opensnitch icon indicating copy to clipboard operation
opensnitch copied to clipboard

[Bug Report] Extended rule with port restrictions doesn´t work on Debian 12 Bookworm Linux Kernel 6.1.0-22

Open Xx-Ylzakros-xX opened this issue 6 months ago • 0 comments

Hello opensnitch-developer team,

at first thanks for your work :-)

The current environment:

virtual machine virtual box

opensnitch 1.6.8

debian 12 Bookworm with latest updates

linux kernel 6.1.0-22

desktop environment XFCE

The issue:

Create two new rules or use an existing one where firefox creating connects to www e.g startpage.com or google.com.

In that rule, configure it as follows:

application register: rule = active Path to program = /usr/lib/firefox-esr/firefox-esr

network register: protocol = true TCP to this Port = true 53, 80, 443

Image

Image

Save the rule under a name eg. firefox TCP

Do the same again with a second rule, but this time only change in the network register protocol = true UDP and save it as eg. firefox UDP.

Image

When firefox starts, a popup from opensnitch appears again, asking for the rights to port 53 UDP

Image

This permissions are granted with rule 2.

The result is firefox can´t connect to the website until a rule without port restrictions enabled or grant the pop up window of opensnitch to create a new rule without port restrictions.

Image

The correct result should be firefox is loading the website without problems, because the rules are granted.

Maybe the current test environment on my virtual machine isn´t the right one for the moment ?

Or is this issue also persistent in non virtual linux distributions ?

Xx-Ylzakros-xX avatar Jun 07 '25 18:06 Xx-Ylzakros-xX