OpenSnitch is a GNU/Linux port of the Little Snitch application firewall

Re:OpenSnitch is a GNU/Linux port of the Little Snitch appli... by dikei on Friday January 31, 2020 @08:12PM (#22207772)

There's loads of firewall application on Windows: ZoneAlarm, Comodo, Tinywall. Some use their own packets filtering driver, while some are just frontend for Window's built-in firewall.

I used to run these for a while, but it gets annoying real fast with large amount of pop-up. So now I stop using them, and only block known bad IPs using my Pi-hole, allowing everything else.

[ Parent | on HN ]

Re:OpenSnitch is a GNU/Linux port of the Little Snitch appli... by tbyehl on Friday January 31, 2020 @10:05PM (#22208349)

> only block known bad IPs using my Pi-hole

I'd consider this too nit-picky in most contexts, but we're in a thread about connection-blocking software. PiHole is a DNS server. It cannot block IPs or connections.

I'm with you that Little Snitch style filtering gets annoying, but DOH is going to obsolete PiHole / DNS filtering very fast. Can't filter DOH at the gateway without taking on all the other hassles of MITM and can't prevent an app from using whatever DOH server it chooses.

[ Parent | on HN ]