Repolode
Submit
evilsocket

evilsocket/opensnitch

An interactive application firewall for GNU/Linux that asks you to allow or block each outbound connection, inspired by Little Snitch.

Open-source alternative to:Little Snitch

View on GitHub
Stars
14,205
Forks
679
Open issues
214
Last commit
3 months ago

What is it?

OpenSnitch is an application-level firewall for GNU/Linux. When a program on the machine tries to open an outbound connection, OpenSnitch shows a prompt in its GUI so the user can allow or deny it, and the decision can be saved as a rule for that application.

Beyond per-application filtering, it can load block lists to stop ads, trackers or malware domains system wide, and its GUI can manage nftables system rules such as the input policy and inbound services. A single GUI can also manage multiple nodes, and the project offers SIEM integration for sending connection events to security tooling.

The project is distributed as deb and rpm packages, with the UI installed separately from the daemon.

Key features

  • 01Prompts the user to allow or deny each outbound connection per application.
  • 02Blocks ads, trackers and malware domains system wide using block lists.
  • 03Configures nftables system firewall rules from the GUI.
  • 04Manages multiple nodes from one centralized interface.
  • 05Integrates with SIEM tooling.

Use cases

  • Monitoring which applications on a Linux desktop phone home.
  • Blocking tracker and malware domains across a whole machine.
  • Controlling inbound services and the input policy on a Linux host without writing nftables rules by hand.
  • Collecting connection events from several Linux machines into a central view.

Quick start

  1. 1

    Download the deb/rpm packages from the releases page

  2. 2

    Install the daemon and UI on Debian/Ubuntu

    sudo apt install ./opensnitch*.deb ./python3-opensnitch-ui*.deb
  3. 3

    Install on Fedora/RHEL (rpm)

    sudo dnf install opensnitch*.rpm
  4. 4

    Launch the GUI

    opensnitch-ui

Things to know

  • Works only on GNU/Linux.
  • Licensed under GPL-3.0, a copyleft license.

In collections

Privacy & local-first toolsSecurity scanners, audits & threat intel tools

Topics

#firewall#linux#networking#security#application-firewall#privacy#nftables#data-breach

FAQ

What is opensnitch?
An interactive application firewall for GNU/Linux that asks you to allow or block each outbound connection, inspired by Little Snitch. OpenSnitch is an application-level firewall for GNU/Linux. When a program on the machine tries to open an outbound connection, OpenSnitch shows a prompt in its GUI so the user can allow or deny it, and the decision can be saved as a rule for that application.
Is opensnitch free to use? What license does it have?
opensnitch is open source under the GPL-3.0 license. Check the license terms before using it in commercial products.
Is opensnitch still maintained?
Updated within 6 months. The last commit to opensnitch was on Jul 26, 2026.
What can I use opensnitch for?
Monitoring which applications on a Linux desktop phone home. Blocking tracker and malware domains across a whole machine. Controlling inbound services and the input policy on a Linux host without writing nftables rules by hand. Collecting connection events from several Linux machines into a central view.
How do I install opensnitch?
Download the deb/rpm packages from the releases page Install the daemon and UI on Debian/Ubuntu: sudo apt install ./opensnitch*.deb ./python3-opensnitch-ui*.deb Install on Fedora/RHEL (rpm): sudo dnf install opensnitch*.rpm Launch the GUI: opensnitch-ui
Where can I get opensnitch?
The source code and installation instructions are on GitHub: https://github.com/evilsocket/opensnitch

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects