AdvertisementRemove ads, dark theme, and more with

What's new in ShizuWall (github version) 4.4

Changelog

Added Arabic translation.
Added Root Support for executing firewall commands #68
Improved logging for LADB.
Improved Smart Foreground working method. It's stable enough so removed beta tag.
Added Scroll to Top button.
Edited Firewall toggle to show working method.
Re-designed settings button searchbox etc.

Full Changelog: v4.3...v4.4

Verified safe to install (read more)

Scroll to available downloads

A more recent upload may be available below!

About ShizuWall (github version) 4.4

AdvertisementRemove ads, dark theme, and more with

Premium

ShizuWall

Android firewall without root or VPN.
Privacy-first, local-only, powered by Shizuku / local ADB daemon / Root.

Star History

Why ShizuWall

No VPN: avoids packet interception and persistent VPN tunnel side effects.
Per-app network control: toggles app networking through Android's connectivity chain-3 controls.
Privacy-first by design: offline-first, no analytics, no telemetry, no tracking.
Automation ready: supports adb broadcast commands for scripts and task automation.
Control Methods: ShizuWall provides three convenient ways (Quick Settings Toggle, App Widget, Floating Firewall Button) to control the firewall.

Screenshots

Requirements

Android 11 (API 30) or higher
One control backend: Shizuku, local ADB daemon or root access

Control Backends

ShizuWall supports three methods to execute firewall commands:

Method	Description	Setup
Shizuku	Secure API that communicates with system services. Requires Shizuku app. Forks are supported.	Install and setup Shizuku app, grant permissions
Root	Direct root access.	Root your device using standard methods
LibADB	Local ADB daemon connection via wireless debugging.	Enable wireless debugging and pair daemon in Developer Options (Guide is in app)

How It Works

ShizuWall uses Android's Chain 3 (connectivity chain) to control per-app networking. These are the platform commands executed through Shizuku or the local daemon:

ADB Chain 3 Commands

# Enable firewall framework cmd connectivity set-chain3-enabled true  # Block specific app cmd connectivity set-package-networking-enabled false <package.name>  # Unblock specific app cmd connectivity set-package-networking-enabled true <package.name>  # Disable firewall framework cmd connectivity set-chain3-enabled false

Chain 3 is an Android platform mechanism that intercepts and controls per-package network access at the system level, allowing fine-grained firewall control.

Automation (ADB Broadcast)

You can control ShizuWall from scripts and automation tools.

Action: shizuwall.CONTROL
Component: com.arslan.shizuwall/.receivers.FirewallControlReceiver

Extras

state (boolean, required): true = enable, false = disable
apps (string, optional): CSV package list. If omitted, ShizuWall uses saved selected apps.

Examples

# Enable firewall for saved selected apps adb shell am broadcast -a shizuwall.CONTROL -n com.arslan.shizuwall/.receivers.FirewallControlReceiver --ez state true  # Disable firewall for saved selected apps adb shell am broadcast -a shizuwall.CONTROL -n com.arslan.shizuwall/.receivers.FirewallControlReceiver --ez state false  # Enable firewall for specific packages adb shell am broadcast -a shizuwall.CONTROL -n com.arslan.shizuwall/.receivers.FirewallControlReceiver --ez state true --es apps "com.example.app1,com.example.app2"  # Disable firewall for specific packages adb shell am broadcast -a shizuwall.CONTROL -n com.arslan.shizuwall/.receivers.FirewallControlReceiver --ez state false --es apps "com.example.app1,com.example.app2"

One of the control backends (Shizuku, local ADB daemon or Root) must be active for broadcasts to succeed.

Notes & Limitations

Firewall rules are cleared on reboot by Android platform behavior.
Rebooting the device resets any active ShizuWall-applied network blocks.
The app requests android.permission.INTERNET only for wireless debugging pairing (LibADB local daemon connection).

Build (Developers)

App

./gradlew assembleRelease

Daemon

The on-device daemon is compiled to app/src/main/assets/daemon.bin.

Prerequisites

Android SDK
Java 11
d8 (Android Build Tools)

Compile

Open scripts/compile_daemon.sh.
Update SDK_PATH, BUILD_TOOLS_VER, and PLATFORM_VER for your environment.
Run:

chmod +x scripts/compile_daemon.sh ./scripts/compile_daemon.sh

Security Disclaimer

ShizuWall is provided "as is" without warranty of any kind.

By using this app, you acknowledge that it relies on advanced system permissions (Shizuku/ADB/Root), and you accept all related risks. The developer is not responsible for damages such as system instability, data loss, service interruption, or side effects from blocked networking.

Always verify which apps you block.