Am I using Opensnitch correctly?

[VlKlNGS]

Hello World,

I’m just wondering if I’m using OpenSnitch correctly to block stuff, like in the example in the pic below?
Or should I delete acc.exe and just leave the path(like the pop-up window suggests), but in that case if there are multiple .exe files in a folder would they all get blocked?

Also if the path has a directory with spaces in it’s name do I need to encase it in “” like you would when using a path command in the console?

Thank you.

[VlKlNGS]

Finally d-air1 found the solution on the EndeavourOS forums, all credit/thanks go to him. If you stuble upon this in the future here it is:

Alright, I believe I have got it. Been playing around with it for the last few hours and here is what I have come up with.

Step 1: Click on settings.

Step 2: Change Default Target from by executable to by command line.

Step 3: Click create new rule.

Step 4: Check the from this command line box and regular expression box.

Step 5: Inside the box type in the name of the executable. This is capitalization sensitive. Surround the name of the executable with the characters .*. If you know anything about regex. This is a catch all. Also we need to escape the . character in our dot exe file. You do that with a backslash.

The reason why we are using regex is because launchers like steam and lutris are essentially automatically doing the stuff that I told you to do in those commands that I gave you earlier. This creates a lot of command line pollution and noise I reason. Instead we want it to essentially search for this executable in the command line of the program which could easily be dozens or over a hundred words long. Then find the name of the executable we want to block and use that.

Hopefully this helps and the screenshots get the point across. I have had this work for me with multiple games. Specifically I tested Elden Ring and Combat Masters. However, some games that require a network connection. Do outright refuse to launch.

Let me know how this works for you.

P.S. when it comes to mods. YMMV (your mileage may very).