5 ms·
I wonder if a Little Snitch type application could look at both data flows and correlate the two. Anything that packet filtering detects that isn't also detecte
by ballenf 6y ago
I wonder if a Little Snitch type application could look at both data flows and correlate the two. Anything that packet filtering detects that isn't also detected by content filtering could itself be handled with custom rules.
- floatingatoll 6y agoIt might be able to report that unfiltered traffic occurred, assuming it can detect unfiltered traffic using pcap, but it wouldn't be readily possible to prevent the initial packet from being sent prior to a rule specifically being created to prohibit it. Operating a system in PF deny-all default would cure this, as long as LS carefully curated a list of PF allows. It's possible there are external constraints preventing more widespread use of PF, like "Is this allowed on Mac App Store?".