AFWall+ has the logging capability. Enable logs, then go try your downloads. It will tell which IPs/hosts are trying to connect. Then you decide whether to trust them and enable them.
UID 1000 is tricky, it encapsulates EVERYTHING android-system-related, including those apps that Onyx probably modified.
Download manager has a different UID.
I was using Yandex Browser with download manager on.
I mean, without Download Manager even KOReader cannot update itself.
|