6 ms·

Reminds me of good old Kerio Personal Firewall on Windows back in the 90s. If the UI gets some more love, I see ebpfsnitch take off like a rocket :)

by spyc 6y ago

EMM_386 6y ago
On Windows, Malwarebytes (now BiniSoft) still maintains a decent free product called Windows Firewall Control that works in a similar way. It augments the existing firewall. https://www.binisoft.org/wfc https://www.binisoft.org/wfc
- sloshnmosh 6y ago
  WFC is an excellent Windows based firewall. It also has the option to see the location of the executable trying to access the web and to also upload a hash of the file to VirusTotal. I have been using this back before when it was a paid program (I think it was only $15 for lifetime use) and before it was purchased by MalwareBytes. I no longer use any Windows computers but I install it on all my friends and families Windows PC’s. I really wish there was something similar for Linux.
  - dhaavi 6y ago
    We are building the Portmaster, which can do some of these things already. Currently looking for testers: https://safing.io/portmaster/ https://safing.io/portmaster/
squarefoot 6y ago
> Reminds me of good old Kerio Personal Firewall on Windows back in the 90s. That was my first thought as well. Back then Kerio Personal Firewall was a godsend, and seeing live how much software (which on windows was 99.9% closed) was attempting to phone home behind the user, became an eye opener to many of us.
- dhaavi 6y ago
  If you'd like to try a modern version of that - we are looking for testers: https://safing.io/portmaster/ https://safing.io/portmaster/
  - squarefoot 6y ago
    Doing that on my Debian rolling machine just now. (Linux 5.7.0-1-amd64 #1 SMP Debian 5.7.6-1 (2020-06-24) It installed flawlessly after satisfying the libnetfilter-queue1 dependency, currently I'm playing with it, I like the granularity that allows blocking/allowing different domains accesses from within a process, such as for example a tab in Firefox. I'm curious to test it in the next days with Windows closed software run under WINE to see what they do under the hood. So far it seems really well made, I believe it would deserve a full HN article.

Reminds me of good old Kerio Personal Firewall on Windows back in the 90s. If the UI gets some more love, I see ebpfsnitch take off like a rocket :)

by spyc 6y ago

Reminds me of good old Kerio Personal Firewall on Windows back in the 90s. If the UI gets some more love, I see ebpfsnitch take off like a rocket :)

EMM_386 6y ago

On Windows, Malwarebytes (now BiniSoft) still maintains a decent free product called Windows Firewall Control that works in a similar way. It augments the existing firewall. https://www.binisoft.org/wfc https://www.binisoft.org/wfc

sloshnmosh 6y ago
WFC is an excellent Windows based firewall. It also has the option to see the location of the executable trying to access the web and to also upload a hash of the file to VirusTotal. I have been using this back before when it was a paid program (I think it was only $15 for lifetime use) and before it was purchased by MalwareBytes. I no longer use any Windows computers but I install it on all my friends and families Windows PC’s. I really wish there was something similar for Linux.
- dhaavi 6y ago
  We are building the Portmaster, which can do some of these things already. Currently looking for testers: https://safing.io/portmaster/ https://safing.io/portmaster/

squarefoot 6y ago

> Reminds me of good old Kerio Personal Firewall on Windows back in the 90s. That was my first thought as well. Back then Kerio Personal Firewall was a godsend, and seeing live how much software (which on windows was 99.9% closed) was attempting to phone home behind the user, became an eye opener to many of us.

dhaavi 6y ago
If you'd like to try a modern version of that - we are looking for testers: https://safing.io/portmaster/ https://safing.io/portmaster/
- squarefoot 6y ago
  Doing that on my Debian rolling machine just now. (Linux 5.7.0-1-amd64 #1 SMP Debian 5.7.6-1 (2020-06-24) It installed flawlessly after satisfying the libnetfilter-queue1 dependency, currently I'm playing with it, I like the granularity that allows blocking/allowing different domains accesses from within a process, such as for example a tab in Firefox. I'm curious to test it in the next days with Windows closed software run under WINE to see what they do under the hood. So far it seems really well made, I believe it would deserve a full HN article.