Android security

Why does android not allow users to remove applications they don't need from there phone as well as include a Firewall? All O.S. such as Linux and Windows and Mac have build in firewalls ?

Android does include its own integral firewall service, it's just not user-accessible unless you're device is rooted. Otherwise, for most of us you simply go to the Play Store and install one of several firewall apps. For those residing in a nation that is excluded from Google's Play Store, you can manually install a firewall APK from reputed sources like Fdroid or APKMirror. In short, there are plenty of sources to add a firewall service, you just need to look around.

That is not a firewall. Windows and linux firewalls are user modifiable.

 

Why does android not allow the same capability ? A firewall is an integral part of the operating system especially for Android since it always has Cell radio active most of the time and WIFI almost as much.

 

Without going outside the normal Androidl operating system of Android can you tell me a firewall app on play store ? Rooting a phone brings it out of specifications with the manufacturer.

That is not a firewall. Windows and linux firewalls are user modifiable.

Why does android not allow the same capability ? A firewall is an integral part of the operating system especially for Android since it always has Cell radio active most of the time and WIFI almost as much.

.....

Learn to use the Settings menu that's in a firewall app to configure the app's accordingly. Simply installing an app and relying upon its default settings and options isn't optimal. Take advantage of the user modifiable options that are available.

But given you're apparently averse to rooting your device you do need to reset your expectations down a bit as far as being able to manage lower level system-functions. Your Android device is set up, by design, to be running with a restricted user account as the default. It's not at all like a Windows or a Linux PC were you're access to a admin/root account is a matter of the user during installation or after setup up. Expectations that Android is the same isn't helpful. Once you root an Android device, you don't have the option to toggle back and forth between user and admin/root accounts. When you do root it, you need to reflash with a stock ROM to return it back to an unrooted state (well, unless you use Magisk, a system-less, quasi-root process). If you want to reduce online exposure on your device, disable WiFi, disable mobile data, and disable Bluetooth when out in public. Base cellular is problem with any smartphone, that's connectivity between your device and the cellular networks that continuously permeate all around us and don't have to rely upon WiFi, nor mobile data, nor Bluetooth. Don't want that cellular service aspect? Don't use a mobile phone.

 

 

.....

 

Without going outside the normal Androidl operating system of Android can you tell me a firewall app on play store ? Rooting a phone brings it out of specifications with the manufacturer.

Outside the normal Android operating system? Not possible. Again, unless you're willing to root your device you can't expect it to be openly configurable with base, system-level processes. All the Android non-root firewall apps are essentially not actually firewall utilities, they just allow the user to restrict non-root processes. Just think it through, a non-root app, the typical app you'll install from Google's Play Store or a third-party repository like apkmirror.com, the APK also gets installed as a non-root app. It cannot magically become an app with system-level permissions. You want the ability to easily toggle between user and admin/root? Stick with a PC and stop using Android.

 

NetGuard is a good non-root 'firewall' app. It's Open Source so no corporate oversight and it is has an extensive number of options in its Settings menu (again within the restraints of any non-root firewall app).

https://play.google.com/store/apps/details?id=eu.faircode.netguard

A lot of people tout the NoRoot Firewall app but do take into consideration this app may or may not be abandoned (the last update was Jan. 2020) so its effectiveness (read its About this app) is dated.

 

But if you do want a more full-featured firewall app, you do need to root your device. That's unfortunately a requirement. A very good root-required app is AFWall+.

https://play.google.com/store/apps/details?id=dev.ukanth.ufirewall

Because it is a root app, it can tie itself into iptables (older devices)/nftables (newer devices), the already existing firewall service that's integral to the Android kernel. This allows AFWall+ to be functionally more in line with a Linux or PC firewall utility. Non-root firewall apps cannot access iptables/nftables, so that limits their functionality. They instead rely upon an internal VPN service (local as in only within the device, not an outward, online service) that acts more as just a content filtering service that can at least be highly configurable with other, also user-level apps.

 

 

 

 

 

 

 

 

You highlight my point that no firewall exists for a normal Android users without changing the accepted manufacturers accepted configuration or rooting.  A firewall should always be included with any operating system.

 

Netdefender is a malware filter. Firewall should be able to filter or prevent inbound or outbound ports an IP address and or ports.

 

You did not address the question of why applications that are  are not required by the user on the phone cannot be removed ? This is a simpler way to maintain security and is annoyance when an app is added to the phone.

You highlight my point that no firewall exists for a normal Android users without changing the accepted manufacturers accepted configuration or rooting.  A firewall should always be included with any operating system.

 

Netdefender is a malware filter. Firewall should be able to filter or prevent inbound or outbound ports an IP address and or ports.

 

You did not address the question of why applications that are  are not required by the user on the phone cannot be removed ? This is a simpler way to maintain security and is annoyance when an app is added to the phone.

 

What makes you think that any operating system should always include a firewall? Is that some unpublished rule in an obscure master document on software development? Please post your sources on this.

Really, if you have such serious and passionate dislike with Android that you need to make up fabricated gripes, it's time to switch to an iPhone. You're just making yourself frustrated and aggravated, for your own mental health stop using an Android device.

Every Operating system should have a Firewall because it is a necessary security in everyday operations of a computer. This is what I think but if anyone here has a computer like a Mac OS or windows or even Linux that think a firewall is not needed and have removed it let me know.

 

You have not answered the simple question about why some Apps cannot be removed from Android?

What apps, and if you're using a carrier the carrier provides the security.

And once again the firewall is included but not accessible on android it might be on custom roms but not android. Ask Google why they do not have the firewall accessible not here.

Once again you do not know what your talking about.

 

There is no firewall in Android. A Firewall allows a user to filter ingress and egress traffic based on ports or address. As I already stated Windows and MacOS have a firewall already built in to the OS. These firewalls are customizable by the user and to the user needs as to his communications needs. Example a user may want no communications from cellular service or WIFI during the period of 9:00 Pm to 7:00 AM. a firewall would be able to prevent any communications during that period.

 

 

 

A example of applications preinstalled on a phone that cannot be removed are Nearby device scanning, a non standard way of scanning and communicating with other devices, Smartthings framework, an application that change the mood of your device and associated device, Quick share connectivity, a app to share files with other devices.

 

None of these devices I want and cannot remove form the phone and although this is not the full list these involve communications with other network devices.

 

Below examples of firewall options that android does not provide.

The firewall on android - https://android.googlesource.com/platform/external/iptables/

Which is also on linux so if you built an android rom you could configure the firewall then.

Oh and I know what a firewall is it's kind of vital in Computer and Digital Forensics.

Cryptodan you think you can fool people reading this post but pushing a URL to various releases and they would think oooh yaah I have a firewall on my Android ?

 

How does displaying IP tables relate to a Windows firewall ?

 

How do you filter IP address or web site using Android ?

Quite easily with Adguard VPN/Adblocking.

I posted the link to iptables in android to prove that yes android does in fact have the kernel level iptables firewall included that an person knowledgeable of Linux/ Unix would quite simply understand and how your blanket statement that android doesn't have a firewall is down right misleading abd wrong.

Adguard VPN for Android



User and System wide blocking of advertisements and social networking site blocks.

Also if you see references to ipchains that's the predecessor of iptables the kernel level firewall and network filtering service fir Linux.

Edited by cryptodan, 18 May 2023 - 05:10 AM.

I know you didn't read about that application. A VPN has nothing to do with a firewall. A Ad blocker is for blocking advertisements that appear or inject on the screen. https://adguard.com/en/welcome.html

 

But feel free to show me how this VPN/ad blocker can block as an IP address 104.20.59.209 so no traffic enters the the Android device from that address. Then a demonstration an example of a port filter say port 80 so no traffic enters the android phone from that port.