4 ms·
Filtering any outbound traffic on those is either outright not supported or not worth attempting.
by blub 6y ago
Filtering any outbound traffic on those is either outright not supported or not worth attempting.
- heavyset_go 6y agoThis is an interesting opinion, considering that iptables has been able to do this for decades, and nftables can, too. It is trivial to filter outgoing traffic and there are even convenient GUIs to do so.
- blub 6y agoThe subject of this thread are application firewalls, like Little Snitch or https://github.com/evilsocket/opensnitch https://github.com/evilsocket/opensnitch. To be fair I haven't looked at the state of Linux app firewalls in years, maybe there's something better available, but *tables is not it.
- tssva 6y agoFiltering outbound traffic using iptables and the Windows firewall is supported. In addition there are multiple 3rd party software firewalls for Windows which also support filtering outbound traffic.
- blub 6y agoThe "firewalls" in the title of this thread refers to outbound application firewalls. There are products that behave like this on Windows, but they're typically part of a security suite which one may or may not want. Others are free and display ads or collect information about the user. I've used two products in the past, NetLimiter and ZoneAlarm. Back then NL was just getting some basic firewall features, since its main feature was throttling the connection per app. I used ZA as a free product, but now I see they have a paid version. Last time I checked a couple of years ago I also found GlassWire, but I didn't purchase it because it kept being detected as infected by VirusTotal and the dev didn't have a clue what was wrong. Frankly I don't know how trustworthy any of these apps are - this is a big problem with security software on Windows - you don't know if the anti-malware is going to behave like malware.