Alternatives to AFWall+
iptables firewall for rooted Android with per-app rules. The listings below can replace it for an important use case. Each note says what changes if you switch.
The original
AFWall+
iptables firewall for rooted Android with per-app rules.
Replacements
Listings that take over the same core job as AFWall+.
NetGuard
No-root Android firewall that blocks internet access per app.
NetGuard blocks internet access per app without root, but it occupies the VPN slot, so it cannot run alongside a real VPN, and some features need an in-app purchase.
GlassWire
Network monitor and firewall with a visual traffic history.
GlassWire adds a visual traffic history and alerts on first connections, but it is closed source, freemium, and does not offer the iptables rules that AFWall+ uses on rooted devices.
Also worth comparing
These listings name AFWall+ as their own alternative, so the relationship runs both ways.
OpenSnitch
An interactive application firewall for Linux that asks before letting any program make an outbound connection.
AFWall+ is an open-source iptables firewall for rooted Android with per-network rules, and it does not use the VPN slot.
Similar software
Related functionality, not a direct replacement.
Shelter
Separate selected Android apps into a work profile.
simplewall
Puts a plain list of programs in front of the Windows Filtering Platform, so you decide what is allowed online.
Little Snitch
macOS application firewall that prompts on outgoing connections.
LuLu
Control outbound application connections on macOS.
Portmaster
Shows every connection each application makes and lets you block any of them, with sensible defaults already set.
