opensnitch
opensnitch copied to clipboard
[Bug Report] Extended rule with port restrictions doesn´t work on Debian 12 Bookworm Linux Kernel 6.1.0-22
Hello opensnitch-developer team,
at first thanks for your work :-)
The current environment:
virtual machine virtual box
opensnitch 1.6.8
debian 12 Bookworm with latest updates
linux kernel 6.1.0-22
desktop environment XFCE
The issue:
Create two new rules or use an existing one where firefox creating connects to www e.g startpage.com or google.com.
In that rule, configure it as follows:
application register: rule = active Path to program = /usr/lib/firefox-esr/firefox-esr
network register: protocol = true TCP to this Port = true 53, 80, 443
Save the rule under a name eg. firefox TCP
Do the same again with a second rule, but this time only change in the network register protocol = true UDP and save it as eg. firefox UDP.
When firefox starts, a popup from opensnitch appears again, asking for the rights to port 53 UDP
This permissions are granted with rule 2.
The result is firefox can´t connect to the website until a rule without port restrictions enabled or grant the pop up window of opensnitch to create a new rule without port restrictions.
The correct result should be firefox is loading the website without problems, because the rules are granted.
Maybe the current test environment on my virtual machine isn´t the right one for the moment ?
Or is this issue also persistent in non virtual linux distributions ?