Everything that is discussed on this forum is somehow connected with information systems that operate on numbers.
You simply write the text here without confirming your observations with a single digit. It's easier for you on a literary forum in this case ..

Read a little materiel, the author answers many of your questions.В® AFWall + (Post tweed_man # 81264390)

Letters again. Data in digital and quantitative measurement show?
Terminal output, screenshot of logs.
If there are none, the conversation is exhausted.

Post has been editedtweed_man - 29.05.19, 11:48

Tell me please, and the built-in Internet prohibition functions for specific applications in custom programs like Havoc, do they work as well as AFWall or do they let especially obstinate ones?

The problem is not in “persistence”, but in “laws”: there are system applications, there is a “core”, there are still some special protocols. To restrict all this "good", without iptables (and, accordingly, the device routing) is indispensable.
Accordingly, in the firmware without rooting and based on the built-in functions, the above traffic will definitely pass, and how well such built-in functions will cope with restricting the traffic of ordinary user applications may also depend on the quality of the firmware.

Post has been editedokomand - 04.06.19, 17:44

okomand,
Thanks, basically I want to limit the software, since Pure AOSP custom has nothing to merge. But of course it is unpleasant that, for example, the Camera or Voice Recorder have access to the Internet.

This myth of ancient Greece, too, may not be entirely consistent with reality ...

Therefore, either rooting and using the subject, or creating the firmware with the default settings, or setting up the firmware from under the recovery.

Do you mean plums in Google or unscrupulous developers?

Of course, there is no subject, there are no skills for rebuilding, it’s still impossible to prevent Google from draining if the gaps are installed, and without them even the fingerprint scanner now doesn’t work.

For the first time I hear this. Where is it?

Posted 04/06/2019 at 20:54:

merges, how else! Put pure aosp collected from source codes. Merges, and it is in Google. Amazon s3 gets nothing, just google.

Terrionn
But isn't it because of them that the custom scanner works? Or is it only a face scanner?

And this is sad, but you can’t run away from Google already, you need pushes.

As far as I know, only him. The fingerprint scanner works fine without gapps.

Posted 04/06/2019 21:03:

why?

Terrionn
So I thought, so I did not even try, the front scanner turned out to be a very cool thing, besides, paranoid off. Thanks for the info.

Did not quite understand the picture, what do you mean, the fluffs go separately?

Post has been editedUrdun - 04.06.19, 21:10

Urdun I do not use guns. In the picture of the connection, leaked past the firewall. That is, only requests dns. The rest is not prolazit ...

Post has been editedTerrionn - 04.06.19, 21:25

Try using the alternative from the microG project. The most beautiful vesch: D

Terrionn
Ah, you can close it, but much is tied to the gaps, the same gkams, so it's hard now to refuse.

bext3r,
Thank you, I want to try everything, I wonder if something will fall off or not. :)

Well, this is another question, they began to talk about the possibility / impossibility.
On the screen - the real work afwall +

Post has been editedTerrionn - 04.06.19, 21:34

Looking what you use. In the thread on this forum in the header there is a spoiler with implemented api. Well, do not forget about the nandroid backup before such experiments;)

Try another OS Monitor, there may be bad news and disappointment, pah-pah three times

Post has been editedApril72 - 04.06.19, 22:36

as far as I remember, the program only shows real connections, without summing traffic.

April72 So far, nothing new. Sorry, there is no choice to sort the list.

Terrionn
tweed_man
I had that Networklog shows no traffic. Long enough. And then suddenly there is traffic. And so it was several times, on different firmware. For myself, decided that you can not 100% rely on the testimony. Somehow I tried OS Monitor. It was like this:
The Afwall + permissions allow mail and browser. When connecting to the network via wi-fi, the applications themselves did not launch. In the logs, the App Id is blocked: - 11. If you switch to a new view - the Android System (1000), the Linux kernel (-11).
Networklog (behind the firewall) shows (-1) kernel. In addition to DNS requests, there are more addresses. OS Monitor shows the Android System Established, mail established.
Networklog incorrectly keeps logs?

April72 , possibly. The same failures in networklog logs.