RethinkDNS: issues and questions

sypqys · January 22, 2023, 11:14am

Hi !

I use NextDNS configuration, but I want to use the firewall of RethinkDNS…
How it works ?
Someone can be explain me how it works ?

Because sometimes I don’t have any Internet access with firewall…

Thanks

ignoramous · January 22, 2023, 3:40pm

Hi there, rdns dev here

You can setup DoH (DNS-over-HTTPS) url (looks like: https://dns.nextdns.io/<cfgid>) by clicking on the + (add) button at the bottom of the DNS → Configure tab → Other DNS.

When you don’t have Internet, you can check Network logs and DNS logs to see if things are blocked. Blocked connections are marked with a red-coloured left-hand side border. When you tap on the entry, a bottom-sheet should crop up which should then show the reason (in a red-coloured chip on the top-right) explaining why Rethink blocked it.

If Rethink’s having connectivity issues, it should show up in red-colour on the homescreen just below the START / STOP button. If there are no network issues, then it should show Protected in a blue-ish colour instead.

Also, run Rethink in IPv4 mode (Settings → Choose IP version → IPv4) as IPv6 support is experimental and may not properly work on all 4G networks (we are working on a fix for this which should land in the upcoming version v054, 2 or so weeks away).

If everything looks good, see if connecting over System DNS (DNS → Configure (tab) → System DNS) works for you? Some network providers are fussy and block alternative DNSes.

sypqys · January 22, 2023, 3:57pm

thanks for all !!

ignoramous · January 22, 2023, 4:22pm

ANDROID is blocked. Tap on it, then unblock it (by allowing it for both Mobile and WiFi). You’re possibly using NextDNS with Android’s Private DNS, and hence you need to allow ANDROID to connect (which here appears to be blocked) as ANDROID is the one making those DNS queries.

Also make sure to turn off Block when DNS is bypassed setting in Firewall → Universal (tab) (this setting isn’t shown when Private DNS is enabled; so you may have to turn off Private DNS first, make sure this setting in Rethink is also turned off; and then re-enable Private DNS again).

sypqys · January 23, 2023, 12:18pm

Hi !

there is my screen capture of firewall rules.
It’s OK ?

(i’m french)

my first post for this app

Thanks

Licaon_Kter · January 24, 2023, 7:19am

@ignoramous ?

ignoramous · January 25, 2023, 11:37pm

Thanks for the ping Licaon_Kter.

Answered it on reddit as it was asked there too: https://www.reddit.com/r/rethinkdns/comments/10jbfh9/firewall_rules_exceptions_there_is_ok/

Reproducing it here for others,

Hi: To add to what U8dcN7vx said,

Bloquer lorsque le DNS is likely to break some apps… so check network logs when that happens.

With Bloquer ... l'appareil est verrouille… but some communication apps (like Zoom, WhatsApp) may need a “bypass”, or incoming calls may be blocked, otherwise.

Bloquer le traffic du port 80 may break some websites… but nothing major. Most legit websites today do support HTTP/S on port 443.

Bloquer... nouvellement installees comes really handy. You’ll be shown a notification to allow / block when a newly installed app tries to connect to the Internet.

Bloquer ... dont la source est inconnue is probably safe to enable. It shouldn’t break any app.

sypqys · January 25, 2023, 12:28pm

Hi everybody here !

Why RethinkDNS stop itself and lost all my firewall rules established in the past ? I have a redmi note 8 pro. And no other. Mr number filtered my phone call and SMS. I dont understand. When I save the app stop. I use DNS from nextdns pro plan.

Thanks

Licaon_Kter · January 25, 2023, 12:47pm

Please report directly to the developer: Issues · celzero/rethink-app · GitHub

ignoramous · January 25, 2023, 11:43pm

If you want Rethink to keep running persistently, enable Always-on VPN: Connect to a virtual private network (VPN) on Android - Android Help

Unless you reinstall Rethink, it shouldn’t be losing data… Does it happen all the time? If so, how many rules did you add that were wiped out? This sounds like serious bug… If you can reproduce it consistently…

As in, SMS and calls don’t work with Rethink?

For SMS/MMS, check Rethink’s DNS Logs to see if “RCS” related domains are being blocked.
For voice, yes, some providers (I have seen two or three such reports on T-Mobile) have problems with VoWiFi and VoLTE when Rethink is running.

But as Liacon-Kter mentioned, feel free to reach out on GitHub or Telegram, where the community is pretty responsive and multi-lingual.

sypqys · January 26, 2023, 10:46am

Thanks a lot.

And for “block all connexions without VPN” ?

ignoramous · January 26, 2023, 4:15pm

You can enable it, if you don’t have any app “excluded” from Rethink (I can see from the screenshot you shared that there are 9 apps “exclue(s)”).

Basically, what “bloquer les all connexions…” does is, it firewalls (blocks connections of) any app or system component excluded from Rethink.

sypqys · January 31, 2023, 11:37am

Hi !

I am in fly mode… Or flight mode…
Why this ?

Thanks

Baggypants · February 1, 2023, 1:51pm

Flight mode only disables the radio for phone calls, not wifi or bluetooth.

sypqys · February 2, 2023, 3:42pm

Okey but why my RethinkDNS version stopped working… ?
(v053n)

ignoramous · February 6, 2023, 4:35pm

Try enabling the Always-on VPN setting.

Either the app is crashing on your phone (in which case, can you please bugreport to mz at celzero dot com if you are comfortable doing so), or the Phone is killing the VPN (in which case Always-on VPN should help)?

sypqys · February 7, 2023, 12:23pm

The same problem.

ignoramous · March 9, 2023, 12:57am

As in the app is crashing? Are you on Android 13? If so, wait for v054a to hit F-Droid within next week.

system · May 8, 2023, 12:58am

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.