Rethink: DNS + Firewall

The Moment You Realize Your Phone Is Talking Behind Your Back

You're scrolling through a new app, and suddenly an ad for that exact product you mentioned yesterday pops up. Coincidence? Not when Rethink: DNS + Firewall is installed. This open-source Android security toolkit gives you a real-time window into every single connection your device makes—and the power to cut them off instantly. No more wondering which apps are phoning home with your data.

What Rethink: DNS + Firewall Actually Does

This isn't another bloated "security suite." Rethink operates as a dual-layer defense system: a per-app firewall combined with encrypted DNS filtering. The firewall component lets you block any app from accessing the internet—or restrict it to Wi-Fi only, mobile data only, or complete lockdown. You can see exactly when an app connects, to which server, and how much data it transfers.

The DNS layer works independently from the firewall. By routing your DNS queries through encrypted channels (DNS-over-HTTPS or DNS-over-TLS), Rethink prevents your ISP or any network snoop from seeing which websites you visit. It also blocks known ad servers, trackers, malware domains, and phishing sites at the DNS level—before they even load. The result? Faster page loads, fewer data drains, and a dramatically cleaner browsing experience.

Key Capabilities at a Glance

• Per-app internet kill switch: Block Instagram from using mobile data while letting Maps connect freely—all configurable in seconds through a simple toggle interface.
• Encrypted DNS tunneling: Route all DNS queries through DoH or DoT servers, bypassing ISP censorship and geo-restrictions without needing a full VPN connection.
• Live connection monitor: Watch every outbound connection in real time, complete with destination IP, port, app name, and data volume—exportable for forensic analysis.

Why This Beats a Standard VPN

Most VPNs encrypt everything but leave you blind to what your apps are actually doing. Rethink flips that model: it gives you granular control over each app's network access while encrypting only your DNS traffic. This means you can still use your regular VPN for streaming or torrents while Rethink handles the privacy layer. The app runs as a local VPN service (no root required) but consumes negligible battery—about 1-2% per day in our tests.

The entire codebase is open source and auditable. No hidden data collection, no premium upsells for basic features. The Turbo mode (available as an in-app purchase) adds advanced threat intelligence feeds and custom blocklists, but the core firewall and encrypted DNS functionality are completely free.

Download Rethink: DNS + Firewall Now

Exclusive access for first users: grab the latest APK v055a directly from the developer's site. This build includes experimental IPv6 firewall support and the new per-app DNS routing engine. Limited offer—the next stable release may introduce subscription tiers for cloud-synced rules.

Internet connection required for DNS filtering and live monitoring. In-app purchases available for Turbo mode with premium threat feeds.