Is there a firewall solution for Linux that will notify me of any connections that other processes try to establish, and let me allow/deny each connection manually?
I would like to get more concious about which tools are connecting to the internet, and how often.
8 Comments
zer0@programming.dev · 28 pts · 355d
If you're looking for outgoing requests, check out OpenSnitch. It should do exactly what you're looking for.
myotheraccount@lemmy.world · 3 pts · 355d
Thank you! Exactly what I'm looking for.
boredsquirrel@slrpnk.net · 5 pts · 355d
You are looking for an outbound firewall
Like the others recommended
OpenSnitch has multiple detection ways, eBPF might require activation in the kernel, there are others too, 4 in total
For me on NixOS it worked in eBPF and proc mode. NixOS' weird binary placement makes rules less secure I guess as it can only check commands (if it were nix-native it could use a function for that)
And I had tons of "unknown process"es which I needed to allow to not break things, which kinda makes the thing useless
markus@hubzilla.markusgarlichs.de · 4 pts · 355d
@myotheraccount
#^https://github.com/evilsocket/opensnitch
#^https://safing.io/
myotheraccount@lemmy.world · 3 pts · 355d
Thanks 🙏 Opensnitch is exactly what I'm looking for
redlemace@lemmy.world · 1 pts · 355d
You could drop all and use the log function to see all traffic denied
myotheraccount@lemmy.world · 2 pts · 355d
Thanks, I'm aware, but I'm looking for an interactive application that lets me create rules on the fly. I don't want to have a one-time session where I check which tools connect to what, but rather something that interrupts me throughout the day...
If such a thing doesn't exist, tipps on how to build it are welcome too though.
redlemace@lemmy.world · 1 pts · 355d
Script that monitors the logs and uses notify-send to throw a popup? Not yet fully interactive but could be a start