An application-level firewall? - Samsung Galaxy S9 Questions & Answers

Are there any mods or roms for the S9 that allow me to firewall apps? That is, allow me to set incoming and outgoing rules for each app? Similarly is there any way to modify the wifi so it will not be so promiscuous, that is, it won't look for networks I've seen before but will wait for the broadcast of all networks (even though this is slower, it gives better privacy)?

Checked Google Play for Firewall apps....?
https://play.google.com/store/apps/details?id=app.greyshirts.firewall

Related

Wifi use for email and Opera

Firstly I apologise if this has been answered already but I've tried searching and couldn't find an answer.
My email and internet works perfectly over a 3G connection but I spend a lot of my time travelling and so as not to incur high roaming charges I would like to be able to use a wifi connection for my email and internet. The problem is that even when I have a wifi connection both of these applications still try to use the 3G signal.
I expect I am probably missing something quite basic but I can't seem to work out how to make these applications use the wifi connection instead of 3G.
If someone could explain this to me I would be very grateful. If you can provide an idiots guide of step by step instructions that would be even better.
Thanks in advance for your help.
Matt
For email go into the account settings for each email account and under advanced server settings change the connection. on AT&T it defaults to Media Net. Change this to The Internet and this will allow it to use wifi if it is on.
I always set my Wi-Fi connections to connect to my Work network, and leave AT&T as The Internet. Then in the Connections settings, I switch the preferred networks for applications to access the internet between Work and The Internet depending on what I want to force the phone to use. Works for ALL applications that access the internet, not just email. For a long time I didn't even have an AT&T data plan, and that's how I forced my phone to use Wi-fi.
dalavar said:
For email go into the account settings for each email account and under advanced server settings change the connection. on AT&T it defaults to Media Net. Change this to The Internet and this will allow it to use wifi if it is on.
Click to expand...
Click to collapse
Thanks for the hint. But how can I change the preferred connection (e.g. wifi) using my hotmail-account for email? I can't find in the account-settings.
Any ideas are welcome!!!
Energy.RHODIUM.21907.Sense2.5.Cookie.Jul.01.7z
HTC TP2

Tasker/other solution to force WiFi calling only on certain WiFi SSIDs?

Hey all, got a quick automation question that I can't seem to work out on my own.
Specifically, I want my phone to use WiFi calling mode only when I am connected to certain networks, not, for instance, when I am on the ATT WiFi at Starbucks.
The default T-Mobile settings for the feature are little help, since they only allow generally to prefer cell over WiFi or the other way around. My instinct was to set it to use WiFi calling when the network was unavailable, then to use Tasker to disable cell radio features when connected to those networks, thereby forcing it into WiFi calling mode.
Problem is Tasker tells me that the radio feature is unavailable, and I'm rooted with Secure Settings installed. Anyone have any ideas?
Sent from my SGH-M919 using xda app-developers app
RC Cola said:
Hey all, got a quick automation question that I can't seem to work out on my own.
Specifically, I want my phone to use WiFi calling mode only when I am connected to certain networks, not, for instance, when I am on the ATT WiFi at Starbucks.
The default T-Mobile settings for the feature are little help, since they only allow generally to prefer cell over WiFi or the other way around. My instinct was to set it to use WiFi calling when the network was unavailable, then to use Tasker to disable cell radio features when connected to those networks, thereby forcing it into WiFi calling mode.
Problem is Tasker tells me that the radio feature is unavailable, and I'm rooted with Secure Settings installed. Anyone have any ideas?
Sent from my SGH-M919 using xda app-developers app
Click to expand...
Click to collapse
If you find something, I am interested as well. I have also let T-Mobile know that I would like this as a feature in Wifi Calling itself.
I was hoping that the Wifi Calling settings were exposed. So I could do, "if wifi SSID = blah, switch to Prefer Wifi calling, otherwise switch to Prefer Cell."

[Q] Very odd SSL issue

I'm experiencing a very odd issue with my Galaxy S3 on the Virgin Network. For some reason I can't go on any SSL enabled site no matter what browser I use and which website I go to. The most descriptive error message comes from firefox which says SSL received a record which exceeded the maximum permissible length. Oddly if I enable wifi or otherwise bypass the regular network (VPN etc.) everything works properly. SSL enabled apps like banking sites work with no issue.
I'm currently on the latest nightly of the Carbon Rom, though I've experienced it when I was on Cyanogenmod as well so I don't believe that it has anything to do with the rom itself. Any idea on what might be going on?
Ensure your APN settings are correct.
valunthar said:
I'm experiencing a very odd issue with my Galaxy S3 on the Virgin Network. For some reason I can't go on any SSL enabled site no matter what browser I use and which website I go to. The most descriptive error message comes from firefox which says SSL received a record which exceeded the maximum permissible length. Oddly if I enable wifi or otherwise bypass the regular network (VPN etc.) everything works properly. SSL enabled apps like banking sites work with no issue.
I'm currently on the latest nightly of the Carbon Rom, though I've experienced it when I was on Cyanogenmod as well so I don't believe that it has anything to do with the rom itself. Any idea on what might be going on?
Click to expand...
Click to collapse
Is your time and date set to automatic?
My APN settings are correct and my time and date are set to automatic.
After doing some more testing only certain SSL sites don't work which makes the whole situation even more murky. startpage.com doesn't work, but the login of tdcanadatrust does. This is really weird.
Are you in a public WiFi network or in an area with a lot of WiFi networks?
If in public WiFi: Someone may be trying to hack you by SSL strip or redirect you.( Which can be why a VPN works)
If there are many WiFi networks in range : Download WiFi Analyzer from Google play to check WiFi channels, and switch your WiFi router to a cleaner channel if needed.
(If there are a lot of WiFi networks all on the same "channel", it can cause common data loss,lag and congestion. )
Sometimes a VPN can fix the problems with congested wifi channels, but I'm not sure.
If none of these ideas apply, clear cookies and cache.
If that still doesn't work:
Settings > Security > Clear Stored Credentials.
This will clear your SLL certificates and VPN info saved on your device. It might help with your browser.
While the SSL strip idea is a valid point that I hadn't considered initially I don't think that's the issue because I rarely connect to unknown wifi networks when traveling, and I think that all certificates would come back invalid if somoene was pulling that instead of the hit and miss situation I'm currently experiencing.
The Wifi bit is what really gets me though since the sites that don't work on the cell network work perfectly when I'm on wifi with no other changes needed other than the change in the way the phone connects. I have tried clearing the browser's cache with no luck and I'm not able to clear the stored credentials as described as the option is greyed out for me.
I thought that it might have something to do with the cerficates themselves, something about the way the browser/phone accepts certs depending on connection method but I can't see any difference between working sites and non working sites other than a difference in certifying authority (GoDaddy vs Verisign for example)
Problem Solved
I'm bumping up this thread to bring attention to the fact that I've found the solution to the problem. The issue is not with the rom itself, but the proxy that Bell/Virgin insists on its users using. Clearing the proxy and port settings for the Bell APN found under mobile device settings fixes the issue nicely. Special thanks to Dream_Team over at this thread for finding the solution.
Makes me wonder why there's an HTTP only (port 80) proxy set by default in the APN settings when it's not needed to access the network..

[Q] Tandem LTE and Wifi

My issue is as follows:
I am not correctly receiving push notifications at work while I am on their wifi. I came to the conclusion they must have ports blocked to prevent this from happening. As a solution (without losing the perk of unlimited fast wifi while working :victory I thought I might route my data from certain apps through mobile while keeping most running through work's wifi. I'm using AWall+ to try and filter which apps use mobile data and which apps use wifi. I'm having issues trying to figure out exactly which apps to keep on mobile data so I can receive push notifications correctly. The main one I need to work correctly is Google Hangouts as I exclusively use it for texting. I've tried keeping the following apps on mobile data only and have not been successful yet, even with these apps routed through mobile data I still do not receive notifications until I disable WIFI all my notifications come through.
Google Backup Transport
Google Services Framework
Goggle Contacts Sync
Google Account Manager
Google Play Services
Hangouts
Which other apps/apk might be required to allow hangouts to be ran exclusively through mobile data?
or
Which other apps/apk are used in receiving push notifications, particularly GCM? (Google Cloud Messaging)
I'm on a T-Mobile Note 3 running Hyperdrive 7.1 with Leankernel.
Thank you in advance!
Setup a VPN on your home router.
Connect to VPN from your work wifi, on your Android.
No need to use mobile data
Exchange Services is required for Messages and any Email apps you might use. It might be the same for Hangouts. I'd give it a try.
While you're strictly on mobile data or your home wifi, I'd try disabling one service at a time (that seems related) and send some Hangouts messages to see which service you stopped prevents Hangouts from maintaining connectivity. It's a process but I'm sure one of them will do it.
trim81 said:
Setup a VPN on your home router.
Connect to VPN from your work wifi, on your Android.
No need to use mobile data
Click to expand...
Click to collapse
I may try to do this. This would require leving a computer on at home (as I have the crappiest router/ wifi hotspot known to man... ISP provided), I work overnight and the house is dark while I'm at work
ArchangelRenzoku said:
Exchange Services is required for Messages and any Email apps you might use. It might be the same for Hangouts. I'd give it a try.
While you're strictly on mobile data or your home wifi, I'd try disabling one service at a time (that seems related) and send some Hangouts messages to see which service you stopped prevents Hangouts from maintaining connectivity. It's a process but I'm sure one of them will do it.
Click to expand...
Click to collapse
I'll give that a shot and see if that will do the trick. I didn't even think of exchange services..
Still pushless....
Well come to find out.. the firewall app I was using was strictly to filter which apps CAN use Wi-Fi or LTE at any given time, not use them in tandem. As far as a VPN is concerned the Wi-Fi here at work is completely locked down.. DPI possibly but I can't get a VPN to run at all through whatever firewall/security they have set up. I work with Medical Documents.. I imagine their security is pretty tight....so I'm still having my same problem of no push on their Wi-Fi.
I'm still really at a loss for ways to do this, and I still can't seem to find much of anything about running tandem data connections, and routing traffic the traffic appropriately any other suggestions?

Wifi calling security???

I was just wondering...
I called AT&T tech support and they didn't understand what I was talking about, however they swore that this system is SECURE.
The H810 recently got the 21y update which makes it the second AT&T phone to get the Wifi calling option. Its a cool feature, but I WILL NOT do this on a public LAN. Here is why:
1) on a telephony network, a phone can not connect to another phone because they are on a sub-network that doesn't allow for multiple devices to communicate.
2) on a LAN network, I can samba share because the network is not set to the level of security as the phone network is.
3) I can Wireshark my network, find the VOIP data packets, string them together, & rebuild the audio file of the wifi calling conversation
4) Cain & Able has an auto tool that does this, but you have to know how to arp poison if there are firewalls.
How secure is this? As secure as the Wifi network you're on...
What are your thoughts?
Anyone willing to create a Youtube of this?
I am really busy & may not get the chance to do this for another month or so...
bigjohnman said:
I was just wondering...
I called AT&T tech support and they didn't understand what I was talking about, however they swore that this system is SECURE.
The H810 recently got the 21y update which makes it the second AT&T phone to get the Wifi calling option. Its a cool feature, but I WILL NOT do this on a public LAN. Here is why:
1) on a telephony network, a phone can not connect to another phone because they are on a sub-network that doesn't allow for multiple devices to communicate.
2) on a LAN network, I can samba share because the network is not set to the level of security as the phone network is.
3) I can Wireshark my network, find the VOIP data packets, string them together, & rebuild the audio file of the wifi calling conversation
4) Cain & Able has an auto tool that does this, but you have to know how to arp poison if there are firewalls.
How secure is this? As secure as the Wifi network you're on...
What are your thoughts?
Anyone willing to create a Youtube of this?
I am really busy & may not get the chance to do this for another month or so...
Click to expand...
Click to collapse
I'm fairly certain it uses IPsec, so I'm guessing it's secure.

Categories

Resources