On Friday 02 May 2008 14:20:44 you wrote: > I would nevertheless prefer something similar to LittleSnitch > (http://www.obdev.at/products/littlesnitch/index.html) on OS X or to > ZoneAlarm on Windows. Why? Filtering traffic by application (which is different from filtering traffic based on the application layer) doesn't add anything to security. If you don't trust an application to behave correctly, you also cannot trust it not to use other applications via IPC to connect to the Internet. The products you have named are nothing but snake oil. Benedikt -- To unsubscribe from this list: send the line "unsubscribe netfilter" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
