Is there a way to use both a firewall and a vpn app on android. I have tried allowing the vpn through the firewall but one invaraibly goes off when I start the other. Is there some way around this -- to establish two tunnels at the same time.

  • Welcome on Security SE. This question seems more oriented toward end-user and specific to Android systems. It may therefore be more suited on the Android Enthusiasts site (still part of the StackExchange Network). – WhiteWinterWolf Jun 20 '16 at 20:26
  • 1
    You would also need to clarify what kind of firewall you are using. A VPN-based "no-root" one, or one that requires root like AFWall+. – Alexander O'Mara Jun 20 '16 at 20:32

The firewall not stablish a tunnel, this only open or close ports, you can use but you need not close ports of VPN and maybe network of VPN can use other proxy if for example is you home network and you use firewall on your home router. You can use firewall and VPN, both, but is important that firewall not close ports of your VPN.

  • FYI: Lots of Android "firewalls" are actually a VPN routing the requests. – Alexander O'Mara Jun 20 '16 at 20:33
  • but they don't provide the encryption. Is there any way to establish a tunnel within a tunnel. Or do you know any firewalls that also encrypt. – Bob Jun 20 '16 at 20:42

No, is isn't possible on Android to do this. But I would suggest setting up your firewall policy on the other endpoint of the VPN tunnel (the remote end) which will have the same effect as a local firewall policy.

I suspect you use the VPN to tunnel home? In your VPN router or home firewall that you tunnel to, there you can put rules which traffic are allowed to exit from VPN interface to internet.

  • I need a local firewall policy. Are you sure it wouldn't be possible even with a custom android rom – Bob Jun 20 '16 at 21:27

With a rooted phone I've hear you Can just use iptables for your firewall like you would on a laptop or server (if not just search for one a different firewall). As for the VPN just use OpenVPN or use the GUI app or regular Android setting. You also might just be able to manually change the routing tables to go to the firewall apps look back adresse out that interface and from there to the VPN interface and out to the web. I'm thinking some one needs to develop a app (I'm guessing Google's api would allow) because I'm not going to root my phone and would like to use a VPN and a local firewall!