Firewall gives you full control over which apps can access the internet — and blocks trackers, ads, and fingerprinting services across your entire device. No root required.

Every app is blocked by default. You decide which ones get Wi-Fi access, mobile data access, or both. This includes system apps and manufacturer services from Xiaomi, Samsung, Huawei, and others.

HOW IT WORKS
Firewall creates a local VPN on your device. All network traffic passes through this VPN. Apps you haven't allowed are blocked — their traffic goes nowhere. Apps you allow bypass the VPN and connect normally. No data is collected, no traffic leaves your device, no external servers involved.

PER-APP FIREWALL
• Block all apps by default — whitelist only what you trust
• Separate Wi-Fi and mobile data toggles per app
• Block system apps and OEM bloatware (MIUI analytics, Samsung services, etc.)
• Filter apps by User / System with search
• Auto-start on boot — stays active after reboot

TRACKER & AD BLOCKING
• Blocks 130+ known tracker, ad, and fingerprinting domains out of the box
• Download community blocklists: Steven Black, Energized, AdGuard, OISD
• Add your own custom blocked domains
• Whitelist domains to prevent false positives
• Toggle tracker blocking on/off independently from the firewall

DNS OVER HTTPS
• Encrypt your DNS queries so your ISP can't see what sites you visit
• Choose your provider: Cloudflare, Google, or Quad9
• Blocked tracker domains get instant NXDOMAIN — never reach the internet
• Toggle DoH on/off independently

CONNECTION LOGS
• See every connection attempt in real time
• Shows destination IP, port, protocol, and domain name
• Color-coded: allowed (green), blocked (red), tracker (orange)
• Filter by app name or domain
• Auto-refreshes every 3 seconds

TRAFFIC STATS & CHARTS
• Global download and upload totals
• Blocked vs allowed pie chart
• Top apps by traffic bar chart
• Per-app traffic breakdown with byte counts
• All charts update live every 5 seconds

WHO IS THIS FOR
• Privacy-conscious users who want to stop apps from phoning home
• Anyone who wants to block ads and trackers system-wide without root
• Users who want encrypted DNS to prevent ISP snooping
• Parents who want to restrict internet access for specific apps
• Users on limited data plans who want to control which apps use data
• Anyone tired of bloatware connecting to the internet in the background

PERMISSIONS EXPLAINED
• VPN Service: Creates a local VPN to filter traffic and intercept DNS. No data is sent externally.
• Query All Packages: Needed to list all installed apps so you can control each one.
• Internet: Required for the VPN tunnel, DoH queries, and optional blocklist downloads.
• Boot Completed: Auto-starts the firewall after device reboot if it was enabled.
• Foreground Service: Keeps the firewall running reliably in the background.
• Notifications: Shows a persistent notification when the firewall is active.

No ads. No tracking. No analytics. No data collection. Free and open source.
Made by Marko Zanoški, free with love.

Zanoshky

Additional Information