Apple's apps bypass firewalls like LittleSnitch and LuLu on macOS Big Sur

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by Sporktacular on Tuesday October 20, 2020 @05:27PM (#24842512)

5 years ago I found LS was unable detect any traffic out of a VMWare virtual machine running on the same Mac. Sure the VM is running through some installed virtual network adapter, but if that's all it takes an attacker can set up one of her own. Cool Hollywood interface but I gave up on LS as a serious security tool right there.

[ Parent | on HN ]

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by _qulr on Tuesday October 20, 2020 @05:35PM (#24842587)

I can't speak about 5 years ago, but I was using Little Snitch with VMWare last year, and it worked. I had to specifically allow the VMWare process.

[ Parent | on HN ]

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by Sporktacular on Tuesday October 20, 2020 @06:18PM (#24842900)

Guest traffic was visible when the VM was in NAT mode, but when switched to Bridged mode traffic went straight through with LS unaware. I suppose LS was only sniffing the standard adapters, though this could have been improved since.

[ Parent | on HN ]

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by belthesar on Tuesday October 20, 2020 @08:18PM (#24843687)

That's likely because VMWare Workstation's bridge mode likely injects into the networking stack at the same point that Little Snitch does.

[ Parent | on HN ]

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by _qulr on Tuesday October 20, 2020 @08:05PM (#24843606)

I was only trialing VMWare before, so unfortunately I can't test this anymore.

[ Parent | on HN ]

Re:Apple's apps bypass firewalls like LittleSnitch and LuLu ... by Wowfunhappy on Tuesday October 20, 2020 @08:12PM (#24843641)

Heads up that VMWare Fusion has a free version on Mac as of this month. :)

[ Parent | on HN ]