Skip to content

Releases: privshell/aegis-firewall

Release list

v1.0.1

Choose a tag to compare

@github-actions github-actions released this 24 Oct 08:52
Immutable release. Only release title and notes can be modified.
65bc763

AEGIS // FIREWALL v1.0.0

First public release.

  • Blacklist and whitelist modes, each with its own rule set
  • Per-app control for Wi-Fi, mobile data, VPN, LAN and roaming, IPv4 and IPv6
  • Host rules: block or allow a domain, IP or CIDR, optionally per port and protocol, per app or for all apps
  • Temporary access (15 min, 1 h, 8 h) that reverts on its own
  • Screen-off blocking with a configurable delay
  • Rules for every Android user: Dual apps, Second space, work profiles
  • Rules applied at boot, before the device is unlocked, in one atomic iptables-restore per address family
  • Watchdog that restores the OUTPUT hook if the system removes it
  • Live connections per app with one-tap address blocking
  • Per-app blocked counters on any kernel, plus kernel LOG when available
  • Profiles, backup and restore
  • Lockdown kill switch in the WebUI and on the module Action button
  • Diagnostics: kernel capability probe, hook state, daemon log, restore errors

Requires a kernel with the iptables owner match (all GKI kernels). The installer checks this and aborts if it is missing.

v1.0.0

Choose a tag to compare

@github-actions github-actions released this 16 Oct 08:49

AEGIS // FIREWALL v1.0.0

First public release.

  • Blacklist and whitelist modes, each with its own rule set
  • Per-app control for Wi-Fi, mobile data, VPN, LAN and roaming, IPv4 and IPv6
  • Host rules: block or allow a domain, IP or CIDR, optionally per port and protocol, per app or for all apps
  • Temporary access (15 min, 1 h, 8 h) that reverts on its own
  • Screen-off blocking with a configurable delay
  • Rules for every Android user: Dual apps, Second space, work profiles
  • Rules applied at boot, before the device is unlocked, in one atomic iptables-restore per address family
  • Watchdog that restores the OUTPUT hook if the system removes it
  • Live connections per app with one-tap address blocking
  • Per-app blocked counters on any kernel, plus kernel LOG when available
  • Profiles, backup and restore
  • Lockdown kill switch in the WebUI and on the module Action button
  • Diagnostics: kernel capability probe, hook state, daemon log, restore errors

Requires a kernel with the iptables owner match (all GKI kernels). The installer checks this and aborts if it is missing.