Picked up AFWall+ today when heard it is the fork of Droidwall (which had been sold off to Avast). Bonus is that AFWall+ has an entry for "(Tethering) - DHCP+DNS services". Problem is that entry doesn't work unless I also allow "(root) - Applications running as root". ("Doesn't work"=connecting device gives error "Avoided poor internet connection".)

I believe the following script would still require root to be allowed, but unsure.

$IPTABLES -A "afwall-wifi" -p TCP --destination-port 67 -j RETURN || exit
$IPTABLES -A "afwall-wifi" -p UDP --destination-port 67 -j RETURN || exit

(Built from: DroidWall and Wireless Tethering and https://github.com/ukanth/afwall/wiki/CustomScripts )

The goal is to not blanket whitelist all Root apps, but still allow DCHP/DNS out over the Wi-Fi interface (phone as wifi hot spot).

Is this even possible? If so, how so?

(Sprint Samsung Galaxy S III SPH-L710 running Avatar nightly_3.1-658-20130823-NIGHTLY-d2spr , based on CM 10.1 , android 4.2.2 )

Picked up AFWall+ today when heard it is the fork of Droidwall (which had been sold off to Avast). Bonus is that AFWall+ has an entry for "(Tethering) - DHCP+DNS services". Problem is that entry doesn't work unless I also allow "(root) - Applications running as root". ("Doesn't work"=connecting device gives error "Avoided poor internet connection".)

I believe the following script would still require root to be allowed, but unsure.

$IPTABLES -A "afwall-wifi" -p TCP --destination-port 67 -j RETURN || exit
$IPTABLES -A "afwall-wifi" -p UDP --destination-port 67 -j RETURN || exit

(Built from: DroidWall and Wireless Tethering and https://github.com/ukanth/afwall/wiki/CustomScripts )

The goal is to not blanket whitelist all Root apps, but still allow DCHP/DNS out over the Wi-Fi interface (phone as wifi hot spot).

Is this even possible? If so, how so?

(Sprint Samsung Galaxy S III SPH-L710 running Avatar nightly_3.1-658-20130823-NIGHTLY-d2spr , based on CM 10.1 , android 4.2.2 )