|
1 | 1 | A node is a daemon running on a machine. You can install the daemon on multiple machines, and manage them from the server (i.e.:GUI). |
| 2 | +The GUI or TUI acts as the server. |
2 | 3 |
|
3 | 4 | > ℹ️ Note: if you want to install **only** the daemon from the Debian repositories, you'll have to execute this command: |
4 | 5 | > |
5 | 6 | > `$ sudo apt install --no-install-recommends opensnitch` (otherwise it'll install both, the daemon and the GUI) |
6 | 7 |
|
7 | | - |
| 8 | +<p align="center"> |
| 9 | +<img src="https://user-images.githubusercontent.com/2742953/197076010-2502855a-cdae-4f03-90bc-7a715efbbf64.png"/> |
| 10 | +</p> |
8 | 11 |
|
9 | | -You can view the list of known nodes from the tab Nodes: |
| 12 | +You can view the list of connected nodes from the Nodes tab: |
10 | 13 |
|
11 | | - |
| 14 | +<img width="1074" height="470" src="https://github.com/user-attachments/assets/49199d84-a554-4775-b4fc-0b9e618feb25" /> |
12 | 15 |
|
13 | | -<img width="600" src="https://user-images.githubusercontent.com/2742953/218576821-67fa3524-520a-4f5f-9656-3185a758022b.png"> |
| 16 | +---- |
14 | 17 |
|
| 18 | +And by double clicking on a node, you can see the network activity of that node. |
15 | 19 |
|
16 | | -And by double clicking on a node, you can see the network activity for that node. |
| 20 | +<img width="1166" height="429" src="https://github.com/user-attachments/assets/2e83f239-d2ef-45e3-9148-babbed7e74e9" /> |
17 | 21 |
|
18 | | -#### Configuration |
19 | 22 |
|
20 | | -As explained in the [Configurations](https://github.com/evilsocket/opensnitch/wiki/Configurations#gui) section, you have to launch the daemon as follow in order to accept connections from remote nodes: |
| 23 | +### Configuration |
| 24 | + |
| 25 | +By default, the GUI (server) and the nodes listen on a unix socket. If you want to manage multiple nodes, you have to change the GUI (server) address from the Preferences -> UI tab. |
| 26 | + |
| 27 | +First change the (server) address of the node from the Preferences dialog, Nodes tab: |
| 28 | + |
| 29 | +<img width="646" height="591" src="https://github.com/user-attachments/assets/e1d8666b-5487-4e78-bb86-f662f8427da3" /> |
| 30 | + |
| 31 | +<p>The node will disconnect and try to reconnect to the new address.</p> |
| 32 | + |
| 33 | +<p>Then change the address of the GUI (server):</p> |
| 34 | + |
| 35 | +<img width="646" height="591" src="https://github.com/user-attachments/assets/072f63aa-369e-40e6-bf3f-99395d931018" /> |
| 36 | + |
| 37 | +<p></p> |
| 38 | +<p></p> |
| 39 | + |
| 40 | +> ⚠️ Important: Before changing the GUI (server) address, always change the node address. Otherwise you'll have to edit the daemon configuration manually. |
| 41 | +> |
| 42 | +
|
| 43 | + |
| 44 | + |
| 45 | +<p></p> |
| 46 | +<p>You can also launch the GUI from the terminal like this:</p> |
21 | 47 |
|
22 | 48 | `$ /usr/local/bin/opensnitch-ui --socket "[::]:50051"` |
23 | 49 |
|
24 | 50 | It'll make the GUI listen on port 50051, any IP. You can also use an IP: `$ /usr/local/bin/opensnitch-ui --socket "127.0.0.1:50051"` |
25 | 51 |
|
26 | | -Now you need to configure each node to connect to the server. In `/etc/opensnitchd/default-config.json` set the Address field to the server address: |
| 52 | +-- |
| 53 | + |
| 54 | +### Rules configuration |
| 55 | + |
| 56 | +<p>The GUI also allows to configure nodes' rules, both application and system firewall rules.</p> |
| 57 | + |
| 58 | +<p>When there's more than one node connected to the GUI, every dialog of the GUI will display the list of nodes:</p> |
27 | 59 |
|
28 | | -```json |
29 | | - "Server": |
30 | | - { |
31 | | - "Address":"192.168.1.100:50051", |
32 | | - }, |
33 | | -``` |
| 60 | +<p>Rule</p> |
| 61 | +<p></p><img width="560" height="549" src="https://github.com/user-attachments/assets/9ef76be1-2fe0-468d-b6bb-733e60503daa" /></p> |
34 | 62 |
|
35 | | -Once a node is connected, you can also change it from the GUI, without connecting to the node via SSH, etc: |
| 63 | +<p>System firewall rule</p> |
| 64 | +<p><img width="510" height="353" src="https://github.com/user-attachments/assets/a111b024-424b-4873-97f0-45a3c485cb5b" /></p> |
36 | 65 |
|
37 | | - |
38 | 66 |
|
39 | | -(the field Address refers to the server address where the node will connect to) |
| 67 | +<p>Use the Rules tab to view and monitor the rules of all nodes:</p> |
| 68 | +<p><img width="1170" height="472" src="https://github.com/user-attachments/assets/c9320c41-dba8-4667-9e20-d37ef7f5ba7a" /></p> |
40 | 69 |
|
| 70 | +<p>and apply actions in batch (delete, apply, .. rules)</p> |
41 | 71 |
|
| 72 | +<p><img width="839" height="529" src="https://github.com/user-attachments/assets/7473531b-09d7-4784-a411-a85d8e639c60" /></p> |
0 commit comments