osquery-extensions icon indicating copy to clipboard operation
osquery-extensions copied to clipboard

fwctl: Allow List, Wildcard, or Port Range ?

Open sean-scott-lr opened this issue 4 years ago • 1 comments

This is more of a question...

How would I go about allowing access to a single IP address ( or IP address range ), or a single domain... or port... etc?

Thank you!

sean-scott-lr avatar Apr 21 '21 21:04 sean-scott-lr

You'd create a rule to deny-all/block all, and then another rule or rules to explicitly allow/pass traffic only to or from that IP, IP range, or domain.

However, our extension doesn't currently have the ability to show or to change what is explicitly allowed, only what is explicitly denied. So the short answer is, it doesn't support your use-case yet.

mike-myers-tob avatar Apr 22 '21 02:04 mike-myers-tob