celzero/rethink-app
Rethink App
This project is a network security tool providing an application network firewall, a DNS blocklist manager, and a VPN client with multi-hop capabilities. It functions as a traffic controller that allows or blocks internet access for specific applications on a device.
The system distinguishes itself through a DNS-over-HTTPS firewall and traffic obfuscation tools that inject random packets to mask communication patterns and bypass regional internet censorship. It utilizes multi-hop routing to hide the origin of network traffic by chaining connections through multiple remote servers.
The software covers broad capability areas including content filtering to suppress advertisements and malicious domains, real-time network monitoring for per-app activity reporting, and encrypted DNS resolution to prevent eavesdropping. It also includes mechanisms for traffic leak prevention to ensure outbound data follows defined proxy or VPN routes.
Features
- Application-Level Access Controls - Provides an application network firewall to block or allow internet access for specific apps.
- Application Firewalls - Acts as a traffic controller that blocks or allows internet access for specific applications.
- Blocklists and Filters - Uses extensive blacklists to filter and suppress advertising and tracking scripts.
- DNS Blocklist Filters - Filters DNS queries against curated blocklists to prevent connections to malicious domains.
- Censorship-Free Internet Tools - Circumvents government blocks and regional restrictions to provide access to restricted information.
- DNS Query Filters - Blocks ads and trackers using on-device blocklists and custom DNS resolvers.
- DNS-over-HTTPS Relays - Provides a DNS-over-HTTPS relay to encrypt domain resolution and bypass eavesdropping.
- DNS-Based Ad Blockers - Prevents access to ads and trackers by returning empty responses for domains in curated blocklists.
- Traffic Pattern Obfuscation - Injects randomized data packets into the network stream to bypass deep packet inspection and censorship.
- Multi-Hop Routing - Chains multiple remote server connections via multi-hop routing to obfuscate the source IP.
- Local - Intercepts all device network traffic using a local VPN tunnel to route packets through a proxy.
- Multi-Hop Routing - Implements sequential routing through multiple VPN servers to hide the user's origin and location.
- App-Based Traffic Control - Controls internet traffic for specific applications to manage data usage and improve privacy.
- Application Network Restrictions - Restricts internet connectivity for specific apps based on categories or device states like background activity.
- Domain Blocklists - Manages domain blocklists to filter malicious domains and advertisements.
- Encrypted DNS Resolvers - Relays DNS requests to secure endpoints using encrypted protocols to hide queries from observers.
- DNS-over-HTTPS Firewalls - Filters DNS queries and blocks ads and trackers using encrypted HTTPS tunnels.
- Local Tunnel App Blockers - Blocks specific applications from connecting to the internet over Wi-Fi or mobile data using a local tunnel.
- Malware Protection - Protects the device by blocking connections to domains associated with phishing, ransomware, and malware.
- Network Access Controls - Provides mechanisms to permit or restrict network connectivity based on the originating application.
- Network Traffic Obfuscators - Sends random packets to mask traffic patterns, mitigating analysis and bypassing network censorship.
- Privacy and Ad Blocking - Filters DNS requests against curated lists to block known malicious domains and advertisements.
- Ad Blocking and Breakage Repairs - Suppresses advertisements, spyware, and malware by filtering network requests against multiple blocklists.
- Traffic Obfuscation Tools - Provides utilities to mask network traffic patterns to bypass regional internet censorship.
- Process-Aware Inspection - Implements app-aware traffic inspection to identify originating processes for granular access control.
- Per-App Network Statistics - Tracks and reports the connection frequency and destinations for individual applications.
- Tunneled DNS Queries - Routes DNS queries through encrypted tunnels to prevent leaks and man-in-the-middle attacks.
- Category-Specific DNS Blocklists - Blocks access to specific website categories like gambling or adult content using curated DNS blocklists.
- VPN Traffic Leak Prevention - Forces all outbound traffic through a defined proxy or VPN to prevent unauthorized data egress.
- Process-Level Traffic Logs - Logs network connections attributed to specific application processes to identify suspicious data usage.
- Real-Time Network Monitors - Tracks real-time application connections and data usage to identify suspicious activity.
- Firewalls - Firewall and DNS changer for privacy and security.
- Privacy Auditing - No-root firewall and DNS changer with anti-censorship features.
