https://cybertoolchain.io/tools/opensnitch New releases and features in OpenSnitch, tracked by The Cyber Toolchain. en Mon, 15 Dec 2025 00:54:11 GMT https://github.com/evilsocket/opensnitch/releases/tag/v1.8.0 https://github.com/evilsocket/opensnitch/releases/tag/v1.8.0 Mon, 15 Dec 2025 00:54:11 GMT OpenSnitch v1.8.0 adds a configurable audispd socket path and supports the `opensnitch` netfilter table for firewall rules. • Allows configuring the `audispd_events` socket path in the daemon to customize audit event ingestion • Uses a single netfilter table named `opensnitch` instead of multiple legacy tables (mangle, output, input, etc.) • Enables automatic selection of `snapd` paths in pop-up prompts via the UI Breaking changes: • The GUI no longer supports PyQt5 by default, breaking compatibility with Linux Mint 21.2 or earlier, Ubuntu 22.04 or earlier, and OpenSuse 15.5 or earlier without manual package installation Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.7.2 https://github.com/evilsocket/opensnitch/releases/tag/v1.7.2 Tue, 12 Aug 2025 10:49:57 GMT OpenSnitch v1.7.2 adds localhost default rules, bare IP matching, and comma-separated port/IP support in the Rules Editor. • Distribute `000-allow-localhost.json` and `000-allow-localhost6.json` rules to allow default localhost connections • Add `system-fw.json` system firewall rule (netfilter) to bypass interception, disabled by default • Add ability for the daemon to match bare IP requests with empty host names • Allow commas in the Rules Editor UI to specify ports, IPs, and other fields • Add new 'dark-white' theme option in GUI preferences Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.7.0.0 https://github.com/evilsocket/opensnitch/releases/tag/v1.7.0.0 Fri, 30 May 2025 22:34:12 GMT OpenSnitch v1.7 adds IPv6 tunnel support, Cilium eBPF backend, and ASN sync scripts • Adds `IPv6 tunnels` protocol support in the daemon for inspecting tunneled traffic • Replaces the eBPF library from `gobpf` to `Cilium` for improved kernel compatibility • Adds a bash script to automatically update `ipasn` and `asnames` databases for ASN lookups • Introduces a new 12-hour duration option in the UI for temporary rule expiration • Adds support for `loongarch64` architecture in the daemon build rules Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.6.7 https://github.com/evilsocket/opensnitch/releases/tag/v1.6.7 Sun, 29 Dec 2024 00:30:12 GMT OpenSnitch v1.6.7 adds connection detail display, custom event columns, and Qt plugin config via UI. • Adds the ability to display all details of connections in the GUI events view • Allows configuring which columns to display in the Events tab under Preferences -> UI • Enables configuring the Qt platform plugin from the GUI to resolve Wayland erratic behavior Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.6.6 https://github.com/evilsocket/opensnitch/releases/tag/v1.6.6 Tue, 02 Jul 2024 00:33:57 GMT OpenSnitch v1.6.6 adds `Reject` to DefaultAction options and GUI scale factor settings • `DefaultAction` now supports `Reject`, enabling explicit reject policies in rule configuration. • GUI screen/theme scale factor is configurable via a new settings option. • Rules can be configured without the GUI for headless or scripted management. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.6.5 https://github.com/evilsocket/opensnitch/releases/tag/v1.6.5 Fri, 09 Feb 2024 00:32:09 GMT OpenSnitch v1.6.5 adds CLI options to configure rules directory, config file path, eBPF modules and GUI refresh interval • Adds `--rules-directory`, `--config` and `--ebpf-modules` CLI arguments to the daemon to override default paths for rules directory, configuration file and eBPF module directory. • Allows configuring the GUI UI refresh interval via a new setting in the preferences panel. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.6.3 https://github.com/evilsocket/opensnitch/releases/tag/v1.6.3 Thu, 17 Aug 2023 14:10:17 GMT OpenSnitch v1.6.3 introduces SQLite WAL journal mode for improved GUI performance. • Introduces SQLite WAL (Write-Ahead Logging) journal mode to the GUI application. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.6.2 https://github.com/evilsocket/opensnitch/releases/tag/v1.6.2 Thu, 10 Aug 2023 13:51:15 GMT OpenSnitch v1.6.2 adds 'Created' column to rules list and GUI TLS node configuration • Adds a `Created` column to the rules list in the GUI to show rule creation timestamps • Enables configuring nodes TLS options directly from the GUI interface Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.6.1 https://github.com/evilsocket/opensnitch/releases/tag/v1.6.1 Fri, 28 Jul 2023 15:29:27 GMT OpenSnitch v1.6.1 adds SSL authentication between daemon and GUI and Dinit service support • Adds Dinit init system service file support • Adds autostart configuration option for the OpenSnitch GUI Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.6.0 https://github.com/evilsocket/opensnitch/releases/tag/v1.6.0 Wed, 21 Jun 2023 12:30:23 GMT OpenSnitch v1.6.0 adds system firewall policy management from GUI, SIEM integration, and rule export/import • Added option to manage system firewall rules and policies directly from the GUI. • Added option to integrate the daemon with SIEM systems for centralized logging and analysis. • Allow to export and import rules from the GUI. • New rules filtering options to filter connections by more protocols, network interface, source port/ip, etc. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.5.2 https://github.com/evilsocket/opensnitch/releases/tag/v1.5.2 Thu, 28 Jul 2022 09:09:38 GMT OpenSnitch v1.5.2 adds eBPF support via debugfs mounting and improves GUI regex matching. • daemon: mount debugfs if it's not mounted, in order to use eBPF • GUI: improved regular expressions for process path and command line Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch https://github.com/evilsocket/opensnitch/releases/tag/v1.5.1 https://github.com/evilsocket/opensnitch/releases/tag/v1.5.1 Mon, 18 Apr 2022 13:41:56 GMT OpenSnitch v1.5.1 adds customizable GUI themes via pip-installed qt-material • Adds `qt-material` GUI theme customization support for the OpenSnitch interface Full history on Cyber Toolchain: https://cybertoolchain.io/tools/opensnitch