51–60 of 117 posts
Also what would happen if I installed a Windows gateway, using routing and remote access services, and then installed portmaster on that?
Overall this looks pretty awesome, and I'm excited to try it out.
Oh and can I use this in conjunction with wire guard? How does it play with other vpns.
I'd really like to see more technical discussion of Safing's SPN idea and implementation ( https://safing.io/spn/ ). If I've understood it correctly, it seems to be in-line with the general trajectory of where Cloudflare is going with DNS privacy and Apple is going with its relay service. It seems obvious that VPN services should be split into Relay and Exit services so that you don't have to necessarily trust a sing…
Earlier quoted context omitted.
Pretty much, yes.
I guess having it combined can have portability/mobility benefits but other than that I doubt if the performance benefits of OpenSnitch (or) ability to secure entire network through PiHole is worth replacing.
What's the performance impact on this, especially on windows? Also what would happen if I installed a Windows gateway, using routing and remote access services, and then installed portmaster on that? Overall this looks pretty awesome, and I'm excited to try it out. Oh and can I use this in conjunction with wire guard? How does it play with other vpns.
Basically negligible. Secure DNS might be a bit slower and you might feel some impact on low end devices.
Q: Also what would happen if I installed a Windows gateway, using routing and remote access services, and then installed portmaster on that?
You'd probably be cut off as incoming connections are blocked by default. Please place a config with exceptions before install or have (virtual) physical access when installing.
Q: Oh and can I use this in conjunction with wire guard? How does it play with other vpns.
We have a whole page on that in the docs: https://docs.safing.io/portmaster/install/status/vpn-compati...
I'd really like to see more technical discussion of Safing's SPN idea and implementation ( https://safing.io/spn/ ). If I've understood it correctly, it seems to be in-line with the general trajectory of where Cloudflare is going with DNS privacy and Apple is going with its relay service. It seems obvious that VPN services should be split into Relay and Exit services so that you don't have to necessarily trust a sing…
It doesn't even define the acronym!
I'd really like to see more technical discussion of Safing's SPN idea and implementation ( https://safing.io/spn/ ). If I've understood it correctly, it seems to be in-line with the general trajectory of where Cloudflare is going with DNS privacy and Apple is going with its relay service. It seems obvious that VPN services should be split into Relay and Exit services so that you don't have to necessarily trust a sing…
Yes, you are correct, there are similarities there. Except of course that SPN is open source.
We do have a white paper: https://safing.io/files/whitepaper/Gate17.pdf
And YES! I'd love to see more technical discussion of the SPN too. So many things to unpack, to learn and improve.
That's a confusing statement... does this mean they change your DNS server/provider by default, if you are using a VPN?
[1] https://docs.safing.io/portmaster/install/status/vpn-compati...
Earlier quoted context omitted.
For macOS I can strongly recommend Little Snitch. It's not open source, but I like that it's not subscription software and doesn't collect personal data. https://www.obdev.at/products/littlesnitch/index.html
I've been running LuLu and it works great. https://objective-see.org/products/lulu.html
Edit: Shipping such a component enabled by default might be unexpected for applications of this nature and easily overlooked, which is why I mention it.
My only problem with it is that under heavy load the DoH server dies or gets stuck at 50% CPU for me. It also hangs my custom DoT/DoH solution for some reason but that's not a Portmaster problem.