Benjamin E.Un steam fraîchement installé sur ma debian 13, après un redémarrage.
Mon pare-feu m'interroge.
Est-ce que steam a vraiment modifié mon kernell pour faire transiter des données sécurisés jusqu'à chez eux ?
まっさん mstdn.jpLinux初心者に優しいアプリケーション単位のファイアウォール管理ソフトウェア #OpenSnitch
https://arekorebibouroku.hateblo.jp/entry/2026/06/25/103758
https://arekorebibouroku.hateblo.jp/entry/2026/06/25/103758
Linux初心者に優しいアプリケーション単位のファイアウォール管理ソフトウェア #OpenSnitch - あれこれ備忘録@はてなブログ
opensnitch.org github.com Linuxディストリビューションの多くには標準でファイアウォールソフトウェアが付いてきていると思う。 Linux Mintではufwがあり、それをGUIで操作するGufwをインストールして使うことが一般的だろう。 ufwはポートとプロトコルごとの通信の開放と遮断を設定することが多いと思う。 アプリケーションを指定して登録することも可能なようだが、Linux初心者にはこのルールを書くのが難しい。 このアプリケーションごとの通信の許可・不許可を設定できるのがOpenSnitchである。 OpenSnitchはufwと共存できるとのこと。 上の二つ…
jfml - Jonas Laugs@userspace Ach so, als freie (weiß nich wie die Lizenz LS is) Alternative von Little Snitch gibts übrigens #OpenSnitch:
https://github.com/evilsocket/opensnitch
Meiner Erinnerung nach nich ganz so komfortabel wie Little Snitch (aber immer noch besser als Portmaster) und tut, was es soll.
Smiee SmieesenHeute ist scheinbar mein #fedivers Tag. Schlechtes Wetter, Frau hat Migräne, da hab ich Zeit zum frickeln...
Hab gerade mal #opensnitch installiert. Und ja, auch unter #endeavouros gibt es so Dinge, die ich gerne mal blockieren möchte.
Der erste Kandidate war #geoclue . Es geht echt keinen was an, in welcher Ecke im Erzgebirge ich so rum frickel. 😉
Cooles Ding, das opensnitch!
Auch mount.cifs und mount.davfs muss ich erst freigeben!
Und fping oder wget .... was da alles so los ist!
Hab gerade mal #opensnitch installiert. Und ja, auch unter #endeavouros gibt es so Dinge, die ich gerne mal blockieren möchte.
Der erste Kandidate war #geoclue . Es geht echt keinen was an, in welcher Ecke im Erzgebirge ich so rum frickel. 😉
Cooles Ding, das opensnitch!
Auch mount.cifs und mount.davfs muss ich erst freigeben!
Und fping oder wget .... was da alles so los ist!
JL Johnson 
I've seen a lot of posts lately about #LittleSnitch which has been on my radar for a while. It supports #Linux now which is great. But it's not fully opensource.
I found #opensnitch and wow it's great. Reminds me of what I consider to be "peak windows" days, early 2000s when the zonealarm firewall was popular.
#Nostalgia will getcha!
FerretI saw that Little Snitch is now available for #Linux.
As far as I’m aware, there’s already #OpenSnitch for Linux.
Thrash CardiomI installed OpenSnitch today after having seen a post about it on BlueSky (I think). It's a nice application firewall which gives you even more control over what leaves your computer.
A.B. MurrowWow oh wow. Any strategies for how to manage OpenSnitch on NixOS? It's a cool tool but the constant popups for everything that connects to the internet is just... a lot.
And, unfortunately, because of how nix works, each rule I allow via the popup assigns the /nix/store binary path to the rule, so I don't expect the rules to survive a rebuild.
I've already used it to strip out all of the advertising domains, and my next target is for blocking AI slop domains. For that alone is worth it.
Mr Fry ⛵ 
🪚So I'm the kind of wacko who has #opensnitch set up to manually filter any address my computer connects to. Despite using a base block list, browsing was absolute hell for a week until my rules covered enough ground to block most of the repeat offenders. I usually allow the domain I'm visiting and its subdomains, period.
The amount of domains one can block before a website breaks is telling. It also made me realise that with link preview enabled #Firefox and all derivatives send a request to the domain of all the links your cursors HOVERS, a.k.a brushes past which seems like a massive breach of privacy and waste of bandwidth... Note that disabling link preview requires a restart after unticking the box, which made the culprit hard to figure out at first.
Anyway, watching #Peertube is obviously quite challenging with this setup, because of the "peers" in the tube. What I don't understand is why there isn't a consistent port I can unblock, each request seem to use a random port.
Can anyone help me make sense of this please?
jpoesen | 🇪🇺 | 🏳️🌈@greg_harvey For me it's the other way around. It's #OpenSnitch that's making me paranoid with all the warnings all the time...