Releases: evilsocket/opensnitch
v1.4.1
GUI fixes:
- Fixed French translation 3d9b9d9.
- Don't overwrite rules if they already exist af45902 14eb135 (#512).
daemon
https://github.com/evilsocket/opensnitch/releases/tag/v1.4.0
GUI
(If the above packages complain about dependencies, use these ones)
- deb - for old distributions (Ubuntu <= 18.04)
- rpm - for old distributions (Fedora < 29)
v1.4.0
[Update 30/09/2021]: daemon rpm rebuilt to get rid of libc 2.32 version constraint.
What's new
- Added eBPF to intercept processes.
- Added nftables support.
- Added block/allow lists to block ads, spam, etc read more.
- Ability to filter connections from containers.
- GUI improvements:
- More customizable.
- Better performance.
- Better integration with mobile devices.
- Better handling of remote nodes.
- Translated to 6 languages.
You can read more about all the changes following these links:
https://github.com/evilsocket/opensnitch/releases/tag/v1.4.0-rc.1
https://github.com/evilsocket/opensnitch/releases/tag/v1.4.0-rc.2
https://github.com/evilsocket/opensnitch/releases/tag/v1.4.0-rc.3
https://github.com/evilsocket/opensnitch/releases/tag/v1.4.0-rc.4
Don't forget the read the FAQs and known problems before reporting an issue.
Downloads
daemon
- deb x86_64
- deb i386
- deb armhf (for raspberry pi and others)
- deb arm64 (for raspberry pi, Librem5, and others)
- rpm x86_64
GUI
(If the above packages complain about dependencies, use these ones)
- deb - for old distributions (Ubuntu <= 18.04)
- rpm - for old distributions (Fedora < 29)
v1.4.0-rc.4
The last RC of this version hopefully.
New:
- New configuration items added to the config file.
- Default process monitor method is eBPF now. If the eBPF module is not present at /etc/opensnitchd/opensnitch.o or the method cannot be activated, we'll fallback to ProcFS parsing.
- [Prefs] Allow to select what columns are displayed on the Events tab (b644853)
- [Prefs] Allow to ignore temporary rules of Duration "once" or "all temporary rules" (a3a171d)
- [UI] Allow to personalize columns width (de3c4be).
- [Rules] Added combobox to select the type of rules to list when the left panel is collapsed (b644853)
Change:
- Instead of "detect" what firewall to use, default to iptables, and allow to configure nftables or iptables from the configuration /etc/opensnitchd/default-config.json (ba7c4e1 , #455)
Bug fixes and improvements:
-
Fixed missed connections (README: a354ae2)
-
Hungarian translation updated.
-
Pop-ups layout improved (83ab1f9)
-
Improved PID discovering (9a34665)
-
Cache of PIDs/inodes: fixed race conditions, improvements (fbcab5a)
-
Display an error message when the DB loaded from disk is corrupted (2b3fdfc , #460 )
-
More GUI items internationalized.
Packages:
Install them from a terminal, see how
daemon
- deb x86_64
- deb i386
- deb armhf (for raspberry pi and others)
- deb arm64 (for raspberry pi, Librem5, and others)
- rpm x86_64
GUI
(If the above packages complain about dependencies, use these ones)
- deb - for old distributions (Ubuntu <= 18.04)
- rpm - for old distributions (Fedora < 29)
v1.4.0-rc.3
New:
Regression fixed:
- drop connections while a pop-up is running (if the default action is deny) 21c6a91
Bug fixes and improvements:
- eBPF: 1db03b5 , e5b54f0 , f143107
- lists of domains: 6041493 , 8580281 . Kudos to @Techtonictools for testing and reporting issues with this feature.
- UI: 95a30c4 , 403c218 , eaa0158 , 3d9b44c , 5e56e90
- daemon: 3d11134 , 465d531 ,
Packages:
Install them from a terminal, see how
daemon
- deb x86_64
- deb i386
- deb armhf (for raspberry pi and others, if not, report it please)
- deb arm64 (for raspberry pi, Librem5, and others)
- rpm x86_64
GUI
(If the above packages complain about dependencies, use these ones)
- deb - for old distributions (Ubuntu <= 18.04)
- rpm - for old distributions (Fedora < 29)
v1.4.0-rc.2
New feature: Added new eBPF process monitor method.
Join the discussion to read more about the rest of the changes: #415
Packages:
Install them from a terminal, see how
daemon
- deb x86_64
- deb i386
- deb armhf (for raspberry pi, and others, if not, report it please)
- deb arm64 (for raspberry pi, Librem5, and others)
- rpm x86_64
GUI
(If the above packages complain about dependencies, use these ones)
- deb - for old distributions (Ubuntu <= 18.04)
- rpm - for old distributions (Fedora < 29)
v1.4.0-rc.1
New features
- 53bf4f7 Thanks to @themighty1 , now the pop-ups don't block all the network traffic while the dialog is displayed.
- 8a204c0 The events displayed on the GUI can be saved to disk, instead of memory (Preferences->Database)
- 26671de When creating a rule you can select a directory with lists of domains to allow or block. Each entry of a list must be in hosts format (0.0.0.0 www.domain.com). You can combine this option with the rest of fields, so for example you can create a rule with lists of domains (ads, spam, malware, etc) to block, or you can create a rule to limit to what domains Chrome can connect to.
Improvements
4b0b8cc display an error if a monitor method has not been applied
cache
auditd monitor method
e2be2b7 improved monitor method switching
rules
b066b11 create rules in a more efficient way
44e8561 reload only the changed rule(s), instead of all rules.
Fixes
a325876 fixed parsing connections.
c9ae47f fix logging when flag is passed on command line
879d18f ui: fixed monitoring processes details
Misc
f8607d8 [Locale]Add Japanese Translation
7cd16c6 Update Brazilian Portuguese translation
b292838 updated spanish translation
616681e flush conntrack at start
test, test, test: 1d23e73, 0d2e8b5, 1d277ef
Packages:
Install them from a terminal, see how
daemon
- deb x86_64
- deb armhf (works on raspberry pi, and others, if not, report it please)
- deb arm64 (works on raspberry pi, and others)
- rpm x86_64
GUI
v1.3.6
Note: If you have issues using this version, try latest v1.4.0rc2 brefore reporting an issue. Thank you!
Improvements and bug fixes release
The main fix of this release is the compatibility with some VPNs. We've also fixed some important bugs on the UI, which were causing the daemon to crash under certain circunstances.
Packages:
Install them from a terminal, see how
daemon
- deb x86_64
- deb armhf (works on raspberry pi, and others, if not, report it please)
- deb arm64 (works on raspberry pi, and others)
- rpm x86_64
GUI
- deb
- rpm
- rpm Fedora >= 29 (without pip dependencies, so your distro must have all the needed dependencies packaged in the repositories)
changes
510a351 ui, rules: replace rules received from the daemon
7995d7b ui, pop-up: fixed expanding labels
2d90714 ui: added pause state icon
3a5ee13 ui, prompt: improved showing app path and args
95e4afa ui: fixed configuring rules default duration
af9c17c maintain a cache of struct Process for currently active PIDs (#342)
3b750f7 Update Brazilian Portuguese translation
ff6ede0 preserve nfmark when NF_ACCEPT'ing packets
ee76b9c ui, stats: order rules by name by default
37f91bb ui: improved rules section
a6afb95 ui: fixed displaying node stats, rules timestamp
b467283 fixed regexp rules exceptions
e23b838 ui, stats: better position for rules panes
v1.3.5
Bug fix and improvements release
The GUI consumes almost half the memory than before, and it's much more responsive, thanks to @themighty1's contributions.
And from now on the GUI is translated to Spanish, German and Brazilian Portuguese, thanks to @tioguda and @freddii .
daemon fixes
f2c4b37 deleted output rule to drop marked packets
3a3363c rules: delete file from disk if Duration changes
1384db6 fw: clean system rules before insert new ones
e59133b rules: skip checking not enabled rules
Packages:
Install them from a terminal, see how
daemon
- deb x86_64
- deb armhf (works on raspberry pi, and others, if not, report it please)
- deb arm64 (works on raspberry pi, and others)
- rpm x86_64
GUI
- deb
- rpm
- rpm Fedora >= 29 (without pip dependencies, so your distro must have all the needed dependencies packaged in the repositories)
v1.3.0
New features
- Allow to filter connections by destination network.
- Process monitoring dialog
- Allow to add system rules
- Added rpm GUI packages.
Bugs fixed
- daemon: fixed ftrace and auditd monitor method.
- daemon: df952d9 fixed error when IPv6 is not enabled in the system.
- daemon: improved application rules checking.
- daemon: fixed handling IPv6 connections.
- ui: fallback to Qt built-in icons if no valid icon theme is configured.
- ui: fixed compatibility with python3.9
Packages
Install them from the cli, see how
daemon
deb x86_64 - deb armhf - deb arm64 - rpm x86_64
GUI
v1.3.0-rc.2
Download it from here:
https://github.com/gustavo-iniguez-goya/opensnitch/releases/tag/v1.3.0-rc.2
Despite of being tagged as "pre-release", it's fairly stable. We'll release v1.3.0 soon.