14.2K ·GitHub
What is this?
OpenSnitch is an interactive application firewall for GNU/Linux, inspired by macOS's 'Little Snitch', that lets you see and approve or block each app's outgoing connections in real time.
OpenSnitch is an interactive application firewall for GNU/Linux, inspired by macOS's 'Little Snitch', that lets you see and approve or block each app's outgoing connections in real time.Is this a GUI app or a background daemon?It's both: a background component intercepts outbound connections and pops up a desktop GUI for you to allow or deny them, and the same GUI can also configure your system's nftables firewall rules and manage multiple OpenSnitch nodes centrally.
It's both: a background component intercepts outbound connections and pops up a desktop GUI for you to allow or deny them, and the same GUI can also configure your system's nftables firewall rules and manage multiple OpenSnitch nodes centrally.Do I need anything besides apt or dnf to get it running?No extra tooling is required beyond your system's package manager (apt or dnf) to install the provided deb/rpm packages, which include both the filtering daemon and the GUI.
No extra tooling is required beyond your system's package manager (apt or dnf) to install the provided deb/rpm packages, which include both the filtering daemon and the GUI.Will it run on any Linux distro, or only Debian/Fedora based ones?Only official deb and rpm packages are provided, so distros outside the Debian/Ubuntu or Fedora/RHEL families may need to build it manually; it is Linux-only and has no Windows or macOS version.
Only official deb and rpm packages are provided, so distros outside the Debian/Ubuntu or Fedora/RHEL families may need to build it manually; it is Linux-only and has no Windows or macOS version.What can OpenSnitch do besides blocking individual connections?It can block ads, trackers and malware domains system-wide, configure your Linux firewall (nftables) including inbound policies, manage multiple OpenSnitch nodes from one centralized GUI, and integrate with SIEM systems.
It can block ads, trackers and malware domains system-wide, configure your Linux firewall (nftables) including inbound policies, manage multiple OpenSnitch nodes from one centralized GUI, and integrate with SIEM systems.Why is it compared to Little Snitch?Little Snitch is a well-known interactive outbound firewall for macOS; OpenSnitch brings that same 'ask before an app connects out' workflow to Linux, which lacks a native equivalent.
Little Snitch is a well-known interactive outbound firewall for macOS; OpenSnitch brings that same 'ask before an app connects out' workflow to Linux, which lacks a native equivalent.Is OpenSnitch free to use?Yes, it's released under the GPL-3.0 license and is free and open source, though the project accepts donations to support its maintainers.
Yes, it's released under the GPL-3.0 license and is free and open source, though the project accepts donations to support its maintainers.What are similar projects?portmaster, blocklist-abuseipdb, ProxyBridge, OhMyKeymint, LuLu, airgorah, web-check, GoLiveBypass
portmaster, blocklist-abuseipdb, ProxyBridge, OhMyKeymint, LuLu, airgorah, web-check, GoLiveBypassWhich topics is it in?ebpf, malware, firewall, linux-app, network-security, privacy-tools, sysadmin, cybersecurity, security-tools, gplv3, networking, go
ebpf, malware, firewall, linux-app, network-security, privacy-tools, sysadmin, cybersecurity, security-tools, gplv3, networking, go