evilsocket / evilsocket/opensnitch

[Feature Request] Programmatic temporary rules

Open
#1,512 3 comments 0 reactions 0 assignees View on GitHub
feature
Dominant language
Python
Stars
14.1k
Forks
665
PR merge metrics
No merged PRs in 30d

Description

I searched the issues and couldn't find anything similar. If I missed something, sorry about that.

### Summary:
I am trying to automate opensnitch rules. At the moment, we can manually add rules to the rules folder, although I'm having some trouble getting opensnitch to actually load those rules. But I'm actually most interested in setting temporary 12h rules, so writing persistent rule files to disk and then cleaning them up is a drag.

I'd love to have direct access via a CLI to add temporary rules to the process itself, and let OpenSnitch handle the purging of expired rules.

Something like `opensnitch add-rule 12h dest.host $someip process.path /usr/bin/someapp` would be quite helpful.

For the curious, the principal motivation here is to reduce notification fatigue in common programs by automatically gathering destination ips and making temporary rules out of them. I don't want them to be permanent, but I do want to reduce the amount of time I spent in the OpenSnitch UI.

Contributor guide

No contributing guide indexed for this repository

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.