Domanda

I have been using Little Snitch for some time now.
I think the version I've started to use the program with, was 3.5.
Anyway, I remember seeing notifications from Little Snitch about connection attempts during login, and then these appeared as 'Suggested rules' in the configuration.

Recently I had to reinstall OS and all the programs on my Mac mini.
I have installed the latest Little Snitch (4.4.3 that is), but after reboot I have not seen notification about connection attempts during login, nor was there a 'Suggested rules' section in the configuration.

In release notes for Little Snitch 3.*, it is mentioned (bold is mine):

Little Snitch offers rule suggestions based on Silent Mode connections, former, already expired temporary rules, login connections and more.

Though, no mention of login connections in release notes for Little Snitch 4.*. I have found an old thread on official forum, but again - it is about Little Snitch 3.*

The question is:

  • Does Little Snitch 4.* 'inherit' the functionality of blocking connections during login from it's predecessor (i.e. Little Snitch 3.*)?
    • If yes, does it have to be enabled in any special way?

P.S.: I do realize that this question would be more appropriate at the official forum of the Little Snitch developers, but registration there is closed (for like a year now).

È stato utile?

Soluzione

From Little Snitch itself…

Login Connections

While no user is logged in or a login is in progress, Little Snitch cannot display Connection Alerts. It therefore creates suggestions for all connection attempts that occur during that time.

See the Little Snitch Help, chapter Rule suggestions for more information.

enter image description here

& detail from just the first entry in that table…

On 27 10 2019, ARDAgent tried to establish a connection to 100.102.5.131. The request was denied automatically during login.

So, yes, it will block attempts by default until you edit the suggestions into actual approved rules.

Autorizzato sotto: CC-BY-SA insieme a attribuzione
Non affiliato a apple.stackexchange
scroll top