Picked up AFWall+ today when heard it is the fork of Droidwall (which had been sold off to Avast). Bonus is that AFWall+ has an entry for "(Tethering) - DHCP+DNS services". Problem is that entry doesn't work unless I also allow "(root) - Applications running as root". ("Doesn't work"=connecting device gives error "Avoided poor internet connection".)
I believe the following script would still require root to be allowed, but unsure.
$IPTABLES -A "afwall-wifi" -p TCP --destination-port 67 -j RETURN || exit $IPTABLES -A "afwall-wifi" -p UDP --destination-port 67 -j RETURN || exit
The goal is to not blanket whitelist all Root apps, but still allow DCHP/DNS out over the Wi-Fi interface (phone as wifi hot spot).
Is this even possible? If so, how so?
(Sprint Samsung Galaxy S III SPH-L710 running Avatar nightly_3.1-658-20130823-NIGHTLY-d2spr , based on CM 10.1 , android 4.2.2 )