Really Lazy Bear 
RE: https://fosstodon.org/@keepassxc/116646978185131297
Have a Pi-Hole and/or opensnitch as well and add some blocklists than the stock, or some DoH that blocks malware domains
#pihole #opensource #freesoftware #foss #opensnitch #linux #keepassxc
jfml - Jonas Laugs@userspace Ach so, als freie (weiß nich wie die Lizenz LS is) Alternative von Little Snitch gibts übrigens #OpenSnitch:
https://github.com/evilsocket/opensnitch
Meiner Erinnerung nach nich ganz so komfortabel wie Little Snitch (aber immer noch besser als Portmaster) und tut, was es soll.
Smiee SmieesenHeute ist scheinbar mein #fedivers Tag. Schlechtes Wetter, Frau hat Migräne, da hab ich Zeit zum frickeln...
Hab gerade mal #opensnitch installiert. Und ja, auch unter #endeavouros gibt es so Dinge, die ich gerne mal blockieren möchte.
Der erste Kandidate war #geoclue . Es geht echt keinen was an, in welcher Ecke im Erzgebirge ich so rum frickel. 😉
Cooles Ding, das opensnitch!
Auch mount.cifs und mount.davfs muss ich erst freigeben!
Und fping oder wget .... was da alles so los ist!
Hab gerade mal #opensnitch installiert. Und ja, auch unter #endeavouros gibt es so Dinge, die ich gerne mal blockieren möchte.
Der erste Kandidate war #geoclue . Es geht echt keinen was an, in welcher Ecke im Erzgebirge ich so rum frickel. 😉
Cooles Ding, das opensnitch!
Auch mount.cifs und mount.davfs muss ich erst freigeben!
Und fping oder wget .... was da alles so los ist!
JL Johnson 
I've seen a lot of posts lately about #LittleSnitch which has been on my radar for a while. It supports #Linux now which is great. But it's not fully opensource.
I found #opensnitch and wow it's great. Reminds me of what I consider to be "peak windows" days, early 2000s when the zonealarm firewall was popular.
#Nostalgia will getcha!
FerretI saw that Little Snitch is now available for #Linux.
As far as I’m aware, there’s already #OpenSnitch for Linux.
Thrash CardiomI installed OpenSnitch today after having seen a post about it on BlueSky (I think). It's a nice application firewall which gives you even more control over what leaves your computer.
A.B. MurrowWow oh wow. Any strategies for how to manage OpenSnitch on NixOS? It's a cool tool but the constant popups for everything that connects to the internet is just... a lot.
And, unfortunately, because of how nix works, each rule I allow via the popup assigns the /nix/store binary path to the rule, so I don't expect the rules to survive a rebuild.
I've already used it to strip out all of the advertising domains, and my next target is for blocking AI slop domains. For that alone is worth it.
Mr Fry ⛵ 
🪚So I'm the kind of wacko who has #opensnitch set up to manually filter any address my computer connects to. Despite using a base block list, browsing was absolute hell for a week until my rules covered enough ground to block most of the repeat offenders. I usually allow the domain I'm visiting and its subdomains, period.
The amount of domains one can block before a website breaks is telling. It also made me realise that with link preview enabled #Firefox and all derivatives send a request to the domain of all the links your cursors HOVERS, a.k.a brushes past which seems like a massive breach of privacy and waste of bandwidth... Note that disabling link preview requires a restart after unticking the box, which made the culprit hard to figure out at first.
Anyway, watching #Peertube is obviously quite challenging with this setup, because of the "peers" in the tube. What I don't understand is why there isn't a consistent port I can unblock, each request seem to use a random port.
Can anyone help me make sense of this please?
jpoesen | 🇪🇺 | 🏳️🌈@greg_harvey For me it's the other way around. It's #OpenSnitch that's making me paranoid with all the warnings all the time...
#Firewall auf #Linux - #Tutorial für #Anfänger und #Fortgeschrittene [ #GUFW, #OpenSnitch ]
In diesem Video zeigt Jean, was eine #Firewall ist, wie sie funktioniert und wie man sie mithilfe der #Programme #Gufw und #OpenSnitch einrichten kann.
