[Feature request] Make connection approvals/refusals more granular

evilsocket / opensnitch

OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.

GNU General Public License v3.0

10.74k stars 498 forks source link

[Feature request] Make connection approvals/refusals more granular #463

Open SonephetR2 opened 3 years ago

SonephetR2 commented 3 years ago

I'd love to see another option (or more!) somewhere between greenlighting a connection "Until next reboot" and "Forever". How about approving/refusing a connection for a week, a month, a year… This creates quite a lot of friction with legitimate programs that include updaters. I don't particularly want these programs to switch off the updater forever, so I'm stuck with denying the connection day after day. Thanks :)

gustavo-iniguez-goya commented 3 years ago

hi @SonephetR2 ,

Yes, I think that we can add more options, even time ranges, which I think would be more useful for the use case you described.

So, what options would be nice to have?

Options between 1h and "until restart": 12h, 1 day, 1 week, ... ?
Time ranges/: every day from 20:00pm to 20:30pm, every monday/month, etc..

Please, comment below if this is interesting/wanted, or vote :+1: :-1: , in order to have an idea.

SonephetR2 commented 3 years ago

Hi @gustavo-iniguez-goya and thanks a lot for taking this into account!

I would prefer options personally, and way longer than 1 week. How often would I want Opensnitch to let me review whether I'll finally let my PDF viewer ping back "home"? ... Once every 3 or 6 months perhaps?

To be honest, as a mere individual user, I actually cannot really think up any useful situation where I'd need a time range rather than an option.