In today's digital world, security is paramount, and it's a topic that should never be taken lightly. Even if you're a Linux enthusiast who believes their system is impenetrable, you might be in for a surprise. But here's where it gets controversial: no computer connected to the internet is truly invincible. It's a harsh reality, but a necessary one to understand.
Most operating systems come with built-in firewalls, which is a great starting point. However, these aren't always enough to completely safeguard your data. There's always a risk of security breaches, and when they happen, the consequences can be severe. You definitely don't want that, right?
So, what's the solution? Employing an application firewall can significantly boost your desktop or laptop's security. One such firewall is Portmaster, an open-source option designed to fortify your system against threats.
Portmaster is a free application firewall (though there are paid versions with more features) that provides system-wide protection. It meticulously monitors every connection your applications make, detecting anything that could potentially compromise your security. It's like having a vigilant guardian watching over your digital life.
With Portmaster, you gain the ability to block ads and trackers, malware, inappropriate content, and deceptive services. You can customize global and per-app settings, monitor all network activity, set up secure DNS, and selectively allow or block specific websites or even entire countries. It even blocks peer-to-peer (p2p) connections. This application firewall is designed to automate protection, making it a nearly set-it-and-forget-it tool. And this is the part most people miss: it's incredibly user-friendly.
Portmaster is developed and maintained by Safing.io and is compatible with both Linux and Windows (unfortunately, not macOS). Now, let's dive into how to install and use Portmaster.
What You'll Need
I'll demonstrate the installation process on Linux, specifically Ubuntu 25.10. If you're using macOS or Windows, the installation is straightforward: simply download the installer file, double-click it, and follow the installation wizard. For the Linux installation, you'll need a user with sudo privileges. A working network connection is required for all installations. That's it! Let's get started.
Installing Portmaster on Linux
Portmaster provides installer packages for both Ubuntu and Fedora-based distributions. To install it on Ubuntu, go to the Safing.io website, select the .deb option from the download dropdown, and save the file in your ~/Downloads directory. After the download is complete, open a terminal window and navigate to the Downloads directory using the command cd ~/Downloads. Then, install the app with the command sudo dpkg -i Portmaster*.deb. If you're using a Fedora-based distribution, use the command sudo dnf install Portmaster*.deb. The installation should be smooth. Once it's done, you're ready to use the app.
Using Portmaster
When you open Portmaster, you'll be greeted by a setup wizard. The first step is to start the Portmaster service by clicking START NOW. The next steps involve customizing what to block (trackers, ads, etc.) and selecting a Secure DNS service. Portmaster defaults to Cloudflare, but you can choose Quad9, AdGuard, or Foundation For Applied Privacy. The secure DNS feature is great because it protects your entire system, not just your web browser.
Once the setup wizard is complete, you'll find yourself on the Portmaster dashboard, where you can monitor real-time activity. Open your web browser and visit any website. You should see on the Portmaster dashboard how many connections were blocked. For example, I visited just 3 different sites, and 177 connections were blocked. I intentionally mistyped a URL (msnb.com instead of msnbc.com), and Portmaster automatically blocked it, likely because the mistyped URL led to a malicious site. Portmaster doesn't offer a way to bypass the block; it simply blocks the site. Click the bell icon to view your notifications. In my notifications, I was informed that five apps were making connections: Speech Dispatcher, Network Manager, Firefox, and Chronyd.
You can click on an app and configure how Portmaster handles it. For example, when I opened the Firefox entry, Portmaster wasn't blocking connections, which is necessary for it to function. You can also click the Settings tab and configure various aspects, such as network scope, connection types, rules, and filter lists. There's also a Global Settings feature where you can reconfigure the settings you chose during the setup wizard, as well as Networking Scope, Connection Types, Rules, subdomain blocking, and more. What I found with Portmaster is that, out of the box, it performed very well. I could have spent more time configuring the app, but it offered plenty of security without tweaking the settings. Of course, you might find that it needs some adjustments. If you feel it doesn't provide enough security initially, explore the settings to tailor it to your needs.
You can use Portmaster for free, or you can upgrade to a Portmaster Plus account (4€ / month, or about $4.65 US) to add privacy and investigative features, and Safing support, or a Portmaster Pro account (9.90€ / month, or about $11.52 US), which adds SPN (Safing Privacy Network, a privacy-focused network service that routes internet connections through multiple tunnels).
I recommend trying the free version first. If you need more, you can always upgrade.
What do you think? Do you agree with the importance of application firewalls? Have you tried Portmaster or a similar tool? Share your thoughts and experiences in the comments below! Let's get a discussion going!
