Pause in lockdown mode

[iulko]

Pause in lockdown mode don't work, propably because the way the app pause is by bypassing the VPN for all apps which is not possible in lockdown mode.

Could we have a pause mode in lockdown also by "allow" for all apps? Is not the same thing, but close enaught

[ignoramous]

VPN Lockdown is enforced by Android as "any app bypassing an active VPN will have all its internet connection dropped". Pausing Rethink is those apps bypassing an active VPN; and hence dropped connections. Nothing that we could do, as an active VPN app, that'll change Android's behaviour. In fact, if anything, the current behaviour is perfectly valid and secure.

[iulko]

Yes, i know that it cant bypass in Lockdown thats why:

Could be possible to change from bypassing to "allow" all apps in pause mode.
Same as going to app list and Allowing all apps manually, would work differently for VPN Lockdown in this way.

Pressing Pause in Lockdown mode -> App is changing all apps to "Allow" -> Pause stop -> all apps back to using app list Allow/Block etc

[ignoramous]

Gotcha. Thanks. Sounds like something we can implement.

[p-f-w]

But is possible to bypass "always_on_vpn_lockdown" by set apps in "always_on_vpn_lockdown_whitelist", active when vpn is down, i have yesterday tested it.

(OT: RethinkDNS lost set system dns every time short after start, but after stop the whitelistening app can work with url, not only with ip as RethinkDNS, after restart short time is it possible ti refreh the browser with preset Url …)

[ignoramous]

But is possible to bypass "always_on_vpn_lockdown" by set apps in "always_on_vpn_lockdown_whitelist", active when vpn is down, i have yesterday tested it.

See #224

[ignoramous]

Impl in v055b: cfbc4ee

rethink-app/app/src/main/java/com/celzero/bravedns/service/BraveVPNService.kt

Lines 329 to 332 in 02c16a9

	if (VpnController.isVpnLockdown() && isAppPaused()) {
	// allow when firewall is paused: as a placeholder RULE8(bypass app) is used
	return FirewallRuleset.RULE8
	}