Live data from Hacker News

LuLu: An open-source macOS firewall that blocks unknown outgoing connections

objective-see.com

21–30 of 252 posts

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#23
The install page says that `sudo configure.sh -install` is the install command. The command is actually `sudo ./configure.sh -install`. Further, it should probably be `sudo ./configure.sh --install` (with two hyphens), as is convention for named (edit: long-form) options on the command line.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#24

For those on Windows, http://www.sphinx-soft.com/Vista/index.html does the same using the native firewall (so no 3rd party dependencies, services, or bloat) (though they've ~recently added paid licenses with more features to their basic offering). I only wish it were cleaner and simpler. I don't think the Windows Firewall API is too bad, I should add this to my bucket list of open source software to write that I'll m…

When the native firewall in Windows blocks something, doesn't the connection attempt fail immediately?

For example while the Little Snitch popup dialog is waiting for user input the affected application just sees an unusual latency spike and it will not complain immediately that internet access in not available. Afaik, this is not the case with the Windows Firewall: The connection will fail for the application while the frontend-app is still waiting for the user's decision.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#25
post #23

The install page says that `sudo configure.sh -install` is the install command. The command is actually `sudo ./configure.sh -install`. Further, it should probably be `sudo ./configure.sh --install` (with two hyphens), as is convention for named (edit: long-form) options on the command line.

> as is convention for named options on the command line.

Gosh, I really wish that people would follow a convention for named options on the command line. I don't even really care which one, as long as they were all consistent in picking one.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#27
post #24

For those on Windows, http://www.sphinx-soft.com/Vista/index.html does the same using the native firewall (so no 3rd party dependencies, services, or bloat) (though they've ~recently added paid licenses with more features to their basic offering). I only wish it were cleaner and simpler. I don't think the Windows Firewall API is too bad, I should add this to my bucket list of open source software to write that I'll m…

When the native firewall in Windows blocks something, doesn't the connection attempt fail immediately? For example while the Little Snitch popup dialog is waiting for user input the affected application just sees an unusual latency spike and it will not complain immediately that internet access in not available. Afaik, this is not the case with the Windows Firewall: The connection will fail for the application while…

I believe by default incoming connections are "on hold" until they either timeout or the dialog is confirmed one way or the other. Note that most "real" firewalls have two different options for blocking: drop or reject. So long as the packet isn't rejected, drop and "drop unless this dialog is satisfied" aren't very different.

I'm not sure how this app gets around it (if it does at all).

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#28
Looks promising. I used to use Little Snitch, but last year they decided to charge for the new version, and I uninstalled it.

Little Snitch was effective, but overly complex for the average user. I'm sure it's great for someone who configures networks on a regular basis, but as a Mac user, I just want to use my Mac. If I wanted to twiddle with security settings all day long, I'd still be on Windows.

This looks like it might be a good, simple, replacement. Hopefully as it evolves it doesn't get swamped by feature bloat.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#29
post #18

Nowadays it's more important to control and restrict outgoing connections than incoming connections. Who would had thought of that 25 years ago.

> Who would had thought of that 25 years ago.

Maybe that's why this problem exists now, because no one had thought of it?

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#30
post #5

LuLu is a billion dollar hypermarket chain. I think it would be a good idea to rename this project in the beginning if you don't want to get into any copyright issues. https://en.wikipedia.org/wiki/Lulu_Hypermarket

Can't a retail chain and a firewall can share the same name without issues?

As long as the firewall doesn't start selling produce, there shouldn't be an issue
Post reply on HN