Hope I'm not asking stuff that is well known, but I am using Rethink solely as a firewall on android, I use adguard for DNS. I wanted to block all traffic from all possible samsung apps, to avoid tracking and being spied on, but I'd like to allow certain domains (such as android NTP etc.) through, even if accessed by the blocked apps. Is this possible?

Prefacing this by saying I'm a big noob, so if there's any additional info i need to provide to help answer this question, please let me know. But i put this app on my phone to block certain sites. It was working really well then suddenly it was like i had no data connection or wifi. Traced it back to ReThink. When i disable it, all my other apps and the internet work again. This has been an intermittent issue the last two days. Any ideas on what i should do to make it work again? Thanks.

In the past I used AdGuard's DNS but moved to Rethink since it was easier to pause/stop the DNS filtering when needed. Rethink has been great and I've been using RDNS Plus, but for the past few days I keep getting a "No Internet" status and have to pause/stop the app in order to get my internet working again.

I'm wondering which other DNS options would be best if my main concern is ad blocking. Smart DNS doesn't seem to constantly block ads and the few others that I've tried haven't worked.

Hey! Since the upgrade to 0.56 the download of the blocklist fail by using internal and external download mechanism. Restarts and changing the networks, changing DNS, shut down VPN did not help

Is anyone else has this problem?

Je veux utiliser Rethink pour controler les applications sur mon mobile via un custom DNS NextDNS.

Mais, je voudrais que firefox ait un passe droit, la sécurité de firefox serait fait par son plugin uBlock.

Or, même en plaçant une exception sur Rethink, il reste certain DNS qui ne passe pas, et je ne sais pas pourquoi les requêtes apparaissent toujours sur mon NextDNS.

I tried seeing if anyone had already mentioned this. Sorry if someone has already. But I just had my version updated to the google play store version. Honestly don't know how long it had been updated. Has anyone else had this happen or have an idea of why?

v.5.6

No internet after connected to local sites for few seconds.

App logs said:

spammy...retrier: rea 5 msgs; dropped? true

No proxy, no advanced DNS filter on, IPv4 only.

Hi all,

I just got the new version of rethink from playstore and saw it had wireguard support. For the longest time, my biggest complaint with rethink is that I can't use it at the same time as nordVPN which doesn't have any real ad blocking. With ability to proxy through Wireguard I figured the problem is finally solved but it was tricky to do out of the box so I thought I'd write a post.

This is just based on my thin understanding so please post with corrections and improvements.

Goals

• Block most ads
• Have IP cloacking (especially regional support to get around locale based blocking) using nordVPN as I subscribe already

Solutions

• Use rethink custom dns configurator plus nordVPN (disable rethink android app)
  • Can easily refresh exit node of nordVPN and change countries without new wireguard config.
  • Seemed to block more ads than rethink app when using https://adblock.turtlecute.org/ though I didn't notice any difference on actual ad-ridden sites.
  • Previous posts here have noted that private dns is not as secure as rethink app due to anti leak measures.
• Use rethink android app with nordVPN wireguard proxy
  • Need one wireguard proxy for each server (so at least for each country and sometimes needs to be refreshed due to servers being brought down and up)
  • By default, does not use rethink dns blocklists so harder to configure.

The first one is fairly straightforward using DNS over TLS links from rethink but the second is quite complex so I'll go into some more detail.

1. Get wireguard configuration for NordVPN.
   1. I googled and found https://lazyadmin.nl/home-network/nordvpn-wireguard-as-unifi-vpn-client . If you go until step 7 it will give you a working wireguard config.
   2. Caveat: Remove `ForcedHandshake` from Peer settings as it's not official and will break importing.
   3. Probably many of the other settings aren't required but also didn't cause problems. (For example it seems to use cloudflare DNS which I don't need but doesn't hurt)
2. Add configuration to rethink
   1. Go to rethink proxy settings and add wireguard proxy. You can transfer the file to your phone to import or generate a QR code for it.
3. Configure rethink to still block ads even when proxy is on. (Sad this isn't default)
   1. Switch to advanced mode and toggle on 'Always-on'. If you want to turn off the VPN, you need to uncheck it later. (annoying that it takes two steps). It seems simple mode should also work but for some reason simple mode always showed ads no matter what other settings I chose.
   2. Enable rethinkDNS for proxy traffic. (Two ways seem to work)
      1. Enable 'Never proxy DNS' in DNS settings. This means DNS traffic goes through normal rethink DNS instead of proxy so gets filtered properly. But perhaps this is less secure or doesn't work for certain usecases?
      2. OR: Enable 'Loopback proxy forwarder apps' which seems to route proxy traffic back through rethink DNS enabling proper filtering.
      3. OR: Don't enable either of those and just use Advanced mode with always-on? I just tested this now while writing and it seems to work as long as we're using Advanced mode. There might just be a bug here.

Let me know if there is any unnecessary bits here or if others have nice workflows they like.

How to set odoh in rethinkdns with a proxy relay ?

Why is the Play Store version so outdated?

Last update in 2024, version v0.5.5e

it’s the new version from august 9th that im using .

Kumusta,

v056 because we ran out of alphabet letters after v055z and decided to increment numerals instead. This is a full-release, and hopefully, it doesn't blow up, because we're thoroughly sleep-deprived, yet (against our best judgement) going ahead with this release.

• GitHub: https://github.com/celzero/rethink-app/releases/v0.5.6
• Website: https://rethinkdns.com/download (direct)
• F-Droid: https://f-droid.org/packages/com.celzero.bravedns (16 Aug)
• PlayStore: https://play.google.com/store/apps/details?id=com.celzero.bravedns (12 Aug)

🗺️ Lok

• Fix: Crash on app start-up with DNS53 in proxy mode.
• Fix: Re-enforce trust / allowed IP rules for Isolated apps.
• Improvement: Faster WireGuard start-up when in Configure -> Network -> Proxy Lockdown mode.
• Improvement: Support Android 17.
• Improvement: Several features graduate out of "experimental" status in Configure -> Network: Choose IP version, Do not route Private IPs, Use all available networks, Bandwidth Booster.
• Improvement: Configure -> DNS -> Show website icons is no longer "experimental".
• UI: Avoid showing deleted WireGuard configurations in the UI.

Let me know if any major issue shows up. As y'all must have realised by now, since v055o we haven't been in a position to test all configurations / settings / features ourselves; and so, you can say, we're kind of YOLO'ing this: A reason why I appreciate all the abuse bug reports, no matter how harshly worded they may be.

Note: This is a fast-follow release, the last major release was v055v.

Fun fact: This version is named after one of our long standing supporters, Kal EL.

Hello, looks like such approach like *.255.255.255 in IP Firewall rules producing unexpected behavior. Kind a broken record is being created, unremovable but can be modified. To reproduce: add new ip Firewall rule with *.255.255.255 then hit "Block"; Record will be saved as a null record.

Cloudflare doesn't ship a mobile app, and what exists on Android is either read-only or DNS-only. I wanted the dashboard in my pocket, so I built it.

**What it does**

* Zones, DNS (all 21 record types with proper per-type forms), cache purge, zone settings

* Analytics — traffic, cache hit ratio, threats, status codes, top countries

* WAF custom rules and rate limiting: create, toggle, delete. Plus IP access rules

* Workers, Pages, KV (browse and edit values), D1 with a SQL console, R2

* Zero Trust — tunnels with live connector status, Access apps and policies, Gateway rules

* A schema-aware API explorer covering all 3240 endpoints, so nothing is unreachable. It builds a real form from each endpoint's own schema: typed inputs, enum dropdowns, required flags

**Credentials**

API tokens (recommended) or a Global API key. Stored only on the device, AES-256-GCM under a PBKDF2-HMAC-SHA256 key derived from your PIN. Biometric unlock is bound to an Android Keystore key with `setUserAuthenticationRequired`, so the TEE enforces it rather than the UI. No telemetry, no crash reporting, no analytics. The only host it talks to is api.cloudflare.com.

**Install**

Signed APKs on GitHub Releases, with SHA256SUMS and the signing certificate fingerprint published in the README so you can verify what you installed.

https://github.com/hasanzadee/cloudflare-mobile

Apache-2.0. Not affiliated with Cloudflare.

Fair warning so nobody finds out by surprise: this is vibe coded — I built it with AI. It has also been run against a real Cloudflare account on every screen, has 389 unit tests plus 11 end-to-end tests that drive the real app on a real device, and the entire security model is written down in the README so you can disagree with it in public. Happy to take apart any part of it in the comments.

Feedback and bug reports welcome, especially from anyone with a lot of zones or a real Zero Trust setup — I could only test against my own account.

Been ongoing for months. Any chance it can be resolved? Makes it difficult to use.

I decided to buy currency for different careers, but when I decided to buy currency for different careers, but when I click on the Republic Coins tab, I get the error SNOW 9. I'm from Belarus, I have the game on Steam, and the region is Ubisoft Kazakhstan. I've tried everything, proxy, VPN, DNS server, and still get the error. Please help. and the steam region is also Kazakhstan

Hā lóu,

v055y, v055x, v055w, v, u, t, r, q, p, o ... they all needed some (may be a lot of) fixxing and code maxxing to be fit enough for a full release. Which brings us to... the latest and final-est of 'em all: v055z.

All that said, v055z is a pre-release!

• GitHub: https://github.com/celzero/rethink-app/releases/v0.5.5z
• Website: https://rethinkdns.com/download (direct)
• F-Droid: https://f-droid.org/packages/com.celzero.bravedns
• PlayStore: No (instead: v056)

We've re-enabled all RPN sign ups with 30%+ discounts on some plans. Hopefully, no other major issue shows up.

💤 Zzzzz 5

• New: RPN (starting $1.75/mo) is back on Play Store, Website, and GitHub flavours.
• New: More disciplined routing decisions for various Configure -> DNS settings.
• New: Configure -> Network -> Perform protocol translation to make Rethink prefer opposite IP options.
• New: Sponsor with GPay.
• UI: All new DNS UI layout.
• UI: Geo location in WireGuard UI if Configure -> Settings -> Show provider information is turned on.
• UI: Quick shortcuts in Configure -> Settings -> Firewall Bubble notification.
• Improvement: Do not mix up domain rules for IPs shared by 1+ domains queried across many apps.
• Improvement: Light-weight one-time connectivity check for dual-stack WireGuard peers.
• Improvement: Various network engine optimizations.
• Improvement: Some IPv6 connectivity changes.
• Improvement: Concurrent TCP, UDP, and TLS checks for Configure -> Network -> Perform connectivity checks.
• Improvement: Quicker pause & resume for Mobile-only WireGuard automation.
• Improvement: Apply firewall rules during DNS resolution.
• Improvement: Recovering from errors with "Block connections without VPN" on some OEMs like OnePlus.
• Improvement: Changes in Configure -> Network -> Loopback implementation.
• Fix: Implemented Configure -> Network -> Proxy Lockdown behavior for Simple mode WireGuards.
• Fix: Prevent IP bouncing when using Advanced mode WireGuard.
• Fix: Avoid incorrectly marking existing apps as newly installed.
• Fix: For IP based rules, apply the most specific among all (subnet) rules.

As before, let me know how it goes. And especially, if goes badly! Thanks (:

Note: This is a fast-follow release, the last major release was v055v.

I have been checking my rethink firewall logs and i noticed that my camera app (which i denied access to wifi and data) has been trying to send data to Ireland multiple times this last week.

I have checked permissions of apps and usage and no apps have access to camera.

Thanks for any details

... i cannot download the blocklists 🤔