101–110 of 117 posts
Is there a way to use this as 'just a firewall'? Not touching my DNS config or preventing VPNs from setting their own etc.?
[0] https://docs.safing.io/portmaster/settings#filter/dnsQueryIn...
[1] https://docs.safing.io/portmaster/guides/dns-configuration
CTO and Co-Founder of Safing here. We're super excited to introduce version 1.0 of our network monitor and privacy firewall - Portmaster! On 1.1. this year, Portmaster was shared on HN and we hit front page [1]. With the help of our testers - many of you! - we were able to mature and develop Portmaster to hit this milestone. We're on a mission to bring privacy back to the masses. Privacy has to be easy & accessible f…
Which versions of Windows do you support? Also what happens with the firewall that ships with Windows when you install Safing?
Windows 10+11 full. Windows 7+8 without desktop notifications.
Q: Also what happens with the firewall that ships with Windows when you install Safing?
Currently nothing. It stays there and active as it is.
CTO and Co-Founder of Safing here. We're super excited to introduce version 1.0 of our network monitor and privacy firewall - Portmaster! On 1.1. this year, Portmaster was shared on HN and we hit front page [1]. With the help of our testers - many of you! - we were able to mature and develop Portmaster to hit this milestone. We're on a mission to bring privacy back to the masses. Privacy has to be easy & accessible f…
Looks like a nice project! What library are you using for a front end here?
Currently running in an electron instance, with the plan to switch (back) to a webview provided by the OS.
UI is served by the background process, so you can also open it in the browser at 127.0.0.1:817 - if you have development mode enabled.
Earlier quoted context omitted.
Thanks for your interest. (1) Are you planning on having support for more than 5 devices at a future point? 5 devices is what we estimate 1 user has (avg max). If there is demand, we will definitely add a plan to support more devices (or users). (2) Will you have any features to support parents protection of their children? We already collect NSFW filter lists to be activated in the settings. Otherwise such features…
>(1) Are you planning on having support for more than 5 devices at a future point? >5 devices is what we estimate 1 user has (avg max). If there is demand, we will definitely add a plan to support more devices (or users). I'd estimate for a family plan (my case) we'd have 5 users. Given that I am on HN and part of the technocrati collective we have a ton of devices, particularly once your iOS & Mac OS coverage kicks…
Shopping logs is easy technically, but what to put in there? Just mirror the logs from the local instance or just limit it to connections? Which format, what data?
We recently switched to an in-mem SQLite database for querying connections. In the future, we'd like to send the rows to a central instance of the user, with a UI for querying everything at once.
Also, creating setting templates for apps and enforcing certain settings on many devices is something that seems useful.
Note: This is all quite far out.
CTO and Co-Founder of Safing here. We're super excited to introduce version 1.0 of our network monitor and privacy firewall - Portmaster! On 1.1. this year, Portmaster was shared on HN and we hit front page [1]. With the help of our testers - many of you! - we were able to mature and develop Portmaster to hit this milestone. We're on a mission to bring privacy back to the masses. Privacy has to be easy & accessible f…
Hi. After a quick look, I found that the codebase spread across several repos. e.g. safing/portmaster, safing/portmaster-ui and safing/portmaster-packaging. I didn't found any guides regarding building from source. How can I build the app/installer by myself?
The thing is that Portmaster consists of a lot of components[0]. I don't think we'll get around creating a docker image that does all the steps automatically - as far as possible. For Windows this will be infeasible for most, as you need a EV Code Signing Cert (300$+) for signing the kernel extension.
Can you elaborate on your use case?
[0] https://docs.safing.io/portmaster/architecture/update-system...
Earlier quoted context omitted.
Also not PortMaster. https://archive.org/details/h42_Livingston_Enterprises_PortM...
Yeah that was my first thought and then: "do I still have an old portmaster around somewhere, will it run on that?" choosing the same name as a revered network router (the first one really affordable by mere mortals) may alienate some old timers
The Linux distribution was probably Slackware. Kernel was probably early 2.x?
Fun times...
The folks I interview these days with their new fenagled CS degrees have no clue how anything works. They can write code, sure, barely, but they can't answer a single question about how _any_ of it works.
How do you get a CS degree and not know the difference between TCP and UDP?
How do you become a front-end developer who codes React apps but can't explain the DOM? Have no clue what a conditional GET is?
It makes me sad...
Earlier quoted context omitted.
Seems that there isn't an option to use the default ISP's DNS server. :(
You can use anything: DNS Configuration Guide: https://docs.safing.io/portmaster/guides/dns-configuration
The problem was that there isn't a "keep my DNS as is" option in the initial setup dialog (or not an obvious one), so we are forced to pick one from the four secure DNS.
Earlier quoted context omitted.
Hi. After a quick look, I found that the codebase spread across several repos. e.g. safing/portmaster, safing/portmaster-ui and safing/portmaster-packaging. I didn't found any guides regarding building from source. How can I build the app/installer by myself?
Yes, we definitely want to improve here. The thing is that Portmaster consists of a lot of components[0]. I don't think we'll get around creating a docker image that does all the steps automatically - as far as possible. For Windows this will be infeasible for most, as you need a EV Code Signing Cert (300$+) for signing the kernel extension. Can you elaborate on your use case? [0] https://docs.safing.io/portmaster/ar…
Since Portmaster is open-source, I expected that I can modify and compile the software by myself. Maybe I will hack around when I have time.
Is compiling locally not possible without the signing cert?
What's the performance impact on this, especially on windows? Also what would happen if I installed a Windows gateway, using routing and remote access services, and then installed portmaster on that? Overall this looks pretty awesome, and I'm excited to try it out. Oh and can I use this in conjunction with wire guard? How does it play with other vpns.
Q: What's the performance impact on this, especially on windows? Basically negligible. Secure DNS might be a bit slower and you might feel some impact on low end devices. Q: Also what would happen if I installed a Windows gateway, using routing and remote access services, and then installed portmaster on that? You'd probably be cut off as incoming connections are blocked by default. Please place a config with excepti…
First request would be a way to sync settings across multiple machines, or at least a way to import/export configs.
I did get hit with the issue about having incoming connections blocked by default - realized RDP connections were blocked even from the local subnet, and had to go plug a physical monitor in.
I was a bit surprised I couldn't figure out a clean way to allow inbound connections from the local network, but not from the internet. The docs at https://docs.safing.io/portmaster/settings seem to imply that I can set various settings to different tiers - 7 for trusted, for untrusted, 4 for hacked, but even when I have the developer view tuned on, I just see a binary choice.
* How does SPN differ from a VPN, in detail? In other comments you said that it's similar to Tor, but what does that actually mean?
* Does traffic get routed through multiple nodes before being routed to the destination? If not, what sets it apart from a VPN - apart from being able to choose different servers for every program on your PC?
* Is SPN intended to provide privacy against nation-state actors where simply masking your exit node is not sufficient, similar to what Tor claims to do?
* Who operates exit nodes (and any intermediary nodes in the SPN network), are they owned or rented dedicated servers, and does it include residential connections - to provide unblocking for streaming services?
* Is traffic routed through other Portmaster users' internet connections?