Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

LuLu: An open-source macOS firewall that blocks unknown outgoing connections

objective-see.com

Post reply on HN
Print view View original

141–150 of 252 posts

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#141

Post by killjoywashere »

shibel wrote: post #138
killjoywashere wrote: post #65

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

An MVP for this would be quite simple to build. Do you happen to use Little Snitch? AFAIK, they don't really have an import/export option (their "backup" option is tied to the user account), but I've found a way around this limitation that is only a tad little more tedious than an auto-workflow.

I'm up to my ears in work. That's why I'm willing to pay. Please, be my guest. Build it, take my money.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#142

Post by sudouser »

prepend wrote: post #114
keyboardmonkey wrote: post #77

Earlier quoted context omitted.

oh dear, LittleSnitch wanted to charge money for creating a really handy tool, how terrible.

It’s the charge for upgrades that I don’t like. I bought it once, upgrades should be free. Or so significant that I want to pay.

you only need to pay every 3-5 years aaaaand only if you want to upgrade, aaaaaaand you can keep using your last updated version, aaaand only 50% of the full price

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#143

Post by mandelbulb »

stryk wrote: post #20
ComputerGuru wrote: post #2

For those on Windows, http://www.sphinx-soft.com/Vista/index.html does the same using the native firewall (so no 3rd party dependencies, services, or bloat) (though they've ~recently added paid licenses with more features to their basic offering). I only wish it were cleaner and simpler. I don't think the Windows Firewall API is too bad, I should add this to my bucket list of open source software to write that I'll m…

Thanks for the link. I'm curious how it compares to https://www.binisoft.org/wfc.php although this looks to be free I don't think it's open source. Not having much luck finding license info for it.

As you can see in the feature comparison[1], the free edition doesn't cover Windows' system applications, it doesn't offer a lot of pre-defined rule sets, or Desktop integration. Binsoft's WFC does.

However, if you're willing to spend money, Sphinx's product seems to offer quite a bit more features, but then you might as well consider other products out there.

Also, Binsoft's WFC UI, especially that of the rules editor, slowed down for me pretty heavily with just a hundred rules.

I'm not sure how Sphinx W10FC handles it but the Binsoft WFC doesn't accept not pre-defined file types. So if you have a binary with a random suffix, like anti-cheating rootkits often do, you can only add a generic allow or deny rule. You can't configure the rule.

[1] http://www.sphinx-soft.com/Vista/order.html

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#144

Post by sudouser »

vim_wannabe wrote: post #137
prepend wrote: post #114

Earlier quoted context omitted.

It’s the charge for upgrades that I don’t like. I bought it once, upgrades should be free. Or so significant that I want to pay.

Now we just need to figure out who pays for those upgrades. I think we could try a scheme where we keep growing the user base so more recent customers pay for the prior customers' upgrades. Hmm, wait a minute...

sounds nice, i'm in, now i'm get some people under this not-a-pyramid

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#145

Post by adjohn »

zarify wrote: post #127
killjoywashere wrote: post #65

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

I know it's not the same thing, but I use TripMode on macOS for your last two points, which selectively blocks app access based on what network you're connected to.

I second this! TripMode is a great product if you frequently tether with your phone, or connect to wifi networks with limited bandwidth (airplanes).

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#147

Post by killjoywashere »

sudouser wrote: post #139
killjoywashere wrote: post #133

Earlier quoted context omitted.

Yes, but at the OS level, not the browser level.

host file?

Check out Little Snitch: it has far more granularity than the hosts file.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#148

Post by pmarreck »

prepend wrote: post #114
keyboardmonkey wrote: post #77

Earlier quoted context omitted.

oh dear, LittleSnitch wanted to charge money for creating a really handy tool, how terrible.

It’s the charge for upgrades that I don’t like. I bought it once, upgrades should be free. Or so significant that I want to pay.

Show me this universe where programmers don’t have to eat after their 1.0!

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#149

Post by killjoywashere »

zerokernel wrote: post #116
ksenzee wrote: post #87

Earlier quoted context omitted.

They'll still have to allow for pedestrians and bikes, for the foreseeable future.

We'll just outlaw that. Compare: Jaywalking, avenues.

"Machine kills human because human violated traffic law" will never fly.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#150

Post by utefan001 »

ComputerGuru wrote: post #2

For those on Windows, http://www.sphinx-soft.com/Vista/index.html does the same using the native firewall (so no 3rd party dependencies, services, or bloat) (though they've ~recently added paid licenses with more features to their basic offering). I only wish it were cleaner and simpler. I don't think the Windows Firewall API is too bad, I should add this to my bucket list of open source software to write that I'll m…

If you want to easily block outbound connections to several countries for your entire home network read on..

https://stackoverflow.com/questions/48100009/how-to-enable-e...

My wife has an old fitbit like app that tries to connect to China every 2 seconds. Papertrail is really useful to see patterns. I blocked outbound to every single country except for the country I live in (the embattled country of Binomo). Once I allowed the US and EU, it has been interesting to learn if a site is not US or EU.

These are the domains this week that were blocked leading me to allow a few more countries.

fromdual.com - Switzerland

mysqltuner.pl/scaleway.com - France

canary.tools - Ireland

rsyslog.com - Germany

Post reply on HN