Little Snitch on Linux
the.unknown-universe.co.uk
Why I’m skipping the new Little Snitch for Linux in favour of my existing, transparent AdGuard Home and OpenSnitch setup.

I saw the news about Little Snitch coming to Linux via eBPF and Rust. On paper, it looks fancy. In reality, the backend is closed source.

Personally, I don’t see the point in installing a proprietary black box to monitor other black boxes. I’m sticking with my AdGuard Home setup and OpenSnitch for when I actually need to trace a binary.

I wrote up my thoughts on why I think this is a solved problem for most FOSS-first home labs.

  • relic4322@lemmy.ml
    2·
    4 hours ago

    Not familiar with this, but jumping on the opensnitch bandwagon. I use it, plus ufw, plus pihole.

    Kill the DNS lookups, kill it at the network level of possible, and if it’s sneaky OpenSnitch catches it at the application layer.