Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

I was referring to software firewalls. Obviously it's bad if a VPN is leaking traffic, but that's not confirmed yet... or at least I couldn't find any proof of that in the linked tweets.



Software firewalls like what comes by default on Windows since XP and Linux since... some version around 1997 I think?


Filtering any outbound traffic on those is either outright not supported or not worth attempting.


This is an interesting opinion, considering that iptables has been able to do this for decades, and nftables can, too. It is trivial to filter outgoing traffic and there are even convenient GUIs to do so.


The subject of this thread are application firewalls, like Little Snitch or https://github.com/evilsocket/opensnitch.

To be fair I haven't looked at the state of Linux app firewalls in years, maybe there's something better available, but *tables is not it.


Filtering outbound traffic using iptables and the Windows firewall is supported. In addition there are multiple 3rd party software firewalls for Windows which also support filtering outbound traffic.


The "firewalls" in the title of this thread refers to outbound application firewalls. There are products that behave like this on Windows, but they're typically part of a security suite which one may or may not want. Others are free and display ads or collect information about the user.

I've used two products in the past, NetLimiter and ZoneAlarm. Back then NL was just getting some basic firewall features, since its main feature was throttling the connection per app. I used ZA as a free product, but now I see they have a paid version. Last time I checked a couple of years ago I also found GlassWire, but I didn't purchase it because it kept being detected as infected by VirusTotal and the dev didn't have a clue what was wrong.

Frankly I don't know how trustworthy any of these apps are - this is a big problem with security software on Windows - you don't know if the anti-malware is going to behave like malware.




Consider applying for YC's Fall 2025 batch! Applications are open till Aug 4

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: