The users need a way to know which applications are using the network and where are they trying to connect to. The users also need to break the unwanted connections or prevent them from happening without having to enter a sudoer password. This will improve overall security of the system.
Also, support "paranoid mode" - whitelisting apps and connections.
---
Want to back this issue? **[Post a bounty on it!](https://www.bountysource.com/issues/70115854-application-level-firewall?utm_campaign=plugin&utm_content=tracker%2F60754170&utm_medium=issues&utm_source=github)** We accept bounties via [Bountysource](https://www.bountysource.com/?utm_campaign=plugin&utm_content=tracker%2F60754170&utm_medium=issues&utm_source=github).
The users need a way to know which applications are using the network and where are they trying to connect to. The users also need to break the unwanted connections or prevent them from happening without having to enter a sudoer password. This will improve overall security of the system.
Also, support "paranoid mode" - whitelisting apps and connections.
Prior work:
Subgraph firewall https://github.com/subgraph/fw-daemon Can be run in Ubuntu: https://twitter.com/subgraph/status/865590185517514753
Douanne https://douaneapp.com/ https://gitlab.com/douaneapp Can be run on Debian
Little Snitch for Mac