On reducing notifications (Noisy background)

[Bioubiou666]

Hi everyone, I just installed OpenSnitch on Ubuntu.
Is there a global rule or a list of domains I can import to automatically allow vital system services (DNS, Apt, Systemd)?

Are there also pre-built lists of tracker/malware blocking rules available and maintained?

I'm looking for a way to reduce the high number of popups during startup while keeping the system secure.

[gustavo-iniguez-goya]

Hi @Bioubiou666 ,

You just have to select "forever" when answering to a pop-up:

By default it'll create a permanent rule for that command and it won't ask you again to allow it.

In any case, here are some common rules for ubuntu:

allow-always-list-usr-lib-systemd-systemd-timesyncd-123-996.json

{
    "created": "2026-01-13T13:33:56.000000Z",
    "name": "allow-always-list-usr-lib-systemd-systemd-timesyncd-123-996",
    "enabled": true,
    "action": "allow",
    "duration": "always",
    "operator": {
        "type": "list",
        "operand": "list",
        "list": [
            {
                "type": "simple",
                "operand": "dest.port",
                "data": "123"
            },
            {
                "type": "simple",
                "operand": "user.id",
                "data": "996"
            },
            {
                "type": "simple",
                "operand": "process.command",
                "data": "/usr/lib/systemd/systemd-timesyncd"
            }
        ]
    }
}

allow-always-systemd-resolved-53-990-0.json

{
    "created": "2025-12-15T20:04:58.000000Z",
    "name": "allow-always-systemd-resolved-53-990-0",
    "enabled": true,
    "action": "allow",
    "duration": "always",
    "operator": {
        "type": "list",
        "operand": "list",
        "list": [
            {
                "type": "simple",
                "operand": "dest.port",
                "data": "53"
            },
            {
                "type": "simple",
                "operand": "user.id",
                "data": "990"
            },
            {
                "type": "simple",
                "operand": "process.path",
                "data": "/usr/lib/systemd/systemd-resolved"
            }
        ]
    }
}

allow-always-simple-usr-sbin-networkmanager.json

{
    "created": "2025-12-15T00:16:13.000000Z",
    "name": "allow-always-simple-usr-sbin-networkmanager",
    "enabled": true,
    "action": "allow",
    "duration": "always",
    "operator": {
        "type": "simple",
        "operand": "process.path",
        "data": "/usr/sbin/NetworkManager"
    }
}

allow-always-apt.json

{
    "created": "2026-01-16T11:23:47.000000Z",
    "name": "allow-always-apt",
    "enabled": true,
    "action": "allow",
    "duration": "always",
    "operator": {
        "type": "list",
        "operand": "list",
        "list": [
            {
                "type": "simple",
                "operand": "user.id",
                "data": "42"
            },
            {
                "type": "regexp",
                "operand": "process.path",
                "data": "^/usr/lib/apt/methods/http"
            }
        ]
    }
}

allow-until-restart-list-usr-lib-snapd-snapd-0.json

{
    "created": "2026-01-20T10:34:53.000000Z",
    "name": "allow-until-restart-list-usr-lib-snapd-snapd-0",
    "enabled": true,
    "action": "allow",
    "duration": "until restart",
    "operator": {
        "type": "list",
        "operand": "list",
        "list": [
            {
                "type": "simple",
                "operand": "user.id",
                "data": "0"
            },
            {
                "type": "simple",
                "operand": "process.command",
                "data": "/usr/lib/snapd/snapd"
            }
        ]
    }
}

allow-until-restart-list-snap-snap-store-0-9-bin-snap-store-1000.json

{
    "created": "2026-01-20T10:40:35.000000Z",
    "name": "allow-until-restart-list-snap-snap-store-0-9-bin-snap-store-1000",
    "enabled": true,
    "action": "allow",
    "duration": "until restart",
    "operator": {
        "type": "regexp",
        "operand": "process.path",
        "data": "^\\/snap\\/snap-store\\/[0-9]+\\/bin\\/snap-store$"
    }
}