Has anyone tried using NetGuard or another firewall to prevent Amazon services from phoning home?
I have 5.3.1.0 on my Fire, so no root. But fortunately NetGuard doesn't need root.
I'm trying to find exactly which packages to block and allow to make sure Amazon can't update my OS, and preferably also block ads, while allowing the Play Store.
The problem I have been running into is that NetGuard lumps some services/apps together, so if I try to enable, for example, Android Contact Storage, it also enabled all of the Amazon contact related options, including all the social media connectors.
I haven't found a combination that allows me to login to Google but prevents system updates.
Has anyone successfully done this? I'd love some tips or maybe even an export of your NetGuard config.
S.Mayer said:
Has anyone tried using NetGuard or another firewall to prevent Amazon services from phoning home?
I have 5.3.1.0 on my Fire, so no root. But fortunately NetGuard doesn't need root.
I'm trying to find exactly which packages to block and allow to make sure Amazon can't update my OS, and preferably also block ads, while allowing the Play Store.
The problem I have been running into is that NetGuard lumps some services/apps together, so if I try to enable, for example, Android Contact Storage, it also enabled all of the Amazon contact related options, including all the social media connectors.
I haven't found a combination that allows me to login to Google but prevents system updates.
Has anyone successfully done this? I'd love some tips or maybe even an export of your NetGuard config.
Click to expand...
Click to collapse
This approach has proven unreliable on various Amazon device going all the way back to 2nd gen Tate:
- you can't block the relevant OTA services without root
- blocking by IP is only a temporary fix as Amazon rotates addresses
Despite claims to the contrary no local 'firewall' can be 100% effective without root access.
Davey126 said:
Despite claims to the contrary no local 'firewall' can be 100% effective without root access.
Click to expand...
Click to collapse
Thank you for the info. Just to be 100% sure, are you aware that NetGuard functions as a local VPN service, rather than using iptables? When connected to a VPN, the device should be sending all traffic that way. Whether it does or not, I can't actually say.
S.Mayer said:
Thank you for the info. Just to be 100% sure, are you aware that NetGuard functions as a local VPN service, rather than using iptables? When connected to a VPN, the device should be sending all traffic that way. Whether it does or not, I can't actually say.
Click to expand...
Click to collapse
Yes, I was aware but good to ask the question. A VPN *should* capture all traffic. Whether it does on FireOS is the $64K question. To my knowledge there are no widespread reports of VPN effectiveness blocking Amazon OTA updates, but that could simply reflect the limited number of attempts. Until recently VPNs were rather difficult to understand/implement for most non-technical users.
Related
Guys, I am getting my $50 Fire Tablet tomorrow and plan on using it for many secondary tasks, not my main tablet or device. I am trying to figure out which process to go with to add the Play Store and perhaps remove the Ads. I would prefer, I guess, to not block OTA updates or root. I saw the One Click option, but it says that it will disable updates. Which process should I go with to just install the Play Store and perhaps remove ads? My preference would be not to block OTAs. Much Appreciated!!
If you're getting it tomorrow, then it's a $40 tablet Go ahead and download/run the one click tool on your computer. You'll see there is an OPTION for disabling OTA updates. Be aware that an OTA update from 5.0.1 to 5.1.1 makes installing custom ROMs more difficult. You really might want to reconsider blocking them in case Amazon decides to make life harder still, but the choice is yours.
Percussionking, I assume you are referring to the one click utility at the link below?
http://forum.xda-developers.com/amazon-fire/general/root-playstore-busybox-optimize-flash-t3281804
Also, just to confirm there is an option to not block OTAs?
Is there also a choice to not root?
I'm using http://www.rootjunky.com/amazon-fire-5th-gen-supertool/
Looking at the batch file, installing Play Store and removing ads do not require root.
Thank you! Just to confirm this works with 5.1.1 on the $50 tablet?
Also, is there a way to unblock OTAs after they are initially blocked?
Howdy,
I am looking for some very specific help here on my device and so will try to provide as much information as I can with regards to it.
The basic issue is that I cannot, for any adequate length of time (more than a few minutes or hours), access the Google Play store on my Kindle Fire 5th Gen after it's initial installation. This is on Fire OS 5.3.2.1.
Where I started:
I have followed the instructions on how to install Google Play on the Kindle Fire without requiring root, which is basically the installation of the four required APKs. I used the script posted here on the forums and it worked well enough, but I've also copied the APKs locally to the device and installed them from there using the Local Storage tab in the Docs app.
The issue:
Within a few minutes or hours of having the Google Play store working, I am, for a second time, prompted to accept the Google Play terms and conditions when I load the store app. Once I accept (which I have no real choice otherwise, it just exits the app if I click Decline), I am now faced with an empty store screen and the message saying that there are no apps I can install as my Administrator has not made any available to me.
As I am my own Administrator, I know this is utter nonsense. This is also only the case on my account, as a dummy account that is not part of my G-Suite account does not have this issue, but alas, also does not have my purchases associated with it so this is not a good permanent choice.
My troubleshooting:
This issue seems to be entirely due to some issue with the fact that I am using a G-Suite account (the previously named Google Apps for Work) and not just your average Google account. The "apparent" issue is that the Google Play Store app seems to think I am using an Advanced management device (more info here, support.google.com/a/answer/6328699).
I have spent a few hours on the phone with G-Suite support on this. There was a point I mistakenly had the Advanced management settings on (EMM is the main culprit setting, the ability for the Administrator to control which apps their users can install, users being myself, my wife, and our son), but I have since, and for over a week now, had it off. They say toggling that takes about 24 hours to propagate, so that should be plenty of time. All I really wanted anyway was the Basic management anyway, i.e., being able to remotely locate, wipe, remove account, etc., on my various devices should they be lost or stolen, but I turned on some settings that weren't worded well enough for me to understand, apparently, and so Advanced it was.
Even with the EMM off, I still receive this error. At this point, I have many times over removed both the device from my G-Suite account as well as turned off mobile management entirely (it currently sits off and has since last week) which should have made it about as equivalent to a standard Google account as you can get, and yet still, the second prompting of the terms and service and the subsequent inability to browse the store after more than a short while after it just worked a bit ago.
Workarounds:
I can uninstall all four Google services apps, re-install them, add a dummy account, and get any free apps I want installed on my Kindle added, then uninstall again, re-install again, and add my account back, and then launch the apps and have them work. But again, this doesn't give me access to my purchased apps or add-ins so is not the best choice of action, nor is having to do this whole process again and try to get the Google Play store to work for those precious few minutes before it conks out. Sometimes it's not even a few minutes, but usually it is, but nevertheless, not the best all-around choice.
My hopeful resolution?:
Since neither I nor G-Suite Support seems to know of a setting that is currently preventing this from working, I am wanting to try some other methods that seem logical to me.
1) Putting the Google Play Store on my wife's profile on my Kindle and have it install any apps for all users and not just her profile. That "all users" part is what I am missing how to do. I know the script mentioned above that installs Google Play does install to all users so I know it's possible. Naturally, I would prefer this done through the store and not through manual APKs but beggars can't be choosers. I just want my auto-updates!
2) Allowing the adding and management of multiple Google accounts under my single profile. Currently, only one Google account can be added using the method of installing the Google Play store above, and if I could add mine and a dummy one, it should also work, in theory, by just swapping back and forth on the Play store. Still limited by purchases that are tied to my account (I believe), but not add-ins. I'd have to see how much trouble that is worth, but it could be better than nothing.
3) Anything else someone here on the forums can think of.
I'm open to questions, suggestions, or whatever at this point. I've now spent two weeks on this and yet still no resolution.
Thanks!
Tough issue, but not entirely unexpected behavior given the interdependencies of Google Play services components and undocumented assumptions of how play services/store will be installed on unrooted systems. Layer on G-suite and you have a snakes pit. My guess is one of more of the installed components is self-updating while the others are not. Probably not going to be able to control that behavior on an unrooted device.
May be less involved (and more successful) grabbing a refurb from Amazon Warehouse which typically arrive with older/rootable firmware.
Did you ever find a solution to this? I've got exactly the same problem now... Information seems light out there.
oilerfan21 said:
Did you ever find a solution to this? I've got exactly the same problem now... Information seems light out there.
Click to expand...
Click to collapse
No, I never got a fix for this, and unfortunately I have been relegated to just uninstalling all apps that came direct from APKs or just not from the Amazon Appstore. It sucks and makes my Fire not very worth it, despite the nice price tag.
I have Nexus 6 + Pure Nexus Android 7.1.1. I have blocked google.com with OpenDNS. Android seems to be using it to check if wifi is online. I am now wondering is there some way to change that? If i have to decide do i want to keep google blocked or use wi-fi on my phone i must decide to keep google blocked because of many reasons. If someone have idea how to change that google.com to some another page would be very helpful. Wi-Fi is saying "connected but no internet connection" when google.com is blocked.
Either you live in China or you're being excessively paranoid if you feel you have to block Google at the DNS level. So does the wifi function when not using OpenDNS?
Strephon Alkhalikoi said:
Either you live in China or you're being excessively paranoid if you feel you have to block Google at the DNS level. So does the wifi function when not using OpenDNS?
Click to expand...
Click to collapse
Wifi works great until i block google.com (it gets blocked when i block search engines category.) If i allow it wi-fi works normally but i am using OpenDNS mostly to block google so its kind of bad issue. My wi-fi says "connected, but no internet connection" when google.com is blocked. I am wondering is there some way to change google to test internet connection from some other site.
Do you have Google apps installed?
Strephon Alkhalikoi said:
Do you have Google apps installed?
Click to expand...
Click to collapse
Yes, what does it matter?
Google's apps all phone home to Google, especially Play Services and the Google App. When you block Google through OpenDNS, which I assume is the Android version, those apps cannot do their jobs effectively. If you want to block Google, though why is beyond me, you'll have to forego the Google apps as well. That means looking for alternatives for each Google app. A simpler solution is to let the device connect to Google.
Strephon Alkhalikoi said:
No, you simply decided that you were going to cop an attitude towards someone who was trying to help you. Someone whose reputation is pretty much unimpeachable.
Out of sight, out of mind. Don't bother replying, as you're a knuckle-dragging lackwit who can't compete with me.
Click to expand...
Click to collapse
Read your answers and wonder how did you try to help me? If i would have been someone living in china you would have asked me to buy another phone or move another country?
"Letting the device connect to Google IS the answer. It's just one you don't like."
That helps people in china alot even there would have been working solution which was beyond your abilities.
so despite following the instructions here:
https://forum.xda-developers.com/amazon-fire/general/root-stop-updates-5-3-2-1-maybe-delete-t3669951
my new 7" tablet (which was on 5.3.3.0) updated by itself overnight to 5.4.4.0.
good news was that i got all the debloat and google apps install done before the update. so at this point the tablet is gtg (for me).
my question, though, is - while the launcher and apps all seem to be working fine right now (have nova launcher installed with the home button hijack) should i be concerned that at some point they'll stop working?
obviously i'm assuming that if at any point i have to factory reset i'll lose everything but wondering if at this point things may begin shutting down or anything since the software updated.
thanks for the info!!
byproxy said:
so despite following the instructions here:
https://forum.xda-developers.com/amazon-fire/general/root-stop-updates-5-3-2-1-maybe-delete-t3669951
my new 7" tablet (which was on 5.3.3.0) updated by itself overnight to 5.4.4.0.
good news was that i got all the debloat and google apps install done before the update. so at this point the tablet is gtg (for me).
my question, though, is - while the launcher and apps all seem to be working fine right now (have nova launcher installed with the home button hijack) should i be concerned that at some point they'll stop working?
obviously i'm assuming that if at any point i have to factory reset i'll lose everything but wondering if at this point things may begin shutting down or anything since the software updated.
thanks for the info!!
Click to expand...
Click to collapse
A future FireOS update could break current customizations. To prevent that install a VPN based software firewall and block network access to 'devicesoftwareota.apk'. Other methods of blocking updates are dubious as you discovered. But hey, everyone is an expert.
Davey126 said:
A future FireOS update could break current customizations. To prevent that install a VPN based software firewall and block network access to 'devicesoftwareota.apk'. Other methods of blocking updates are dubious as you discovered. But hey, everyone is an expert.
Click to expand...
Click to collapse
thanks! any software suggestions? i do have a PIA account but not sure if will work to block a specific apk.
byproxy said:
thanks! any software suggestions? i do have a PIA account but not sure if will work to block a specific apk.
Click to expand...
Click to collapse
I use a paid product (AdGuard) but there are several well regarded software firewalls in the Play Store. @dragonfire has some experience here. Also look at Opera Max which effectively can do the same thing.
I'm happy with my new Zenfone 8 and want to limit the amount of personal data that Google and others can take from it. So I haven't signed into Google and I'm using F-droid, etc, to download apps.
I've installed NetGuard and I'm OK with allowing or blocking traffic from User Apps. However if I "Show System Apps" there are so many of them that I'm lost.
Is there a list of System Apps that can be blocked to increase privacy without affecting the basic functions of the phone?
I don't have a list, but you should try TrackerControl from F-Droid, it is basically NetGuard but with extra features like tracker blocking, which can be useful for apps that are not tracker-free like social media. It allows very precise control over what urls apps can send/recieve info from
Thanks, I hadn't heard about TrackerControl and will check it out.
Is Netguard still necessary? When I go into an app's settings, click on network, I can turn off mobile data and wifi for any particular app. That's basically what netguard does, right? i.e. prevent an app from accessing the internet