Hacker News Reader

Hacker News

Comment by vageli | Hacker News Reader

Parent Full thread

vageli

On Android, DNS66 does exactly this, available on F-Droid. https://f-droid.org/en/packages/org.jak_linux.dns66/

View on HN

Blokada seems to be very similar to DNS66, and is more actively maintained. Any reason to prefer DNS66?

> Blokada seems to be very similar to DNS66, and is more actively maintained. Any reason to prefer DNS66?

No, I've never heard of blokada. Thanks for the tip.

The blokada in play store doesn't block ads. Get it from their store.

Also agressive power management from phone makers close them.

There is an aggressive stayalive option. :)

Please details. I've set certain apps to have no power restrictions. Yet they get shutdown.

Thanks. Think I found it.

Blokada doesn't DoH or DoT the last time I checked, but they have added a wireguard-based paid VPN service, which is nice.

Intra [0] can DoH (but no on-device custom blocklists) and Nebulo [1] can DoH and DoT (with on-device blocklists). Personally, I see better latencies with DoH.

Ref: https://news.ycombinator.com/item?id=21598413

[0] https://getintra.org + adguard-dns or nextdns

[1] https://play.google.com/store/apps/details?id=com.frostnerd.... + adguard-dns or nextdns or hostfiles

For those unfamiliar with the acronyms.

DoH = DNS over HTTPS

DoT = DNS over TLS

Very useful apps!

As does NetGuard, both on the Play store and F-Droid: https://www.netguard.me/

A paid upgrade to the Play store version lets you filter traffic like adblock, or just use the releases from Github (they allow filtering, but not most pro features)

I use and love Netguard. It's great to see the trackers every app is connecting to but can't see a global option to block a particular domain across the board. I can only block on a case by case app.. Maybe they added this option recently?

I've only seen across-the-board, though you can allow individual apps to bypass the filter entirely. I think it's just a filter on DNS requests, but for APKs from github:

    settings -> backup -> import hosts file

You may also need to enable traffic filtering, I forget. that's at:

    settings -> advanced -> Filter traffic + Block domain names

The github apks notify you about updates and link right to the download page, so they're pretty painless to use.

It's only in the github version due to play store rules. And it's a global DNS based blacklist.

I wish there was global or group based ip rules though, since there's no way to whitelist DNS per app or temporarily, without completely turning off filtering.

It's kind of a pain, honestly. Some of the developers decisions seem pretty arbitrary to me. It's so close to being a must have app. I wish I had time to get familiar with the code.

That said, it's still my favorite option since losing adhell3 again.

Do you have any tips on how to set up NetGuard well? I use an app now called "NoRoot Firewall" that lets me filter on ip address or url and also port, with wildcards. (Ex. *.facebook.com). I cannot find a way to set up NetGuard since it appears to me that I can only decide on each request, which makes it near impossible to ever whitelist/blacklist something like AWS, which uses an ever rotating number of locations.

Nrf hasn't been updated in a very long time, but as you say you can whitelist/blacklist pretty easily. Sadly, netguard doesn't have this facility as a global, and only allows it to be done on a clunky, per-app basis. I seem to recall the author not being receptive to the idea.

Just knowing how to allow "*.facebook.com" for Whatsapp would be a godsend

Reply on news.ycombinator.com