Repolode
Submit
henrypp

henrypp/simplewall

A lightweight Windows tool that configures Windows Filtering Platform rules to control which apps can use the network.

Open-source alternative to:Little Snitch

View on GitHub
Stars
9,173
Forks
662
Open issues
142
Last commit
2 days ago

What is it?

simplewall is a configuration front end for the Windows Filtering Platform (WFP), the system API that network filtering software uses on Windows. It lets you block or allow network activity per application, with global and app-specific rules. It is not a UI for the built-in Windows Firewall and works independently of it.

By default it blocks all applications until you allow them. Filters stay active even when simplewall is closed, and they can be removed from within the program. Rules can be permanent or temporary (cleared at the next reboot), and the tool supports command-line install, uninstall and silent operation.

The program is under 1 MB, runs on Windows 7 SP1 and later including ARM64, and includes an internal blocklist for Windows telemetry. It supports IPv6, IP ranges, CIDR blocks and port ranges in rules, as well as logging of dropped and allowed packets. Administrator rights are required.

Key features

  • 01Per-application network allow/block rules, including global and app-specific rules
  • 02Internal blocklist for Windows telemetry and spy endpoints
  • 03Logging of dropped and allowed packets to a file
  • 04IPv6, IP range, CIDR and port range support in rules
  • 05Portable mode and installer, with command-line install/uninstall options

Use cases

  • Stopping specific programs on Windows from phoning home while still allowing others
  • Auditing which applications attempt outbound or inbound connections
  • Blocking Windows telemetry domains and addresses
  • Adding fine-grained network controls alongside the built-in Windows Firewall

Quick start

  1. 1

    Download the installer or portable version from the releases page

  2. 2

    Enable filtering from the command line (run as administrator)

    -install

Things to know

  • Windows only, and it requires administrator rights.
  • It is built for advanced users and is not a simple firewall UI.
  • It configures Windows Filtering Platform and does not manage Windows Firewall.
  • Licensed under GPL-3.0, a copyleft license.

Topics

#windows#firewall#wfp#network#privacy#windows-firewall#arm64#foss#simplewall#win64

FAQ

What is simplewall?
A lightweight Windows tool that configures Windows Filtering Platform rules to control which apps can use the network. simplewall is a configuration front end for the Windows Filtering Platform (WFP), the system API that network filtering software uses on Windows. It lets you block or allow network activity per application, with global and app-specific rules. It is not a UI for the built-in Windows Firewall and works independently of it.
Is simplewall free to use? What license does it have?
simplewall is open source under the GPL-3.0 license. Check the license terms before using it in commercial products.
Is simplewall still maintained?
Actively maintained. The last commit to simplewall was on Oct 18, 2026.
What can I use simplewall for?
Stopping specific programs on Windows from phoning home while still allowing others Auditing which applications attempt outbound or inbound connections Blocking Windows telemetry domains and addresses Adding fine-grained network controls alongside the built-in Windows Firewall
How do I install simplewall?
Download the installer or portable version from the releases page Enable filtering from the command line (run as administrator): -install
Where can I get simplewall?
The source code and installation instructions are on GitHub: https://github.com/henrypp/simplewall

Summary generated by AI from the project's README. GitHub stats refresh daily.

Related projects