Skip to content

v1.1.0 - Initial release

Choose a tag to compare

View all tags
@enesilhaydin enesilhaydin released this 21 May 11:30
· 16 commits to main since this release
v1.1.0
edf1032

Tethering-aware VPN kill switch for rooted Android (Magisk module).

What it does

Blocks forwarded traffic from hotspot / USB-tether / Wi-Fi-AP interfaces whenever no tun* interface exists. Closes the gap left by Android's built-in Block connections without VPN setting, which is UID-based and does not cover tethering forward paths.

Features

  • Multi-interface support out of the box: br0, wlan0/1/2, swlan0, ap0, rndis0, usb0, wlan_ap
  • User-overridable interface list via /data/adb/lan-killswitch.interfaces
  • IPv4 + IPv6 symmetric
  • VPN-client agnostic: matches -o tun+ (WireGuard userspace, kernel mode, OpenVPN, etc.)
  • Watchdog re-asserts rules every 30s and picks up new tether interfaces
  • Independent of VPN-routing modules — survives tunnel drops

Installation

  1. Download lan-killswitch-v1.1.0.zip below
  2. Magisk Manager → Modules → Install from storage → pick the zip
  3. Reboot
  4. Verify: adb shell su -c 'iptables -L lan_killswitch -nv'

See README for full details.

Tested on

ZTE F50 (Android 13, Magisk) with vpn-gateway routing hotspot clients into WireGuard tunnels (Mullvad + self-hosted).

Assets 3
Loading