Firewall

Zanoshky

About this app

Firewall gives you full control over which apps can access the internet — and blocks trackers, ads, and fingerprinting services across your entire device. No root required.

Every app is blocked by default. You decide which ones get Wi-Fi access, mobile data access, or both. This includes system apps and manufacturer services from Xiaomi, Samsung, Huawei, and others.

HOW IT WORKS
Firewall creates a local VPN on your device. All network traffic passes through this VPN. Apps you haven't allowed are blocked — their traffic goes nowhere. Apps you allow bypass the VPN and connect normally. No data is collected, no traffic leaves your device, no external servers involved.

PER-APP FIREWALL
• Block all apps by default — whitelist only what you trust
• Separate Wi-Fi and mobile data toggles per app
• Block system apps and OEM bloatware (MIUI analytics, Samsung services, etc.)
• Filter apps by User / System with search
• Auto-start on boot — stays active after reboot

TRACKER & AD BLOCKING
• Blocks 130+ known tracker, ad, and fingerprinting domains out of the box
• Download community blocklists: Steven Black, Energized, AdGuard, OISD
• Add your own custom blocked domains
• Whitelist domains to prevent false positives
• Toggle tracker blocking on/off independently from the firewall

DNS OVER HTTPS
• Encrypt your DNS queries so your ISP can't see what sites you visit
• Choose your provider: Cloudflare, Google, or Quad9
• Blocked tracker domains get instant NXDOMAIN — never reach the internet
• Toggle DoH on/off independently

CONNECTION LOGS
• See every connection attempt in real time
• Shows destination IP, port, protocol, and domain name
• Color-coded: allowed (green), blocked (red), tracker (orange)
• Filter by app name or domain
• Auto-refreshes every 3 seconds

TRAFFIC STATS & CHARTS
• Global download and upload totals
• Blocked vs allowed pie chart
• Top apps by traffic bar chart
• Per-app traffic breakdown with byte counts
• All charts update live every 5 seconds

WHO IS THIS FOR
• Privacy-conscious users who want to stop apps from phoning home
• Anyone who wants to block ads and trackers system-wide without root
• Users who want encrypted DNS to prevent ISP snooping
• Parents who want to restrict internet access for specific apps
• Users on limited data plans who want to control which apps use data
• Anyone tired of bloatware connecting to the internet in the background

PERMISSIONS EXPLAINED
• VPN Service: Creates a local VPN to filter traffic and intercept DNS. No data is sent externally.
• Query All Packages: Needed to list all installed apps so you can control each one.
• Internet: Required for the VPN tunnel, DoH queries, and optional blocklist downloads.
• Boot Completed: Auto-starts the firewall after device reboot if it was enabled.
• Foreground Service: Keeps the firewall running reliably in the background.
• Notifications: Shows a persistent notification when the firewall is active.

No ads. No tracking. No analytics. No data collection. Free and open source.
Made by Marko Zanoški, free with love.

What’s new

Block internet for any app. No root. Control Wi-Fi & mobile data per app.