rethink-app icon indicating copy to clipboard operation
rethink-app copied to clipboard
verified publisher icon celzero

feat: Add app names to DNS logs

Open ColorfulRhino opened this issue 11 months ago • 3 comments

Originally coming from Netguard, I am missing the feature which clearly links a DNS request to an app in the DNS logs. While you can see which app actually connected to an IP address in the network logs, you can't for example see if an app:

  1. An app requests many malicious DNS lookups
  2. DNS lookup gets blocked by RethinkDNS since it's a blocked domain (tracking/ads/malware etc)
  3. You can see that some app tried to connect to this blocked domain, but you can't see which app it was
  4. The DNS logs have many entries that this domain was blocked, but since it was blocked the app can't connect to it, which means it does not show up in the network logs at all
  5. If you try to figure out which app is requesting all those malicious domains (e.g. to delete it since you don't want such an app on your device), it's currently difficult to determine the causing app

Since Netguard is able to match a blocked domain request to the app requesting it, and Rethink can already match connections to apps, I believe this should be possible to implement in RethinkDNS as well. I suggest to add the app's name (and maybe its icon?) either to the main DNS log page or at least to the details which pop up when clocking on a logged DNS request.

What do you think?

ColorfulRhino avatar Feb 12 '25 17:02 ColorfulRhino

Makes sense. Rethink shows domain names in Configure -> Logs -> Network tab today if running in DNS + Firewall mode.

As for DNS tab, Rethink will show app name in v055o (the upcoming version) on Android 11 or later.

For Android 10 or earlier, users will have to turn ON:

  1. Configure -> DNS -> Advanced DNS filtering.
  2. Configure -> DNS -> Split tunnel DNS.

ignoramous avatar Mar 09 '25 22:03 ignoramous

As for DNS tab, Rethink will show app name in v055o (the upcoming version) on Android 11 or later.

Sounds great, thank you!

For Android 10 or earlier, users will have to turn ON:

Rethink still supports Android 10? 😄

ColorfulRhino avatar Mar 12 '25 17:03 ColorfulRhino

Rethink still supports Android 10? 😄

Rethink works on Android 6+. But yeah, don't ask...

ignoramous avatar Mar 13 '25 06:03 ignoramous

On Android 12+, Rethink v055o onwards will now show the app name in Configure -> Logs -> DNS (tab).

On Android 11 & below, end users will have to turn ON from Configure -> DNS:

  1. Advance DNS filtering &
  2. Split DNS.

https://github.com/celzero/firestack/issues/136

ignoramous avatar Aug 09 '25 00:08 ignoramous