LuLu: An open-source macOS firewall that blocks unknown outgoing connections

Post by f4rker » Sat, Jan 20, 2018, 4:47 AM UTC

killjoywashere wrote: post #65

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

Post by dylan604 » Sat, Jan 20, 2018, 5:51 AM UTC

willstrafach wrote: post #94

pdonis wrote: post #52

Unfortunately, this still has the key flaw that has plagued outbound firewalls since their invention: "Currently, LuLu only supports rules at the 'process level', meaning a process (or application) is either allowed to connect to the network or not. As is the case with other firewalls, this also means that if a legitimate (allowed) process is abused by malicious code to perform network actions, this will be allowed."…

> In other words, it won't stop malicious Javascript running in your browser from making an outbound connection, which is the most common way for malware to do that. This might be possible, if you start off with deny-all as the default and then start manually adding exceptions as you browse.

Post by chewyland » Sat, Jan 20, 2018, 5:54 AM UTC

killjoywashere wrote: post #65

What I want for all these services (Little Snitch, ESET, etc) is an EasyList-like ... list. A community-aggregated and reviewed list of servers that don't merit my connection. I'd pay a monthly subscription fee for that. I'd also like separate lists for * "this wifi is public, be extra cautious" * "this wifi is public, be nice and don't torrent, do backups, etc" * "I'm on a metered connection (e.g. LTE), don't run to…

Post by rasz » Sat, Jan 20, 2018, 5:57 AM UTC

Post by pilsetnieks » Sat, Jan 20, 2018, 7:12 AM UTC

hesk wrote: post #151

reaperducer wrote: post #126

Earlier quoted context omitted.

>I happily paid for Little Snitch and was comforted by the fact that I was the customer. I paid for it, too. But then the upgrades went from complimentary to paid, and I bailed.

The new major version offers a lot more functionality. I looked into it and decided I wanted it, so I upgraded. I assume that I could have stayed with the old major version but I'm not sure.