i also built off the original opensnitch[1]. libnetfilterqueue is really great. i used bpftrace instead of ftrace to get the process metadata, but eventually r

i also built off the original opensnitch[1]. libnetfilterqueue is really great. i used bpftrace instead of ftrace to get the process metadata, but eventually removed it after frustration building bpftrace. currently it is a global inbound/outbound firewall with ui prompts. i’ve recently had success running archlinux packaged bpftrace in a privileged container, so will be adding process metadata back in soon. https://github.com/nathants/tinysnitch https://github.com/nathants/tinysnitch