Since I started using AFWall+ (a firewall based on iptables) on Android, I was wondering why the Linux kernel tries to connect to the internet all the time?
Allthough blocking the kernel I didn't recognize any disadvantages or issues.
A short answer is given here on the FAQs page of AFWall+.
It says that the kernel does not communicate directly, it only pass packet information from some applications and something about policy routing based on
What does it mean? What is
fwmark? Can somebody translate it into simple language for noobs? Is it better to allow the kernel to connect over TCP?