this post was submitted on 14 Dec 2023
36 points (97.4% liked)

Privacy

32156 readers
957 users here now

A place to discuss privacy and freedom in the digital world.

Privacy has become a very important issue in modern society, with companies and governments constantly abusing their power, more and more people are waking up to the importance of digital privacy.

In this community everyone is welcome to post links and discuss topics related to privacy.

Some Rules

Related communities

much thanks to @gary_host_laptop for the logo design :)

founded 5 years ago
MODERATORS
 

Question for the group on a problem I'm trying to solve: How can I block internet access for some apps on standard, OOTB Android?

My current set-up is to use Proton VPN with the Android settings "Always-on VPN" and "Block connections without VPN" and then use Proton VPN's Split-tunneling to exclude certain apps from using the VPN. This has the desired effect of blocking certain apps from having access to the internet.

However, I now find that I need to use certain Apps without the VPN but with internet access. In the past, I'd used something like NetGuard to control which apps have internet access, but, as Android only allows one VPN slot, this would require me to swap out Proton VPN.

So my problem statement: I'd like to be able to continue to use Proton VPN, exclude some apps from using that VPN but still have access to the internet, and block still other apps from the internet entirely. I'm struggling to find a way to do this.

Any suggestions are welcome!

you are viewing a single comment's thread
view the rest of the comments
[–] MajorHavoc 9 points 11 months ago* (last edited 11 months ago) (3 children)

If you're interested in that level of control, it's time to look hard at GrapheneOS. "Internet" is a permission you can grant or deny for each app, under GrapheneOS.

~~But I'm not aware of a way to selectively direct phone traffic through Proton VPN, at the phone. Even on GrapheneOS.~~

~~Enough skill with an expensive router could do it, but only on your home network, or only while routing all of your phone traffic back to your home network via yet another VPN.~~

Edit: TIL, Proton VPN supports split tunneling. Sweet! Look under Settings - Advanced - Split Tunneling - then pick your apps to include/exclude.

Edit 2: TIL DivestOS also supports "Internet" as a per app Permission. Very cool.

[–] [email protected] 6 points 11 months ago (1 children)

DivestOS can also deny internet access, for the people who don't have a Pixel

[–] [email protected] 2 points 11 months ago

DivestOS seems to give a nice balance between vanilla Android and Graphene. I really like it.

[–] [email protected] 3 points 11 months ago (1 children)

I've been suspecting I'd need GrapheneOS for a while now. Might finally be time to jump.

[–] [email protected] 1 points 11 months ago

CalyxOS runs on a similar set of devices, is free, and does include a firewall app too. I still run Netguard, but that's mostly for ad-blocking.

[–] theDutchBrother 2 points 11 months ago (1 children)

You can route traffic through VPN on the phone, then just use split tunneling to exclude apps that should have regular network access without VPN. But you have to switch off "Block connections without VPN" in settings.

[–] MajorHavoc 2 points 11 months ago (1 children)

Oh hey, thanks! I never particularly wanted any of my apps to route around the VPN, but there the option it is under Advanced, when split tunneling is enabled. Could be handy. Thanks!

[–] theDutchBrother 2 points 11 months ago* (last edited 11 months ago)

NP. Yeah I only routed Tor browser around the VPN in the past to not slow it down too much but I hardly use Tor anymore so VPN routes everything now.