Application Firewall

[rugk]

I think it would be awesome if Qubes OS would not only have a firewall, which li9mits VMs to IPs/ports, but an application firewall, which can limit individual applications.

This is how it could look: https://subgraph.com/img/screenshots/FirewallDetailed.png
As shown the firewall should be interactive and allow the user to control all the traffic, which passes out of a VM.

Advantages:

• Temporarily allow/disallow
• Allowing/disallowing individual applications
• Users can see when application request internet access and what sites they'll try to connect to

[adrelanos]

Related:
#1757

[adrelanos]

Related:
#1757

[andrewdavidwong]

@adrelanos, @rugk: Is this actually a duplicate of that issue (#1757)? Looks like it, but I'm not an expert on Subgraph.

[andrewdavidwong]

@adrelanos, @rugk: Is this actually a duplicate of that issue (#1757)? Looks like it, but I'm not an expert on Subgraph.

[adrelanos]

#1757 Is a specific suggestion for an application firewall. This ticket is a generic suggestion for any application firewall.

[adrelanos]

#1757 Is a specific suggestion for an application firewall. This ticket is a generic suggestion for any application firewall.

[andrewdavidwong]

@adrelanos: Fair enough! :)

[andrewdavidwong]

@adrelanos: Fair enough! :)

[mfc]

maybe mark #1757 as a duplicate of this? which we can open again if that is the path we wish to pursue in the future.

[mfc]

maybe mark #1757 as a duplicate of this? which we can open again if that is the path we wish to pursue in the future.

[adrelanos]

Makes sense.

[adrelanos]

Makes sense.