Why a handful of apps conflict
Three patterns cause almost all conflicts:
- Overzealous blocklists: a rare false positive where an app's analytics domain overlaps with something functional it needs.
- Fraud-detection heuristics: some banking apps flag modified network environments. Ironically they usually distrust remote VPNs — local filtering is transparent — but the most paranoid ones probe anyway.
- License/entitlement servers: streaming apps verify entitlements through endpoints that occasionally share infrastructure with ad systems.
The whitelist, done right
NULLOG's App Rules tab lists every installed package with its live request counters and a bypass switch. Direct-bypass means the app's traffic skips the filter entirely and connects through your normal network — the same as if the firewall were off, for that app only:
- Open App Rules and search for the misbehaving app.
- Toggle Bypass. The change applies immediately — no restart, no protection downtime for anything else.
- Verify the app works. Ninety-five percent of conflicts end here.
- For the remaining five percent, check the app's specific blocked domains in the log and report a filter false positive — blocklists get corrected continuously.
Which apps deserve a bypass by default
| App type | Bypass? | Reason |
|---|---|---|
| Banking & payments | Usually | Zero login friction; fraud heuristics stay happy |
| Corporate VPN / MDM | Yes | Nested tunneling can conflict |
| Streaming (Netflix etc.) | Rarely needed | Works filtered in most cases |
| Games with rewarded ads | Your choice | Rewards require ad views to load |
| Everything else | No — stay protected | Default-deny is the whole point |
The security trade-off, stated plainly
A bypassed app loses network filtering — that is the deal. It is the right trade for apps where reliability is non-negotiable (your bank) and the app itself is low-ad-risk. For everything else, keep filtering on: an app-level bypass is a scalpel, not a master switch. The failure mode of "just turn the blocker off" is that people forget to turn it back on. Per-app rules eliminate that failure mode.
Put it into practice with NULLOG
NULLOG runs every technique in this guide locally on your Android — ads, trackers and telemetry filtered in device memory. No root. No cloud. No logs.
Download NULLOG APK (v1.0.2)