Firewall
Allow connections to local network, onion and i2p sites
Allow connections in WiFi networks
Allow connections in GSM networks
Allow connections while roaming
Select all
Unselect all
You can use the InviZible firewall to allow or block Internet connections for applications. You can control Internet access for both user and system applications. But be careful when blocking the internet for system apps. Some of them are critical to the device.
In most cases, you should allow internet access for Internet connectivity check, Internet time servers, DNS (UID 1051), Multicast DNS (UID 1020), DNS Tether (UID 1052), NetworkStack (UID 1073). In some cases, you also need to allow internet access for System (UID 1000), Kernel, Root (UID 0). Otherwise, the internet will be blocked for the entire device.
If you have Google Play Services and want to receive messages from messengers like Telegram or Signal in time, you should also allow internet access for Google Play Services and possibly other Google system apps.
Some system applications can use each other's internet connection. Also, most user applications use the system Download Manager to download files. Therefore, when some application stops working with the firewall enabled, check if the connection is allowed not only for the selected application, but also for the required system applications. Feel free to experiment.
Green means the application is allowed to connect to the Internet, white means it is blocked.
The firewall only works when DNSCrypt and/or Tor are running.