evilsocket / evilsocket/opensnitch
[Feature Request] Improve rule ordering logic
Open
feature
- Dominant language
- Python
- Stars
- 14.1k
- Forks
- 665
- PR merge metrics
- No merged PRs in 30d
Description
### Summary:
Current [logic behind the rule ordering](https://github.com/gustavo-iniguez-goya/opensnitch/wiki/Rules) is far from intuitive (in particular, the notion of "deny always wins"). I propose two possible ways to improve it:
1. Ordering by the rule number. Each rule has an integer assigned to it, evaluate from small to large.
2. "First matching rule wins" -- an approach used in Mikrotik RouterOS, effectively first rule that matches the packet is used, then if fall back onto the default action if nothing matched.
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.