Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[Feature] Plea to developer -- granular control of network connections per app. 🙏 #1925

Open
3 tasks done
NikoMuffin opened this issue Dec 15, 2024 · 5 comments
Open
3 tasks done
Labels

Comments

@NikoMuffin
Copy link

NikoMuffin commented Dec 15, 2024

Checklist

  • I have used the search function to see if someone else has already submitted the same feature request.
  • I will describe the problem with as much detail as possible.
  • This issue only contains a request for one single feature, not multiple (related) features.

App version

3.8.5 64bit

Problem you are trying to solve

Henry,
The most major thing missing from simplewall is the ability to have granular control over every network connection that is requested by an app.

Suggested solution

What we're looking for is something like Little Snitch and Vallum for Mac. Right now simplewall only allows me to allow or deny network connections, but there are some apps I want to allow to a specific site, but I don't know what that site is.

Wouldn't it be great if simple wall would alert the user in an advanced mode "Listary has tried to connect to - allow or deny". The user would be able to deny just that connection or global altogether.

This is the single biggest feature this app is missing. I know it's complex, but please please please consider it. All the other firewall apps are slow, bloated and not open source.

PS: Thank you for this amazing app

Screenshots / Drawings / Technical details

Example of how little snitch handles network connections:
little-snitch-5_screenshot-4116534620

@tnodir

This comment was marked as off-topic.

@LZeugirdor
Copy link

This is something that I would like, but I would like to add onto this. For instance, port and rule automation through allowing or blocking. Let's say we have an app that wants to access port 80 outbound, if you click allow it will now create a rule to allow that app to use that port.

Another feature would be rule appending. For instance that same app later asks for port 443 outbound, if we click allow, it adds a new port to the already created rule rather than creating a new one.

You can make these both a feature of blocking too, it minimizes the total amount of rules making it easier to read and manage, without allowing total internet access to applications.

I'm not sure how difficult this is to code, but the capability seems to already be there so I'm hoping it's not too difficult. It also minimizes attack surfaces by keeping unwanted ports from being public if you're using applications like svchost. You could allow 443 outbound, without allowing other stuff.

@NikoMuffin
Copy link
Author

👆 I would be in full support of @LZeugirdor 's description. That's how I would want it too. It would make simplewall the best of the best. The Little Snitch of Windows platform.

@NikoMuffin
Copy link
Author

@tnodir I always keep an open mind. Please can you recommend one to me? Haven't found anything even remotely close to simplewall :(

@tnodir
Copy link

tnodir commented Dec 20, 2024

@NikoMuffin I'm a developer of yet another firewall for Windows and got same question recently: tnodir/fort#366

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
Projects
None yet
Development

No branches or pull requests

3 participants