Repository navigation
Unauthorised Internet Access (rules corruption) 055q #2092
Description
My set-up: I have block newly installed apps by default and run a WG proxy for all apps. In the Network setting I have IPv4 as my chosen IP version.
- I installed MX Player app and it didn't show in app list. On rebooting it appears as allowed and associated with a previously unistalled app Litube.
Ditto, the alixexpress app, which piggy-backs off the unistalled app Barclaycard.
For the uninstall glitch see 2050
screenshots
I have Google Player Store blocked, or more precisely Isolated with no IP or domain rules, yet it still appears to be making loads of (unblocked) DNS requests.
I am also getting other strange DNS activity.
Activity
[-]Unauthorised Internet Access (rules corruption)[/-][+]Unauthorised Internet Access (rules corruption) 055q[/+]ignoramous commentedon Aug 16, 2025
Wow. The db has gone berserk. Did you run a backup/restore on the version prior to upgrade or on the upgraded version? If so, did the backup come from a different device?
luckygitt commentedon Aug 16, 2025
I did a restore (from 55n, IIRC), and from the same device.
hussainmohd-a commentedon Aug 16, 2025
@luckygitt Thank you for the detailed report!
This issue happened because of how we handle tombstone apps which was implemented as part of v055o. When an app is uninstalled, Rethink retains it data in the database for 7 days before removing it. The idea is that if you reinstall the same app within that time, all the app related rules come back automatically without having to set them up again.
In this case, there was a bug in that logic which caused this issue. We have fixed it, and the fix will be part of the next release v0.5.5r (coming in a day or two). Also there is a fix for the domain rules being ignored.
Regarding Google Play store in Isolate mode, the check for isolate mode happens when an app makes real network connections, not on DNS requests. As the IPs to apply are known during connection time. That’s the reason there are DNS lookups from the Google Play app. Do you see the corresponding logs in the Network tab as blocked?
luckygitt commentedon Aug 17, 2025
Network connections are correctly blocked (whether it be GPS or another app.). It's only in the DNS tab that they "leak".
Fix: celzero#2050 improved app info tombstone logic
hussainmohd-a commentedon Oct 14, 2026
@luckygitt Could you please let us know whether you are still experiencing this issue in the latest versions.
luckygitt commentedon Oct 16, 2026
This issue was was fixed many releases back, thanks (currently using 0.58).