
A free, open-source outbound firewall that alerts on new connection attempts and lets users allow or block each process by destination. Rules can be scoped to a program or a single endpoint, with expiry times, allow and block lists, and separate profiles. It also offers a passive mode and a built-in network monitor, helping catch malware that tries to call home.
anchor apple generic and identifier "com.objective-see.lulu.app" and (certificate leaf[field.1.2.840.113635.100.6.1.9] /* exists */ or certificate 1[field.1.2.840.113635.100.6.2.6] /* exists */ and certificate leaf[field.1.2.840.113635.100.6.1.13] /* exists */ and certificate leaf[subject.OU] = VBG97UB4TA)