Comments (6)
So in lockdown it just changed apps from "Allowed" to "Bypass" essentially?
No, Bypass doesn't skip per-app rules, nor does it use
System DNS
.
Yes, sorry for misunderstaing, thats what I meant, Bypass plus this two things
I see this setting as a foot-gun. Most apps I block (calculator, flash light, govt apps), I want them to remain blocked; and unblocking them ALL in Pause mode is a foot-gun (just so one other app that's updating something would work). Pausing individual apps is unsupported, and so, the closest you come to that UX is, unblocking said app, getting work done, then blocking it back again. Way better than unblocking all blocked apps, even if temporarily.
I'll think about it some more, but as of today, I am not inclined to allowing ALL apps in Pause mode.
I get all your point and I also dont like like turning off blocking all apps when I want to update apps from store or update Android version. But this require multiple unblocks and some of them are gruped apps because they are system apps so than its even more confusing.
Maybe we could find some nice way to do it witchout making something too complicated like profiles for blocking apps. I will try to think of something.
For now all I imagined is "Allow in Pause mode" as an option inside app config, but thats not ideal.
from rethink-app.
Apps that are blocked (wifi or mobile) will continue to be blocked even in pause mode, but if Rethink was also in Lockdown (aka Block connections without VPN
turned ON), then other non-blocked apps continued to be routed through the tunnel.
What are these apps you're unable to connect to?
- Pause Rethink (assuming it is already Lockdown)
- Open any app that's not blocked and see if it is able to access Internet.
- Unpause Rethink
- Go to Network Log and search for entries of the non-blocked app above.
- Make sure you're looking at recent Network Log entries (which should have been logged in the duration Rethink was in Pause mode).
- Tap on those entries and in the bottomsheet that comes up, check if the connection was "blocked" or "allowed" or failed to connect (look at the footer of the bottomsheet for final connection status).
from rethink-app.
So what pause does in lockdown mode exacly?
I thought the point of pause in both lockdown and non lockdown was to let all traffic go thru.
" // allow when firewall is paused: as a placeholder RULE8(bypass app) is used
return FirewallRuleset.RULE8
"
Thats how I understood it when created #1134
from rethink-app.
So what pause does in lockdown mode exactly?
Pause has always blocked existing blocked apps (with or without Lockdown).
To allow a blocked app to be able to connect, you'd have to remove those rules (regardless of whether the VPN is Lockdown or not), as Pause won't cut it.
In Pause mode, allowed apps use:
System DNS
(without any rules applied).- Underlying network (wifi/mobile) directly (if Rethink is not Lockdown) or Rethink's tunnel network (if Rethink is Lockdown).
- Universal (global) & per-app IP/domain rules are skipped.
from rethink-app.
So in lockdown it just changed apps from "Allowed" to "Bypass" essentially?
I see, my idea of pause was more broad, well I created #1134 so I can allow all apps for some time for updates etc, I understand what you want to do with Pause now.
But maybe we could have an option/setting (which on/off would be saved) inside pause menu, like a tickbox "Temporary allow all apps" which would also use RULE8 for lockdown but for all apps
from rethink-app.
So in lockdown it just changed apps from "Allowed" to "Bypass" essentially?
No, Bypass doesn't skip per-app rules, nor does it use System DNS
.
But maybe we could have an option/setting (which on/off would be saved) inside pause menu, like a tickbox "Temporary allow all apps" which would also use RULE8 for lockdown but for all apps
I see this setting as a foot-gun. Most apps I block (calculator, flash light, govt apps), I want them to remain blocked; and unblocking them ALL in Pause mode is a foot-gun (just so one other app that's updating something would work). Pausing individual apps is unsupported, and so, the closest you come to that UX is, unblocking said app, getting work done, then blocking it back again. Way better than unblocking all blocked apps, even if temporarily.
I'll think about it some more, but as of today, I am not inclined to allowing ALL apps in Pause mode.
from rethink-app.
Related Issues (20)
- App keeps stopping HOT 1
- Re-start the app after updates automatically HOT 4
- Fatal Exception: java.lang.IllegalStateException: Unable to load publicsuffixes.gz resource from the classpath. HOT 3
- V055m: phone is not receiving messages if screen is off or app is not in the foreground HOT 6
- wireguard proxy not working HOT 1
- V055m: bug can't stop or start the vpn HOT 2
- "No internet" after restart and system dns HOT 2
- V055m: I get this error when I start the service sometime HOT 1
- App "KDEConnect" cannot be allowed/bypassed HOT 1
- Optionally block inbound traffic when firewall / proxy is on HOT 6
- DNS via WireGuard in advanced mode HOT 4
- v0.5.5m: Regular timeouts across any requests HOT 18
- Cannot start VPN service with version v0.5.5m from Fdroid HOT 1
- Rethink keeps stopping continuously HOT 6
- v055m: backup and restore broken
- [Minor enhancement request] Make it more obvious that the apps filter options at the top is horizontally scrollable
- [Enhancement request] No way to filter/see partly-allowed/blocked apps
- When in [Apps], entering a search term, then switching to another app, then coming back to Rethink, resets the list to all apps HOT 4
- [FR] Add block/allow timer HOT 3
- One-tap export of configuration summary / logs
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from rethink-app.