firewall config

[erichQ]

I am looking for some information which wildcards/joke are accepted in the firewall whitelist/blacklist. To give an example: Will

*.*goolge*.com

work to block all google stuff?
Thanks for your help

[Volla]

Vielen Dank für die Anregung Wildcards zu verwenden. Zur Zeit können Sie Domänen verwenden und Sub-Domänen einschließen: Also statt a.google.com, b.google.com und c.google.com können Sie einfach google.com definieren.

Außerdem können Sie Vorlagen verwenden oder eine eigene Vorlage als Textdatei erstellen und importieren. Wer an den Vorlagen mitarbeiten möchte, findet das Projekt hier: https://github.com/HelloVolla/security-mode-templates

[erichQ]

Hi Volla-Team,
Vollaphone 22, OS 12.1, Release October 29, 2023
Congrats
- I realised that the firewall can now be configure under trebuchet and the entries are persistent
- I also highla appreciate that it is possible to import blacklist entries from a local file
- To me it like that security mode still can only be switched on/off after swicthing to the springboard launcher. I do not understand why it is still not possivble to switch it on/off under trebuchet, but I can live with that

My questions:
1. Is it true that security mode can only vbe swicthed oin/off under springboard or did I just not find it
2. Is it still the case that a entry in the blacklis includes all subdomains. I.e.: 'google.com' includes e.g. 'tagmanager.google.com'?

[franco_bez]

Regarding question 1
I heard that "fast titles" are under development for turning security mode on an off with any launcher.
But until now there is no realease of those tiles.
Currently you must use springboard for this.

[partypooper]

Hi!

I have a volla phone 22, using VollaOS 13, and I cannot find how to activate the "Security mode" with Trebuchet.

It would be great if that could be possible. Springboard is a clear no to me.

Thx.

[franco_bez]

for Trebuchet users Volla has introduced a quick settings tile to enable/disable security mode.
You only need to activate this tile.

Screenshot_20240703-080252_Fennec.png

[partypooper]

Hi!

Thanks to you, I learned something.

It works. Thanks!

Patrick

[partypooper]

Hi!

I have another question:

I would like to prevent the device from connecting to anysite except the ones I explicitly whitelist.

In other words, I would like to blackist "*.*".

This phone is intended for a young kid, and I want to control what sites he can access.

How can I do?

Thanks!

[franco_bez]

in the settings for the security mode you can choose between "blacklisting" or "whitelisting".

In your case you will have to select "whitelisting"

[partypooper]

Hi!

Thanks for your answer. Yet, I cannot achieved the desired result.

* I want to forbid access to anysite, unless they have been _explicitly_ whitelisted.

* I have tried different combinaisons:
(i) Setting up a whitelist (in "Firewall setting") and activating the security mode: When I launch Fennec (for instance), Fennec can still access everything.
(ii) Setting up a blacklist and activating the security mode: when I launch Fennec, Fennec can not access the blacklisted sites, which is the expected behaviour.

Unfortunalty, attempting to black lists top level domains like ".com" for instance, is not allowed by the security mode.

Since I cannot blacklist every domain one by one, and that adding sites to a whitelist is not automatically blacklist anything else, the question remains, how do I do?

Thanks for your input, I may be missing something,

Best regards,

Patrick