4 ms·
I'd prefer a solution that does not just work for a specific browser, but instead blocks all traffic regardless of browser, application, virtual machine, ... T
by eatbitseveryday 9y ago
I'd prefer a solution that does not just work for a specific browser, but instead blocks all traffic regardless of browser, application, virtual machine, ...
That's just putting rules into /etc/hosts ?
edit - answered my own question :) Yes it will.
- ianai 9y agoIs there a way to export the list for a /etc/hosts.allow?
- jiaweihli 9y agoI use Little Snitch[1] (and its sibling Micro Snitch[2]) for filtering connections at the system level. I don't interact with it too often though, because I rarely install new apps. Not to say /etc/hosts doesn't work, these days I just find I prefer things with better UX. --- [1] https://www.obdev.at/products/littlesnitch/index.html https://www.obdev.at/products/littlesnitch/index.html [2] https://www.obdev.at/products/microsnitch/index.html https://www.obdev.at/products/microsnitch/index.html
- dotsh 9y agoUsing Little Snitch to block all Facebook connections is like using goat to land on moon...
- ReverseCold 9y agoWhat a funny example, why is that?
- dotsh 9y agoBecause it is completely impractical. I used LS but it's a waste of time to check and block ads servers or malicious domains, which is why most garbage should be blocked from hosts or dnsmasq.
- ekovarski 9y agoThe maintenance aspect of LS is definitely on the high side and only really dedicated folks will stick to it; if it were to come with auto-updated maintained lists it would most likely be used more
- jiaweihli 9y agoTo clarify, I whitelist my browser entirely in Little Snitch and delegate to uMatrix and other extensions. I also don't pre-emptively load in rules into Little Snitch - I have it running in active/interrupt mode, so it prompts me whenever it tries to make a new connection I haven't signed off on before. Unsurprisingly, not very many apps try to connect to Facebook.
- odammit 9y agoThat made me laugh out a boogie.
- alcover 9y agoLittle Snitch is for MacOS. As a linux user I desperately looked for an equivalent and found none. Douane was suggested. It's no good. What a sorry state of affair. We need a simple app-level filtering solution.
- qwerty456127 9y agoSame story. I have always been dreaming of a Linux equivalent for LittleSnitch. More than a decade has passes since I've switched to Linux, still nothing...
- cyphar 9y agoThere's OpenSnitch[1], though it hasn't been touched in a while. Someone needs to step up and maintain it (maybe I should do that...). [1]: https://github.com/evilsocket/opensnitch https://github.com/evilsocket/opensnitch
- hueving 9y agoDoes /etc/hosts support wildcarding subdomains?
- jsmthrowaway 9y agoNo. It supports no wildcards at all.
- deleted 9y ago[deleted]
- jsmthrowaway 9y agoEven better would be doing it on a device. It's a reason to have an intelligent router on your network where you run a custom dnsmasq or whatever, then you cover your phones and all the hootenanny that comes with a digital life. Like your fridge.
- Bedon292 9y agoConsider something like Pi Hole (https://pi-hole.net/ https://pi-hole.net/) as the DNS on your network. Where it will affect all devices on the network.
- iamspoilt 9y agoDoesn't support OS X though.
- dec0dedab0de 9y agowait do you mean you want to run it on OSX, or that the DNS in OSX is somehow different, and wont work with pihole as its server?
- ChrisSD 9y agoThe idea is you use some inexpensive hardware (like a Raspberry Pi) and simple set all your devices to use it as a DNS server.
- spartanatreyu 9y agoHow wouldn't it support OSX. You just set it up as the device that provides a mac with it's network. It doesn't have anything to do with OS's
- toxican 9y agoI've got a RaspberryPi Zero (WiFi via USB..ugh). Would that be too slow for DNS, or would having my DNS server be local vs remote negate that slow interface?
- Sir_Cmpwn 9y ago/etc/hosts won't work for your VM, probably