On reducing notifications (Noisy background)

[Bioubiou666]

Hi everyone, I just installed OpenSnitch on Ubuntu.
Is there a global rule or a list of domains I can import to automatically allow vital system services (DNS, Apt, Systemd)?

Are there also pre-built lists of tracker/malware blocking rules available and maintained?

I'm looking for a way to reduce the high number of popups during startup while keeping the system secure.

[gustavo-iniguez-goya]

Hi @Bioubiou666 ,

You just have to select "forever" when answering to a pop-up:

By default it'll create a permanent rule for that command and it won't ask you again to allow it.

In any case, here are some common rules for ubuntu:

allow-always-list-usr-lib-systemd-systemd-timesyncd-123-996.json

{
    "created": "2026-01-13T13:33:56.000000Z",
    "name": "allow-always-list-usr-lib-systemd-systemd-timesyncd-123-996",
    "enabled": true,
    "action": "allow",
    "duration": "always",
    "operator": {
        "type": "list",
        "operand": "list",
        "list": [
            {
                "type": "simple",
                "operand": "dest.port",
                "data": "123"
            },
            {
                "type": "simple",
                "operand": "user.id",
                "data": "996"
            },
            {
                "type": "simple",
                "operand": "process.command",
                "data": "/usr/lib/systemd/systemd-timesyncd"
            }
        ]
    }
}

allow-always-systemd-resolved-53-990-0.json

{
    "created": "2025-12-15T20:04:58.000000Z",
    "name": "allow-always-systemd-resolved-53-990-0",
    "enabled": true,
    "action": "allow",
    "duration": "always",
    "operator": {
        "type": "list",
        "operand": "list",
        "list": [
            {
                "type": "simple",
                "operand": "dest.port",
                "data": "53"
            },
            {
                "type": "simple",
                "operand": "user.id",
                "data": "990"
            },
            {
                "type": "simple",
                "operand": "process.path",
                "data": "/usr/lib/systemd/systemd-resolved"
            }
        ]
    }
}

allow-always-simple-usr-sbin-networkmanager.json

{
    "created": "2025-12-15T00:16:13.000000Z",
    "name": "allow-always-simple-usr-sbin-networkmanager",
    "enabled": true,
    "action": "allow",
    "duration": "always",
    "operator": {
        "type": "simple",
        "operand": "process.path",
        "data": "/usr/sbin/NetworkManager"
    }
}

allow-always-apt.json

{
    "created": "2026-01-16T11:23:47.000000Z",
    "name": "allow-always-apt",
    "enabled": true,
    "action": "allow",
    "duration": "always",
    "operator": {
        "type": "list",
        "operand": "list",
        "list": [
            {
                "type": "simple",
                "operand": "user.id",
                "data": "42"
            },
            {
                "type": "regexp",
                "operand": "process.path",
                "data": "^/usr/lib/apt/methods/http"
            }
        ]
    }
}

allow-until-restart-list-usr-lib-snapd-snapd-0.json

{
    "created": "2026-01-20T10:34:53.000000Z",
    "name": "allow-until-restart-list-usr-lib-snapd-snapd-0",
    "enabled": true,
    "action": "allow",
    "duration": "until restart",
    "operator": {
        "type": "list",
        "operand": "list",
        "list": [
            {
                "type": "simple",
                "operand": "user.id",
                "data": "0"
            },
            {
                "type": "simple",
                "operand": "process.command",
                "data": "/usr/lib/snapd/snapd"
            }
        ]
    }
}

allow-until-restart-list-snap-snap-store-0-9-bin-snap-store-1000.json

{
    "created": "2026-01-20T10:40:35.000000Z",
    "name": "allow-until-restart-list-snap-snap-store-0-9-bin-snap-store-1000",
    "enabled": true,
    "action": "allow",
    "duration": "until restart",
    "operator": {
        "type": "regexp",
        "operand": "process.path",
        "data": "^\\/snap\\/snap-store\\/[0-9]+\\/bin\\/snap-store$"
    }
}

[tredondo]

Yeah it would be great to have rulesets like Easylist.

I've created several hundred rules so far for the most common websites, but frequently get tired of denying random CDNs and trackers so I "allow" the browser for 12 hours.