RFE: Log exclusion

[NealPierceGH]

I use a lot the Logs section, this is a killer feature, but it lacks a way to exclude an app from these logs. Most of the time, these logs are desired because they help a lot to debug issues and help fine tune the firewall rules. This is somehow related to #2168 but a bit different.

1. In App settings, an app could be globally excluded from the logs
2. In App settings -> Domain rules (in Isolate mode) -> a flag for each configured domain/ip rule to exclude from the logs

Here are some use cases

• Thunderbird in Isolated mode. It can connect to imap.example.com and smtp.example.com and that's all. Now I can exclude Thunderbird globally from the logs and live happily ever after 😄

• BankApp in Isolated mode. I let it connect to .mybank.com but block every request to firebase, app-measurement.com, etc and all that spy/marketing crap so these domains are excluded from the logs to avoid visual pollution but I don't exclude BankApp globally because if some day it tries to connect to a legitimate mybank.somecloud.com I want to spot it and act accordingly.

I'm sure there are other use cases one can think of. With less pollution, it's easier to spot what apps are trying to do.

Currently, on my Samsung some apps fill up pages and pages of Firewall and DNS logs. This is useless pollution and these are required system apps I can't disable without making the OS unstable.

[ignoramous]

Think it might be simpler to:

• log only blocked connections
• log only allowed connections
• log all connections

Per IP / domain logging sounds super unnecessary to me, especially given the amount of UI work it'll require.

• Allow / block per-app logging #765

[NealPierceGH]

Unless I'm mistaken, only a check box (and a corresponding flag in the sqlite db) would be needed.

The way I see it

• Logs -> Network, click some app trying to reach some address to get the popup window where there are the Block, bypass, exclude, isolate this app, Block, trust this IP for this app and Block, trust domain(s) for this app selectors and just add a check box Don't log anymore
• In Apps click some app to get the Unmetered, Metered, Isolate, etc panel and click on Domain rules and for each IP+Port/Domain the same checkbox could be present

Or is this way more complicated than I think?

[ignoramous]

Yeah, too many UI elements if we do this per IP / domain.