[feature request] There should be an option to only allow trough tcp protocol for security reasons.

[llldannylll]

There are other protocols which are unwanted or dangerous.
I know udp already can be blocked, except ntp and dns.
I would recommend a setting which allows only tcp protocol to drop all the rest.

[ignoramous]

I would recommend a setting which allows only tcp protocol to drop all the rest.

Rethink only allows ICMP, TCP, and UDP. So, by blocking UDP, you're getting close to what you're asking for. Not sure, if blocking ICMP is okay.

[llldannylll]

Thank you for the quick response. Icmp allows wakeon wlan. Im not pro enough to understand the drivers source code, but ive been told nasty things can be done with icmp.

[llldannylll]

Thank you for the quick response. Icmp allows wakeon wlan. Im not pro enough to understand the drivers source code, but ive been told nasty things can be done with icmp.

I would recommend a setting which allows only tcp protocol to drop all the rest.

Rethink only allows ICMP, TCP, and UDP. So, by blocking UDP, you're getting close to what you're asking for. Not sure, if blocking ICMP is okay.

I wrote this because my uptodate android device has been infected with a spyware when every android component was firewalled.
Which means one or both of the following:
-not every android component or service shows up in the firewall
-it uses a custom protocol
I learned that spyware allows access to my phone and streams the screen content.
Ive been able to firewall everything but udp,tcp,icmp on my wifi but i cant do this on lte.
The packet captures showed a protocol which is not udp/tcp. Its a custom protocol which has been wrote by the hacker.

[llldannylll]

If every android component and app is firewalled, and the hackers still able to install software from remote to the phone, than there must be a vulnerability in the android system itself. (In the kernel and/or a system service)
Is it a must to root the phone to firewall android services? Is rethink firewall capable of firewalling system services?

[ignoramous]

OEMs apps and services can bypass Rethink #224 (and root-based firewalls, if they are not careful enough).

As a rule of thumb, if you can't trust OEMs, no amount of protections matter (see: https://en.wikipedia.org/wiki/Trusted_computing_base)