3 ms·
I'm using OpenSnitch for over 2 years now on my desktop systems. Can fully recommend. I've set the default timeout to 30 seconds so I have time to decide/chime
by cookiengineer 5y ago
I'm using OpenSnitch for over 2 years now on my desktop systems. Can fully recommend.
I've set the default timeout to 30 seconds so I have time to decide/chime in, and the default action to one-time deny so it doesn't mess up my rules when I'm not at the computer.
Compared to previous Linux firewalls it's able to filter by binary and command line path (e.g. is able to differ between python server.py and python malware.py), which I think is pretty amazing.
Though I have to say due to the nature of wine, allowing things in nice rules there is a little harder (cause everything uses rundll32.dll anyways :-/ ).