ShizuWall

A lightweight, privacy-focused Android firewall app that blocks network connections for selected apps without requiring root access or a VPN. ShizuWall leverages Shizuku and libADB to provide powerful network control. Requires Android 11 (API 30) or higher.

Why ShizuWall is Different

- No Root or VPN Required: Most Android firewalls need either root access or a VPN service. ShizuWall uses Shizuku or a local ADB daemon for native system-level control without typical VPN drawbacks. - Per-App System Networking Control: Leverages Android's connectivity service (chain-3) to enable/disable networking on a per-app basis—no packet interception or VPN tunnel. - Privacy-First Design: The app is offline-first and does not phone home. No analytics, tracking, or telemetry.

Notes

- Firewall rules are applied using platform commands and are automatically cleared on device reboot (an Android security limitation). Rebooting will revert all changes made by ShizuWall.

- No network calls from the app itself—it sends no data to external services. The app requests the android.permission.INTERNET permission only to support wireless debugging pairing (LibADB) for connecting to the local ADB daemon. ShizuWall operates entirely locally and initiates no connections to external servers.

Firewall Implementation

(What the app runs via Shizuku or the local daemon)

# Enable firewall framework cmd connectivity set-chain3-enabled true

# Block specific app cmd connectivity set-package-networking-enabled false <package.name>

# Unblock specific app cmd connectivity set-package-networking-enabled true <package.name>

# Disable firewall framework cmd connectivity set-chain3-enabled false

Control via Broadcast (ADB / Automation)

ShizuWall supports a simple broadcast interface, allowing you to enable/disable the firewall from ADB or automation tools.

- Action: shizuwall.CONTROL - Component: com.arslan.shizuwall/.receivers.FirewallControlReceiver - Extras: - state (boolean): true = enable, false = disable - apps (string, optional): Comma-separated package list to operate on. If omitted, it falls back to the saved "selected apps" set.

Examples:

- Enable firewall for selected apps: adb shell am broadcast -a shizuwall.CONTROL -n com.arslan.shizuwall/.receivers.FirewallControlReceiver --ez state true

- Disable firewall for selected apps: adb shell am broadcast -a shizuwall.CONTROL -n com.arslan.shizuwall/.receivers.FirewallControlReceiver --ez state false

- Enable firewall for specific packages (CSV): adb shell am broadcast -a shizuwall.CONTROL -n com.arslan.shizuwall/.receivers.FirewallControlReceiver --ez state true --es apps "com.example.app1,com.example.app2"

- Disable firewall for specific packages: adb shell am broadcast -a shizuwall.CONTROL -n com.arslan.shizuwall/.receivers.FirewallControlReceiver --ez state false --es apps "com.example.app1,com.example.app2"

⚠️ Disclaimer

ShizuWall is provided "as is" without any warranty. By using this app, you acknowledge that it requires advanced system permissions (Shizuku/ADB) and accept all risks.

The developer is not responsible for any damages, including but not limited to:

- System instability, data loss, or service disruption. - Network blocking affecting critical system functionality. - Any consequences from using Shizuku or ADB.

Always ensure you understand which apps you are blocking. Use at your own discretion.

License

GNU General Public License v3.0