COMPATIBILITY


Compatibility

The only way to build a no-root firewall on Android is to use the Android VPN service. Android doesn't allow chaining of VPN services, so you cannot use PROTECTDATA together with other VPN based applications. See also this FAQ.

PROTECTDATA can be used on rooted devices too and even offers more features than most root firewalls.

Some Android versions, especially Samsung's Android versions, have a buggy VPN implementation, which results in Android refusing to start the VPN service in certain circumstances, like when there is no internet connectivity yet (when starting up your device) or when incorrectly requiring manual approval of the VPN service again (when starting up your device). PROTECTDATA will try to workaround this and remove the error message when it succeeds, else you are out of luck.

Some LineageOS versions have a broken Android VPN implementation, causing all traffic to be blocked, please see this FAQ for more information.

PROTECTDATA is not supported for apps installed in a work profile or in a Secure Folder (Samsung) because the Android VPN service too often does not work correctly in this situation, which can't be fixed by PROTECTDATA.

Filtering mode cannot be used on CopperheadOS.

PROTECTDATA will not work or crash when the package com.android.vpndialogs has been removed or otherwise is unavailable. Removing this package is possible with root permissions only. If you disable this package, you can enable it with this command again:

adb shell pm enable --user 0 com.android.vpndialogs

PROTECTDATA is supported for phones and tablets only, so not for other device types like on a television or in a car.

Android does not allow incoming connections (not the same as incoming traffic) and the Android VPN service has no support for this either. Therefore managing incoming connections for servers running on your device is not supported.

Wi-Fi or IP calling will not work if your provider uses IPsec to encrypt your phone calls, SMS messages and/or MMS messages, unless there was made an exception in PROTECTDATA for your provider (currently for T-Mobile and Verizon). I am happy to add exceptions for other providers, but I need the MCC codes, MNC codes and IP address ranges your provider is using. As an alternative you can enable the option 'Disable on call', which is available since version 2.113.

Popular posts from this blog

PROTECTDATA FAQs

Image
  PROTECTDATA Please scroll down if you want to ask a question answered, or report a bug. Frequently Asked Questions (FAQ) (0) How do I use PROTECTDATA? Enable the PROTECTDATA firewall using the switch in PROTECTDATA's action bar Allow (greenish*) or deny (reddish*) Wi-Fi or mobile internet access using the icons next to an application name in PROTECTDATA's applications list You can use Settings > Defaults to change from block/blacklist mode (disable Block Wi-Fi and Block mobile , and then block unwanted applications in PROTECTDATA's applications list) to allow/whitelist mode (enable Block Wi-Fi and Block mobile , and then allow desired applications in PROTECTDATA's applications list). * Depending on the theme you use, the icons may be: Allowed (internet access permitted): green/ blue / purple / grayblue / peach / greenish Blocked (internet access denied): blood red/  salmon / brown / light gold / beige / teal (1) Can PROTECTDATA completely protect my ...
Read more

How to read the block traffic logs

Image
  How to read the blocked traffic log? The columns have the following meanings: Time (tap on a log entry to see the date) Application icon (tap on a log entry to see the application name) Application UID Wi-Fi / mobile connection, green=allowed, red=blocked Interactive state (screen on or off) Protocol (see below) and packet flags (see below) Source and destination port (tap on a log entry to lookup a destination port) Source and destination IPv4 or IPv6 address (tap on a log entry to lookup a destination IP address) Organization name owning the IP address (needs to be enabled via the menu) Protocols: HOPO ( IPv6 Hop-by-Hop Option ) ICMP IGMP ESP (IPSec) TCP UDP Number = one of the protocols in this list 4 = IPv4 6 = IPv6 Packet flags: S = SYN A = ACK P = PSH F = FIN R = RST For a detailed explanation see here . Only TCP, UDP, and ICMP ping traffic can be routed through the Android VPN service. All other traffic will be dropped and will be shown as blocked in the global tra...
Read more