4 ms·
Reminds me of that Windows marvel called Kerio Personal Firewall which allowed to restrict connections for any application, a feature that Linux should have had
by squarefoot 7y ago
Reminds me of that Windows marvel called Kerio Personal Firewall which allowed to restrict connections for any application, a feature that Linux should have had since forever and is becoming more and more important today. Most Linux FOSS apps may not call home, but closed hosted or emulated ones (through WINE for example) often do.
- rufugee 7y agoUm.... contributor, meet open source project. We’re glad you’re here...
- beagle3 7y agoLinux does do that, and has since the Kernel 2.2 or so; In fact, opensnitch is a user mode process thanks to Linux allowing that, whereas windows needed drivers last I checked (win 2000 days, but the network driver model was still the same for win 7 and even later iirc)
- squarefoot 7y agoI never knew about that, thanks. I always believed one had to either resort to address/packet filtering at machine level or limit access to networking to a certain uid/gid, then running the software under those credentials. But that would defeat the purpose of allowing access while being warned about that, so that for example one could check if an application is really phoning home for innocuous updates or connecting to some shady addresses for unknown purposes.
- pjmlp 7y agoWindows Filtering Platform also has a user mode component.
- beagle3 7y agoThat's good to know. Can it divert, modify and delay packets? Or just have a set of rules for go/no-go?
- pjmlp 7y agoNot sure, as I never used it. The filter engine runs in user space and several behaviors can be implemented as COM instances. https://docs.microsoft.com/en-us/windows/win32/fwp/windows-filtering-platform-architecture-overview https://docs.microsoft.com/en-us/windows/win32/fwp/windows-f...