I currently use TinyWall Firewall, it works very well, it’s small/portable, no complaints I even donated to the Dev but I would really prefer open source, also it needs to be user friendly like TinyWall so my non-tech family members can/will use it like they do with TinyWall.

      • BaroqueInMind@lemmy.one
        link
        fedilink
        arrow-up
        2
        ·
        6 months ago

        Both do deep packet inspection using netflow protocol and filter using crowd sourced detection rules as well as commercial, process-level filtering on a host operating system to detect network intrusion is unecessarily resource intensive.

        https://www.netgate.com/blog/suricata-vs-snort

        ZenArmor does the same as both, but also uses python scripts with a fancy graphical interface.

        • towerful@programming.dev
          link
          fedilink
          arrow-up
          2
          ·
          6 months ago

          Do people really run zenarmour, snort or suricate on their desktop?
          Feels like a network firewall thing to do DPI for the whole house, instead of a per-machine thing.

        • jarfil@beehaw.org
          link
          fedilink
          arrow-up
          1
          ·
          6 months ago

          Process-level filtering is to avoid exfiltration from environments where “all processes run as the same user, with full access to all other processes”… which, unfortunately, are still most of them.

          DPI is nice to stop incoming attacks, and to detect suspicious outgoing traffic, but it’s kind of late when the data is already on the wire, and you won’t be able to stop all possible kinds of traffic that way.