> ## Content Index > Fetch the complete content index at: https://darkwebinformer.com/llms.txt > Use this file to discover other available public pages before exploring further. # Portmaster: A free and open-source application firewall that does the heavy lifting for you. Restore privacy and take back control over all your computer's network activity - URL: https://darkwebinformer.com/portmaster-a-free-and-open-source-application-firewall-that-does-the-heavy-lifting-for-you-restore-privacy-and-take-back-control-over-all-your-computers-network-activity/ - Published: 2026-01-04T23:01:38.000Z - Updated: 2026-01-04T23:01:38.000Z - Author: Dark Web Informer - Tags: Tools --- GitHub: --- > Portmaster is a free and open-source application firewall that does the heavy lifting for you. Restore privacy and take back control over all your computer's network activity. > With great defaults your privacy improves without any effort. And if you want to configure and control everything down to the last detail - Portmaster has you covered too. Developed in the EU 🇪🇺, Austria. > [**Download for Free**](https://safing.io/download/) > [**About Us**](https://safing.io/about/) ![](https://storage.ghost.io/c/6b/16/6b16ac9c-cd67-432f-b0f3-bbec941084ff/content/images/2026/01/68747470733a2f2f736166696e672e696f2f6173736574732f696d672f706167652d73706563696669632f6c616e64696e672f706f72746d61737465722d7468756d626e61696c2e706e673f-2.png) 0:00 /1:29 1× ## [Features](https://safing.io/features/) [](https://github.com/safing/portmaster#features) 1. Monitor All Network Activity 2. Full Control: Block Anything 3. Automatically Block Trackers & Malware 4. Set Global & Per‑App Settings 5. Secure DNS (Doh/DoT) 6. Record and Search Network Activity ([$](https://safing.io/pricing/)) 7. Per-App Bandwidth Usage ([$](https://safing.io/pricing/)) 8. [SPN, our Next-Gen Privacy Network](https://safing.io/spn/) ([$$](https://safing.io/pricing/)) # Technical Introduction [](https://github.com/safing/portmaster#technical-introduction) Portmaster is a privacy suite for your Windows and Linux desktop. ### Base Technology [](https://github.com/safing/portmaster#base-technology) - Portmaster integrates into network stack using nfqueue on Linux and a kernel driver (WFP) on Windows. - Packets are intercepted at the raw packet level - every packet is seen and can be stopped. - Ownership of connections is found using eBPF and `/proc` on Linux and a kernel driver and the IP Helper API (`iphlpapi.dll`) on Windows. - Most settings can be defined per app, which can be matched in different ways. - Support for special processes with weird or concealed paths/actors: - Snap, AppImage and Script support on Linux - Windows Store apps and svchost.exe system services support on Windows - Everything is 100% local on your device. (except the SPN, naturally) - Updates are fully signed and downloaded automatically. - Intelligence data (block lists, geoip) is downloaded and applied automatically. - The Portmaster Core Service runs as a system service, the UI elements (App, Notifier) run in user context. - The main UI still uses electron as a wrapper :/ - but this will change in the future. You can also open the UI in the browser ### Feature: Secure DNS [](https://github.com/safing/portmaster#feature-secure-dns) - Portmaster intercepts "astray" DNS queries and reroutes them to itself for seamless integration. - DNS queries are resolved by the default or configured DoT/DoH resolvers. - Full support for split horizon and horizon validation to defend against rebinding attacks. ### Feature: Privacy Filter [](https://github.com/safing/portmaster#feature-privacy-filter) - Define allowed network scopes: Localhost, LAN, Internet, P2P, Inbound. - Easy rules based on Internet entities: Domain, IP, Country and more. - Filter Lists block common malware, ad, tracker domains etc. ### Feature: Network History ($) [](https://github.com/safing/portmaster#feature-network-history-) - Record connections and their details in a local database and search all of it later - Auto-delete old history or delete on demand ### Feature: Bandwidth Visibility ($) [](https://github.com/safing/portmaster#feature-bandwidth-visibility-) - Monitor bandwidth usage per connection and app ### Feature: SPN - Safing Privacy Network ($$) [](https://github.com/safing/portmaster#feature-spn---safing-privacy-network-) - A Privacy Network aimed at use cases "between" VPN and Tor. - Uses onion encryption over multiple hops just like Tor. - Routes are chosen to cover most distance within the network to increase privacy. - Exits are chosen near the destination server. This automatically geo-unblocks in many cases. - Exclude apps and domains/entities from using SPN. - Change routing algorithm and focus per app. - Nodes are hosted by Safing (company behind Portmaster) and the community. - Speeds are pretty decent (>100MBit/s). - Further Reading: [SPN Whitepaper](https://safing.io/files/whitepaper/Gate17.pdf) ## Documentation [](https://github.com/safing/portmaster#documentation) All details and guides in the dedicated [wiki](https://wiki.safing.io/) - [Getting Started](https://wiki.safing.io/en/Portmaster/App) - Install - [on Windows](https://wiki.safing.io/en/Portmaster/Install/Windows) - [on Linux](https://wiki.safing.io/en/Portmaster/Install/Linux) - [Contribute](https://wiki.safing.io/en/Contribute) - [VPN Compatibility](https://wiki.safing.io/en/Portmaster/App/Compatibility#vpn-compatibly) - [Software Compatibility](https://wiki.safing.io/en/Portmaster/App/Compatibility) - [Architecture](https://wiki.safing.io/en/Portmaster/Architecture) - [Settings Handbook](https://docs.safing.io/portmaster/settings) - [Portmaster Developer API](https://docs.safing.io/portmaster/api) # Build Portmaster Yourself (WIP) [](https://github.com/safing/portmaster#build-portmaster-yourself-wip) 1. [Install Earthly CLI](https://earthly.dev/get-earthly) 2. [Install Docker Engine](https://docs.docker.com/engine/install/) 3. Run `earthly +release` 4. Find artifacts in `./dist`