-source firewall application for rooted Android devices. Built on Linux's robustiptables framework, AFWall+ providesgranular network control at the system level - something impossible with standard Android permissions.

• Block unwanted network access by apps, even if they have internet permission
• Prevent data leaks and unauthorized background connections
• Monitor network activity with comprehensive logging
• Save battery and data by controlling which apps can connect
• Enhance privacy by blocking tracking and analytics

AFWall+ operates at the Linux kernel level usingiptables rules to:

1. Intercept all network requests before they leave your device
2. Apply custom firewall rules based on your preferences
3. Allow or block connections per app, per network type (WiFi, mobile, VPN)
4. Log blocked attempts for monitoring and analysis

This approach is much more powerful than app-level solutions because it works regardless of how apps try to connect to the internet.

Release Notes: Check thechangelog for what's new in each version.

• Per-app network rules: Allow or block individual apps
• Network type filtering: Different rules for WiFi, mobile data, VPN, tethering
• IPv4 & IPv6 support
• Custom rule scripting for advanced users

• Clean, intuitive interface
• Quick search and filtering
• Bulk operations for multiple apps
• Profile management for different rule sets

• Real-time network monitoring
• Detailed connection logs
• Notification system for blocked attempts
• Export/import rules for backup or sharing

• Boot protection: Apply rules before apps start
• Startup delay management
• Multi-user support
• Tasker/Locale integration for automation
• Password protection
• Tor and VPN detection

• Mobile Data (3G/4G/5G), including roaming detection
• WiFi (home, work, public hotspots)
• VPN (all types and providers)
• Tethering (WiFi hotspot, USB, Bluetooth)
• Tor (onion routing support)
• LAN (local network access)

• Android versions: 5.0 (API 21) to 14+ (actively maintained)
  • Legacy support: Android 4.x (version 2.9.9), Android 2.x (version 1.3.4.1)
• Root access: Required (Magisk, SuperSU, LineageOS su)
• Architectures: ARM, ARM64, x86, x86_64
• Storage: ~15MB app + ~5MB for binaries

• Magisk (recommended)
• LineageOS built-in su
• SuperSU (legacy)
• KingRoot (not recommended)

• Requires root access (no root = no functionality)
• Not an antivirus (doesn't scan files for malware)
• Not an ad-blocker (blocks network access, not ads within allowed connections)
• VPN conflicts: Some VPN apps may interfere with firewall rules
• System-level apps: Some system processes may bypass rules if they have root access

# Verify root accesssu -c"id"# Should return: uid=0(root) gid=0(root)

• Install AFWall+ from your preferred source
• Grant root permission when prompted
• Enable the firewall on the main screen

1. Enable the firewall (toggle the main switch)
2. Configure apps (tap apps to allow WiFi or mobile data)
3. Apply rules (tap the apply button)
4. Test connectivity (verify apps work as expected)

• Boot startup delay: Prevents rule conflicts during boot
• Notification settings: Control alert behavior
• Log settings: Enable if you want connection monitoring

AFWall+ supports custom iptables rules for advanced users:

# Example: Allow specific IP range-A afwall-wifi -d 192.168.1.0/24 -j ACCEPT# Example: Block specific port-A afwall -p tcp --dport 443 -j REJECT

Create different rule sets for different scenarios:

• Home: Relaxed rules for trusted network
• Work: Restrictive rules for corporate network
• Public: Maximum security for public WiFi
• Travel: Balanced rules for mobile use

• Packet logging: Uses nflog for detailed connection tracking
• Log rotation: Automatic cleanup of old logs
• Export options: Save logs for external analysis

AFWall+ is available in40+ languages thanks to our community translators:

🇺🇸 English • 🇪🇸 Español • 🇫🇷 Français • 🇩🇪 Deutsch • 🇮🇹 Italiano • 🇷🇺 Русский • 🇨🇳 中文 • 🇯🇵 日本語 • 🇰🇷 한국어 • 🇵🇹 Português • 🇳🇱 Nederlands • 🇵🇱 Polski • 🇹🇷 Türkçe • 🇸🇦 العربية • 🇮🇳 हिंदी • And many more!

Want to help translate? Join ourCrowdin translation project.

• Android SDK (API level 21+)
• Java 17+
• Git
• Android NDK (for native binaries)

git clone https://github.com/ukanth/afwall.gitcd afwall./gradlew clean assembleDebug

To compile iptables, busybox, and other native components:

# Requires Android NDKexport NDK=/opt/android-ndk-r25make -C external NDK=$NDK

afwall/├── app/src/main/java/dev/ukanth/ufirewall/│   ├── Api.java                    # Core iptables interface│   ├── MainActivity.java           # Main UI│   ├── InterfaceTracker.java       # Network state monitoring│   ├── util/BootRuleManager.java   # Boot rule application│   ├── service/                    # Background services│   ├── broadcast/                  # System event receivers│   └── log/                        # Logging subsystem├── app/src/main/res/raw/           # Native binaries (iptables, busybox)├── external/                       # Native binary sources└── scripts/                        # Build scripts

# Run lint checks./gradlew lint# Run unit tests./gradlewtest# Install debug build./gradlew installDebug

We welcome contributions! Here's how you can help:

• Checkexisting issues first
• Follow ourbug report guide
• Include device info, Android version, and logs

• Open an issue with the "enhancement" label
• Describe the use case and expected behavior
• Consider if it fits AFWall+'s scope and philosophy

# Standard GitHub workflow1. Fork the repository2. Create a feature branch: git checkout -b feature-name3. Make your changes andtest thoroughly4. Submit a pull request with a clear description

• Join ourCrowdin project
• No technical knowledge required
• Help make AFWall+ accessible worldwide

• XDA Thread:Official community discussion
• GitHub Issues: Technical problems and feature requests
• Wiki:Comprehensive documentation

Before reporting issues, check ourFAQ for common solutions.

1. Check the FAQ and wiki
2. Search existing GitHub issues
3. Ask on XDA forums
4. Create a new GitHub issue (last resort)

AFWall+ uses a layered architecture:

1. UI Layer: Android activities and fragments for user interaction
2. Service Layer: Background services for rule application and monitoring
3. Core Layer: iptables rule generation and management
4. System Layer: Native binaries and root shell interface

• BootRuleManager: Robust boot-time rule application with race condition prevention
• InterfaceTracker: Network interface monitoring and change detection
• Api.java: Central iptables command generation and execution
• FirewallService: Background service for continuous monitoring
• LogService: Network packet logging and analysis

• Broadcast Receivers: Monitor system events (boot, network changes, app installs)
• Content Providers: Share configuration data securely
• Notification System: User alerts for blocked connections
• Quick Settings Tile: Fast firewall toggle (Android 7+)

AFWall+ builds upon the work of many open-source projects and contributors:

• Original concept: Derived fromDroidWall by Rodrigo Rosauro
• Current maintainer:Umakanthan Chandran

Thanks to all contributors who have helped improve AFWall+ over the years!

AFWall+ is released under theGNU General Public License v3.0.

Copyright (C) 2009-2011 Rodrigo Zechin RosauroCopyright (C) 2011-2024 Umakanthan ChandranThis program is free software: you can redistribute it and/or modifyit under the terms of the GNU General Public License as published bythe Free Software Foundation, either version 3 of the License, or(at your option) any later version.This program is distributed in the hope that it will be useful,but WITHOUT ANY WARRANTY; without even the implied warranty ofMERCHANTABILITY or FITNESS FOR A PARTICULAR PURPOSE. See theGNU General Public License for more details.

Full license text: See theLICENSE file orgnu.org/licenses/gpl-3.0

Made with ❤️ for Android privacy and security
AFWall+ - Your Network, Your Rules