orWall

Force apps to use Tor

Force selected applications through Orbot while preventing unchecked applications to have network access.

In short, orWall will add special iptables rules in order to redirect traffic for applications through Tor; it will also add required rules in order to block traffic for other apps. The redirection is based on the application user id. Each android application runs as a dedicated user, and iptables has support for traffic filtering based on the process owner, meaning it's really easy and pretty safe to do this kind of thing on an Android device.

The application works in two stages: first, an init-script will block all incoming and outgoing traffic. This should prevent leaks, knowing Android sends stuff before you can even access the device. Second stage comes once the device is fully booted: orWall itself takes the lead on the firewall, and add required rules in order to allow Orbot traffic, and redirect selected application to Orbot TransPort.

Limitations: init-script works only on Android <= 4.4.x

Conflict: all other firewall application such as AFWall, DroidWall, etc

License: GNU General Public License v3.0

Website: https://orwall.org
Issue Tracker: https://github.com/EthACKdotOrg/orWall/issues
Source Code: https://github.com/EthACKdotOrg/orWall

For full details and additional technical information, see this application's page on the F-Droid wiki.

Packages

Although APK downloads are available below to give you the choice, you should be aware that by installing that way you will not receive update notifications and it's a less secure way to download. We recommend that you install the F-Droid client and use that.

Download F-Droid
  • Version 1.2.0 (40) - Added on Aug 4, 2016

    This version requires Android 4.1 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Download APK 1.4 MiB PGP Signature

    Permissions

    • ACCESS_NETWORK_STATE
    • ACCESS_SUPERUSER
    • ACCESS_WIFI_STATE
    • INTERNET
    • RECEIVE_BOOT_COMPLETED
  • Version 1.1.0 (38) - Added on Jul 15, 2016

    This version requires Android 4.1 or newer.

    It is built and signed by F-Droid, and guaranteed to correspond to this source tarball.

    Download APK 3.2 MiB PGP Signature

    Permissions

    • ACCESS_NETWORK_STATE
    • ACCESS_SUPERUSER
    • ACCESS_WIFI_STATE
    • RECEIVE_BOOT_COMPLETED