How to setup the firewall RethinkDNS in Android

RethinkDNS is an excellent open-source firewall, DNS modification and proxy client app. The app is available for free and provides comprehensive firewall and DNS blocking capabilities.

RethinkDNS Firewall Setup

Download and Installation

First, download RethinkDNS apk directly from Github or from this link. We recommend to choose the latest stable version apk, on November 2025 is the version 0.5.5n.

Basic Firewall Configuration

1. Open the RethinkDNS app after installation

2. Grant necessary permissions when prompted, including VPN access (this is how the app manages network traffic)

3. Select your blocking preferences:

- Choose which apps you want to block internet access for

- Configure global or per-app network restrictions

- Enable/disable specific types of network traffic

Advanced Firewall Features

- DNS blocking: you can block trackers, ads, and malicious domains on base of DNS selection. Recommended: any of DoT - DNS over TLS.

- Per-app network controls: granular control over which apps can access the internet.

- Logging and monitoring: track network activities and potential security threats.

-Optionally, this app allows you to use Wireguard or Tor as a proxy client to mask your public IP address.

Important considerations

- The app requires VPN permission to function: go to Android Settings / Internet Connections / Advanced options and setup the app as a VPN, otherwise click on button Start at RethinkDNS and Android will prompt to create a VPN configuration for this app. To get a Lockdown mode: setup the connection with RethinkDNS as “VPN Always-On” and “Block Connections Without VPN”.

- Some apps may not work correctly when fully blocked.

- Regularly update the app for the latest blocking lists and features.

Additional Android Firewall Tips

While RethinkDNS is powerful, also consider:

- Keep your Android system updated

- Use strong app permissions management

- Consider additional security apps if needed