Live data from Hacker News

LuLu: An open-source macOS firewall that blocks unknown outgoing connections

objective-see.com

161–170 of 252 posts

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#161

Earlier quoted context omitted.

I want to drop that list into little snitch. In fact, when I install Little Snitch, I want it to ask me "would you like to subscribe to iamdave's list?"

Hrm. I think you've given me something fun to spend my weekend on

would love to see whatever you end up with! -B

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#162

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

What if I start a DNS service that blocks every ad server domainname in the "EasyList"?

Personally I avoid using third party DNS, but if there is demand for this...

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#163

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

What if I start a DNS service that blocks every ad server domainname in the "EasyList"? Personally I avoid using third party DNS, but if there is demand for this...

https://adguard.com/en/adguard-dns/overview.html

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#164
post #98

> This work is licensed under a Creative Commons Attribution-NonCommercial 4.0 International License. Weird choice of license.

As someone unfamiliair, what is weird about the choice?

The people who developed the creative commons licenses recommend against using them for software. [From their FAQ](https://creativecommons.org/faq/#can-i-apply-a-creative-comm...):

> We recommend against using Creative Commons licenses for software. Instead, we strongly encourage you to use one of the very good software licenses which are already available. We recommend considering licenses made available by the Free Software Foundation or listed as “open source” by the Open Source Initiative.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#165
post #24

For those on Windows, http://www.sphinx-soft.com/Vista/index.html does the same using the native firewall (so no 3rd party dependencies, services, or bloat) (though they've ~recently added paid licenses with more features to their basic offering). I only wish it were cleaner and simpler. I don't think the Windows Firewall API is too bad, I should add this to my bucket list of open source software to write that I'll m…

When the native firewall in Windows blocks something, doesn't the connection attempt fail immediately? For example while the Little Snitch popup dialog is waiting for user input the affected application just sees an unusual latency spike and it will not complain immediately that internet access in not available. Afaik, this is not the case with the Windows Firewall: The connection will fail for the application while…

Yes, that's correct. MacOS handles this better. But really it only comes up when you run a _new_ program, so it's not a major problem.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#166

For those on Windows, http://www.sphinx-soft.com/Vista/index.html does the same using the native firewall (so no 3rd party dependencies, services, or bloat) (though they've ~recently added paid licenses with more features to their basic offering). I only wish it were cleaner and simpler. I don't think the Windows Firewall API is too bad, I should add this to my bucket list of open source software to write that I'll m…

TinyWall... other LittleSnitch-like apps on windows aren't anywhere near as nice as LittleSnitch, but TinyWall gets rid of the crappy prompts firing a million times a day until you configure it (the thing that sucks is apps like ChromeUpdate and others can get around the firewall somehow, so if you're set to prompt, it will prompt you all day long, so TinyWall makes it all sane).

Unfortunately Tinywall hasn't been updated since 2016. It still works, of course, but I'm not comfortable using security software that isn't in active development.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#167
post #152

Earlier quoted context omitted.

I handle this for my whole network with a pi-hole[0]. [0] https://pi-hole.net

When I tried pi-hole I was amazed by it. Until the day I discovered someone in China hacked it :-///

Could have been a number of things - most likely culprit I've seen is that it was left exposed to the internet, ssh most likely, and the default password wasn't changed.

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#168

Earlier quoted context omitted.

I want to drop that list into little snitch. In fact, when I install Little Snitch, I want it to ask me "would you like to subscribe to iamdave's list?"

Hrm. I think you've given me something fun to spend my weekend on

I, too, would like to see this if you do it!

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#169
post #24

Earlier quoted context omitted.

When the native firewall in Windows blocks something, doesn't the connection attempt fail immediately? For example while the Little Snitch popup dialog is waiting for user input the affected application just sees an unusual latency spike and it will not complain immediately that internet access in not available. Afaik, this is not the case with the Windows Firewall: The connection will fail for the application while…

Yes, that's correct. MacOS handles this better. But really it only comes up when you run a _new_ program, so it's not a major problem.

it is because one of the major use cases for an outgoing firewall is when installing new software, which is where you also want to be careful what the application connects to, which does not work very well at all compared to Little Snitch

Re: LuLu: An open-source macOS firewall that blocks unknown outgoing connections

#170

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

Little Snitch has this with automatic profile switching: https://blog.obdev.at/automatic-profile-switching/ though you will have to build the list of rules yourself

With LS afaik it's not possible to run multiple profiles at the same time (say you have groups of rules for a particular app), otherwise it would be perfect.

ie., turn Apple Telemetry on or off.

Post reply on HN