![](https://lemmy.ml/pictrs/image/d16df7bd-611e-4b05-919a-2012a63de3ea.webp)
![](https://lemmy.ml/pictrs/image/f4a8a699-27b5-406c-a15c-aa96a0acf5a9.webp)
0·
7 days ago- AFWall+ firewall to allow list apps to internet using your preferred method (e.g. VPN, wifi, data, etc)
- PcapDroid to help monitor and analyze packets, or to just confirm things aren’t communicating unexpectedly
- AdAway if you’re not using your own dedicated dns over a permanent VPN connection
If not all 3 of these, AFWall is probably the best to go with. Having a way to not only block Apps, but also define your own custom firewall rules is very powerful. For example, I redirect all DNS requests to my own DNS with a custom rule (for apps, like Termux, using hardcoded DNS lookups instead of what the phone is set to)
This is where rooting the phone is required. I use wireguard without root and have AFWall granted with root at bootup so it doesn’t require acting as a VPN