How to block HTTP connections?

Ask Fedora
, , ,
1

HTTP is an attack vector for a lot of malware. Pegasus is delivered through malicious redirects which dont work with HTTPS.

There is a bunch of software randomly using HTTP in the background, and I would like to block that without using OpenSnitch.

On Android/GrapheneOS I discovered RethinkDNS which allows multiple Wireguard clients, Orbot (Tor), DNSCrypt/DOT/DOH, Firewall, Filterlist all at once. But it is in early stages and pretty slow and unreliable.

I use the MullvadVPN app from their Fedora repo (which they made the official recommendation after a lot of nagging :))

So this might not be possible? Maybe it is.

2

HTTP is a L7 protocol, it can work on non-standard ports.
Filtering L7 traffic generally requires to utilize DPI.

2 Likes
3

Very interesting! But I guess it can work there, but that depends on the threat.

For example I had Syncthing use HTTP which sounds pretty dangerous, but blocking port 80 would be enough.

Reminds me of this video: