Skip to content
SPECIFICTION
Get listed

OpenSnitch

github.com

Free plan Open source LinuxSelf-hosted
Visit github.com
Spec score 8.3 #19 of 76 in Firewall Software

Spec sheet

Purpose
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.Read 30 Sep 2026 · github.com
Product
OpenSnitch is a GNU/Linux interactive application firewall inspired by Little Snitch.Read 30 Sep 2026 · github.com
Supported platforms
linuxRead 22 Sep 2026 · github.com
Free plan
YesRead 22 Sep 2026 · github.com
License
The repository identifies the project license as GPL-3.0.Read 30 Sep 2026 · github.com
Application rules
YesRead 22 Sep 2026 · github.com
Application type
Interactive application firewallRead 28 Sep 2026 · github.com
Architecture support
Release assets include x86_64, i386, armhf and arm64 daemon packages.Read 30 Sep 2026 · github.com
Block lists
It can block system-wide ads, trackers and malware domains, and supports domain, IP, network, regular-expression and MD5 lists.Read 30 Sep 2026 · github.com
Block-list limitation
Block lists may not work when the system uses systemd-resolved.Read 30 Sep 2026 · github.com
Central management
A centralized GUI can manage multiple nodes.Read 28 Sep 2026 · github.com
Compatibility limit
The v1.8.0 release says its GUI is not compatible by default with Linux Mint 21.2 or earlier, Ubuntu 22.04 or earlier, and OpenSUSE 15.5 or earlier.Read 30 Sep 2026 · github.com
Connection alerts
YesRead 22 Sep 2026 · github.com
Connection filtering
It interactively filters outbound connections.Read 30 Sep 2026 · github.com
Current maintainers
The repository provides a link to the current OpenSnitch maintainers.Read 28 Sep 2026 · github.com
Distribution support
Packages are provided for Debian/Ubuntu-style DEB systems, RPM systems, Arch Linux and NixOS.Read 30 Sep 2026 · github.com
Documentation support
The project directs users to documentation for detailed information.Read 28 Sep 2026 · github.com
Domain blocking
It can block ads, trackers, or malware domains system wide.Read 30 Sep 2026 · github.com
Downloads
The project README directs users to download DEB or RPM packages from its releases page.Read 30 Sep 2026 · github.com
Encrypted nodes
Since v1.6.1, node communications can be encrypted with TLS/SSL certificates using simple, tls-simple or tls-mutual authentication.Read 30 Sep 2026 · github.com
Firewall configuration
The GUI can configure the system firewall using nftables.Read 28 Sep 2026 · github.com
Firewall controls
The GUI can configure system firewall rules and inbound policy using nftables; iptables rules cannot be configured from the GUI.Read 30 Sep 2026 · github.com
GUI launcher
The GUI can be started with opensnitch-ui or from the Applications menu.Read 28 Sep 2026 · github.com
Inbound policy
The system firewall configuration can apply a restrictive inbound policy that denies inbound connections while allowing established and localhost traffic.Read 30 Sep 2026 · github.com
Linux distributions
The installation wiki documents packages or installation steps for Debian/Ubuntu, RPM distributions, Arch Linux, and NixOS.Read 30 Sep 2026 · github.com
Log formats
The syslog logger supports RFC3164, RFC5424, CSV, and JSON formats.Read 30 Sep 2026 · github.com
Multi-node management
A GUI or TUI server can manage daemons running on multiple machines and view their network activity.Read 30 Sep 2026 · github.com
Node capacity
The default GUI configuration of 20 workers handles about 10–15 nodes, with each node consuming about two workers.Read 30 Sep 2026 · github.com
Node limits
The default maximum server clients value of 0 allows unlimited incoming node connections.Read 30 Sep 2026 · github.com
Outbound control
advancedRead 22 Sep 2026 · github.com
Outbound filtering
It provides interactive filtering of outbound connections.Read 30 Sep 2026 · github.com
Package formats
Downloadable packages include deb and rpm formats.Read 28 Sep 2026 · github.com
Pricing model
The project accepts donations for its dedicated developers.Read 28 Sep 2026 · github.com
Project community
The project invites users to join its server community.Read 28 Sep 2026 · github.com
Project inspiration
Inspired by Little Snitch.Read 28 Sep 2026 · github.com
Rule direction
bothRead 22 Sep 2026 · github.com
Scale limit
The wiki says the default 20 server workers typically handle 10–15 nodes, with each node consuming about two workers.Read 30 Sep 2026 · github.com
SIEM formats
The syslog integration supports RFC3164, RFC5424, CSV and JSON formats.Read 30 Sep 2026 · github.com
SIEM integration
OpenSnitch can send intercepted events to third-party SIEM systems, and its v1.6.0 documentation says only syslog is supported as a logger.Read 30 Sep 2026 · github.com
Support and community
The README invites users to join the project community server and points users to documentation for installation details.Read 30 Sep 2026 · github.com
Supported platform
GNU/LinuxRead 28 Sep 2026 · github.com
System firewall
The GUI can configure system firewall rules using nftables.Read 30 Sep 2026 · github.com
System-wide blocking
Can block ads, trackers, and malware domains system wide.Read 28 Sep 2026 · github.com
Version limitation
Starting with v1.8.0, the GUI is not compatible by default with Linux Mint 21.2 or earlier, Ubuntu 22.04 or earlier, and OpenSUSE 15.5 or earlier.Read 30 Sep 2026 · github.com

Plans and prices

OpenSnitch Free GNU/Linux · self-hosted · GPL-3.0 Read 30 Sep 2026 · github.com

Every OpenSnitch plan and price →

Where Specifiction places it

Alternatives to OpenSnitchAll alternatives →