Lockdown-iOS

> how organizations can secure any device ios or android if they can't track and control the network layer, period out of it, and there are zero carveouts for the OS itself around network traffic visibility. The closest I've seen is an on-device VPN like Lockdown Privacy , but it can't block Apple bypassing the VPN. https://lockdownprivacy.com/ | https://github.com/confirmedcode/Lockdown-iOS

NetGuard firewall doesn't run on iOS, so there's no point in comparing to Apple. For those on Android, NetGuard is open-source, https://github.com/M66B/NetGuard On iOS, Lockdown firewall is open-source, https://github.com/confirmedcode/Lockdown-iOS

Lockdown claims to be open-source. Their appstore client has paid mode for per-app blocklists. I don't know if they support per-app allow lists. https://github.com/confirmedcode/Lockdown-iOS

This repo has four lists that are look extensive but not sure if it's perfect. https://github.com/confirmedcode/lockdown-ios/blob/master/Lo... https://github.com/confirmedcode/lockdown-ios/blob/master/Lo... https://github.com/confirmedcode/lockdown-ios/blob/master/Lo... https://github.com/confirmedcode/lockdown-ios/blob/master/Lo...

The source indicates that they check-in DNS blocklists as JSON files [0] and txt files (one of which has Facebook IPv4s) [1]. So, the updates to those would require app updates, I guess, unless there's OTA for the blocklists somewhere in the code that I missed. My experience with running client-side DNS based blockers are they consume additional battery and need a lot of RAM if you block with aggressive lists that have more than 1M+ domains. Besides, DNS based blockers can be circumvented by apps that do their own resolution over DoH or use clever techniques like CNAME cloaking [2]. Some nameservers such as the one run by Cloudflare flatten the CNAMES [3], effectively rendering even nextdns' solution ineffective [4]. I must also note that, Cloudflare does hide origin-IP if they are setup to reverse-proxy the traffic, which then would rend

Next step is to download Lockdown, open source and on device firewall. It also offers a VPN with an in-app purchase (kinda confusing when you are setting it up), but for free you get the firewall only. Easy to enable and block known ad-trackers (including FB sdk and Google Ads). Highly recommend. It's also made by ex Apple engineers, in case that helps for building trustworthiness. https://apps.apple.com/us/app/lockdown-apps/id1469783711 https://github.com/confirmedcode/lockdown-ios