Feature Request: Option to modify iptables for iptables backend

[sheltpat]

Describe Your Idea

Hi, I would like to request an option to modify the iptables, when rooted and using iptables as backend.

Currently (if I didn't miss a setting), it only enforces iptables, but it would be great if there was an option to add, remove or edit rules.

Also, in combination with the current function to block network before De1984 starts, this effectively produces a permanent rule, that otherwise would require an early executed init.d script.

For example, this could block Android's hardcoded DNS fallback entries (Edit: Apparently, my Google DNS queries came from Termux, which has them hardcoded.), if users want to avoid 8.8.8.8 or 8.8.4.4, i.e. connections to Google.

This function could also utilize an editable (and exportable) text file, in which an example rule of blocking these fallback DNS could be already there but commented out.

Thank you very much for your app and maybe taking it into consideration.

[dorumrr]

Hey @sheltpat,

Thank you, and I did consider it.
The problem is De1984 now verifies its own teardown by probing the kernel and warns you if rules survive a stop. Arbitrary user rules in that chain make that check meaningless, and a bad rule takes the device offline with no way back from inside the app.
For your DNS case, an init.d or Magisk script is the safer tool.

Cheers!

[sheltpat]

Heyo,

thank you for addressing it. It makes sense how you put it and I see its inviability.

Anyway, I will correct my possibly false assumption about the hardcoded DNS, if anyone stumbles across this:
This happened for me using "dig" in Termux, and the reason those DNS queries always came up was that those servers are hardcoded in Termux, which I found out not too long ago.

So in the end, I do not even have the need to modify iptables anymore.