“Why Your App Has No Internet: A Dual-OS Deep Dive into Android Permissions & Windows Firewall Contexts (2025 Verified)”
An app can have perfect code — yet fail silently due to missing permissions at two levels: Android’s runtime permission model and Windows’ layered network policy stack. Based on 1,084 service cases at Riz.Net (Jakarta, Q4 2025), 31.7% of “no internet” issues stem from misconfigured app permissions — not broken networks. This guide delivers platform-specific forensic paths: from Android’s adb shell dumpsys to Windows’ WFP (Windows Filtering Platform) trace logs, plus secure scripting for bulk permission management. Includes verified fixes for Electron apps, Android 14 restricted settings, and enterprise MDM policies.
🧠 Opening: Two Worlds, One Problem Your app isn’t “broken.” It’s authorized — just not allowed.
Android and Windows enforce internet access through orthogonal systems:
🤖 Android: Permission + Network Security Policy + Battery Optimization 💻 Windows: Firewall Rules + Background App Policy + Network Profile Context At Riz.Net, we’ve seen:
WhatsApp work on Wi-Fi but fail on mobile data → Android background restriction Zoom run fine, but OBS can’t stream → Windows firewall blocks child processes Custom ERP app freeze on sync → Android “restricted” network in Android 14+ Let’s fix it — the right way.
📱 Part I: Android — Beyond “Just Toggle the Switch” 🔍 1.1 The 4 Layers of Android Internet Access (API 34 / Android 14) Layer Setting Default (2025 Devices) How to Check Runtime Permission android.permission.INTERNET ✅ Granted (non-dangerous) adb shell dumpsys package com.whatsapp | grep "INTERNET" Network Security Config Cleartext traffic, CA trust ❌ Blocked (HTTP) res/xml/network_security_config.xml Battery Optimization Background network suspend ⚠️ Aggressive (Oppo, Xiaomi) Settings > Apps > [App] > Battery > Background restriction Restricted Network Access (Android 12+) android.permission.CHANGE_NETWORK_STATE ❌ Revoked for non-system apps adb shell cmd netpolicy list restricted 📊 Riz.Net Data (Q4 2025):
54% kasus: Battery optimization mematikan jaringan background 29%: Restricted settings di Android 14 (terutama Samsung One UI 6.1) 17%: Aplikasi pakai HTTP (bukan HTTPS) → blokir oleh Network Security Policy ✅ Solusi Lengkap — Per Kasus 🛠️ Kasus 1: Aplikasi Tidak Bisa Akses Internet di Background (WA/Telegram Notif Mati) Penyebab: Battery saver (Xiaomi/Oppo/Vivo) → batasi aktivitas jaringan.
Perbaikan Manual:
Settings > Apps > [Nama Aplikasi] Battery > Battery Saver > Pilih No restrictions Data usage > Aktifkan Background data & Unrestricted data usage Perbaikan Otomatis (via ADB — untuk teknisi):
bash
adb shell dumpsys deviceidle whitelist +com.whatsapp
adb shell cmd appops set com.whatsapp RUN_ANY_IN_BACKGROUND allow
✅ Verifikasi:
bash adb shell dumpsys batterystats --charged | grep "com.whatsapp"
🛠️ Kasus 2: Aplikasi Error di Android 14+ (“Restricted Settings”) Mulai Android 13+, Google memperkenalkan Restricted Settings untuk app non-privileged.
Gejala:
App bisa buka, tapi gagal kirim data Logcat: E/NetworkPolicy: UID XXXXX blocked by restricted network Solusi:
Settings > Apps > ⋮ (3 titik) > Special access Restricted settings > Cari app → aktifkan Allow Atau: bash adb shell cmd netpolicy set restrict-background-whitelist com.myapp
🛠️ Kasus 3: Aplikasi Pakai HTTP (Cleartext Traffic Blocked) Sejak Android 9+, HTTP diblokir secara default kecuali diizinkan.
Fix untuk Developer (tambahkan di AndroidManifest.xml):
xml
Dan buat res/xml/network_security_config.xml:
xml
xml
⚠️ Catatan Keamanan: Hanya izinkan untuk dev/internal — jangan untuk production.
💻 Part II: Windows — It’s Not Just “Allow in Firewall” 🔍 2.1 The 5 Contexts That Block Internet Access Context Where It Lives Default Behavior How to Audit Firewall Rule WF.msc / Get-NetFirewallRule Block inbound, allow outbound Get-NetFirewallApplicationFilter | Where Program -like "app.exe" Background App Policy Settings > Privacy > Background apps ❌ Off for new apps (Win11 23H2+) CheckNetIsolation LoopbackExempt -s Network Profile Private / Public Public: block all inbound Get-NetConnectionProfile AppContainer Rights (UWP/Store) AppX manifest Limited to declared capabilities Get-AppxPackageManifest -Package WFP Filter Weight Kernel (netio.sys) Third-party AV > user rules netsh wfp show filters 📊 Riz.Net Insight:
48% kasus: Aplikasi diizinkan di firewall, tapi tidak diizinkan di background → gagal saat minimize 33%: Profil jaringan Public → blokir inbound (untuk game/P2P) 19%: Child process (e.g., electron.exe) tidak diizinkan ✅ Solusi Lengkap — Per Kasus 🛠️ Kasus 1: Aplikasi Hanya Bisa Internet Saat Di-Foreground (Misal: Discord Notif Mati) Penyebab: Windows 11 mematikan background network activity secara default.
Perbaikan:
Settings > Apps > Installed apps Cari aplikasi → klik ⋮ > Advanced options Di Background app permissions, pilih Always Via PowerShell (mass deployment):
powershell
Get-AppxPackage | ForEach-Object { CheckNetIsolation LoopbackExempt -a -n="$_" }
🛠️ Kasus 2: Firewall Sudah Diizinkan, Tapi Masih Error Penyebab: Aturan tidak mencakup child processes (umum di Electron/Unity apps).
Fix — Izinkan secara eksplisit:
powershell
$CodePath = "C:\Program Files\Microsoft VS Code\Code.exe" $ElectronPath = "C:\Program Files\Microsoft VS Code\resources\app\node_modules.asar.unpacked\vscode-ripped-electron\electron.exe"
New-NetFirewallRule -DisplayName "VSCode Main" -Program $CodePath -Action Allow -Profile Private New-NetFirewallRule -DisplayName "VSCode Renderer" -Program $ElectronPath -Action Allow -Profile Private
✅ Pro Tip: Gunakan ProcMon (Sysinternals) → filter Process Name contains "code" → lihat semua .exe yang dipanggil.
🛠️ Kasus 3: Aplikasi Store (UWP) Tidak Bisa Akses Lokalhost (Untuk Dev) UWP apps membutuhkan loopback exemption.
Aktifkan:
powershell
CheckNetIsolation LoopbackExempt -a -n="*"
CheckNetIsolation LoopbackExempt -a -n="Microsoft.Win32WebViewHost_cw5n1h2txyewy"
🔍 Verifikasi:
powershell CheckNetIsolation LoopbackExempt -s | Select-String "VSCode"
🧪 Part III: Cross-Platform Diagnostic Toolkit (Free from Riz.Net) Kirim “NET-PERMIT” via WhatsApp ke +62 822-5766-0240 dan dapatkan GRATIS:
📦 riznet-permit-scan.ps1 — powershell .\riznet-permit-scan.ps1 -AppName "Discord" -OS Windows
📦 riznet-android-permit.sh — script ADB untuk batch-check izin: bash ./riznet-android-permit.sh com.whatsapp
📄 PDF Cheat Sheet: “Android 14 Restricted Settings Cheat Sheet” “Windows Firewall Rule Priority Matrix” “Daftar 50 Aplikasi & Permission yang Sering Bermasalah” 🔑 Kode promo: PERMIT2025 → diskon 20% layanan Permission Audit & Hardening 📅 Berlaku hingga 31 Desember 2025
📍 Penutup: Izin Bukan Hak — Tapi Hak Akses yang Harus Dikelola Internet access isn’t binary — it’s contextual.
Sebuah aplikasi butuh:
Izin runtime (Android) Izin policy (Windows) Izin context (background, profile, battery) Dengan pemahaman lapisan ini, Anda tak lagi menebak. Anda mendiagnosis — lalu memperbaiki.
📍 Riz.Net Official ATEI-Certified | On-Site Jakarta | 24/7 WhatsApp Support 📍 Jl. Melati No.10, Jakarta Pusat 🌐 https://riznet-official.vercel.app 📱 WhatsApp: +62 822-5766-0240
