1

I have been using Little Snitch for some time now.
I think the version I've started to use the program with, was 3.5.
Anyway, I remember seeing notifications from Little Snitch about connection attempts during login, and then these appeared as 'Suggested rules' in the configuration.

Recently I had to reinstall OS and all the programs on my Mac mini.
I have installed the latest Little Snitch (4.4.3 that is), but after reboot I have not seen notification about connection attempts during login, nor was there a 'Suggested rules' section in the configuration.

In release notes for Little Snitch 3.*, it is mentioned (bold is mine):

Little Snitch offers rule suggestions based on Silent Mode connections, former, already expired temporary rules, login connections and more.

Though, no mention of login connections in release notes for Little Snitch 4.*. I have found an old thread on official forum, but again - it is about Little Snitch 3.*

The question is:

  • Does Little Snitch 4.* 'inherit' the functionality of blocking connections during login from it's predecessor (i.e. Little Snitch 3.*)?
    • If yes, does it have to be enabled in any special way?

P.S.: I do realize that this question would be more appropriate at the official forum of the Little Snitch developers, but registration there is closed (for like a year now).

  • 1
    You could also just use the contact form on their website :-) – nohillside Feb 26 at 11:33
  • @nohillside, striving for a public answer here (so that anybody like me could then just land here from the search engine) – user363710 Feb 26 at 11:37
  • 1
    Instead of putting the question on hold, let me just explain the problems we tend to have with basic customer support questions: The functionality you are looking for may still be there and work for most people just out of the box. Answers which say "it works for me" won't help you though, and figuring out in detail why it doesn't work for you may require some back and forth with somebody who has experience in solving these kind of issues. – nohillside Feb 26 at 11:39
  • 1
    But maybe I'm overthinking things, let's see whether somebody has an answer. Or you could reach out to support nevertheless and then post the answer you get from them :-) – nohillside Feb 26 at 11:39
  • See also apple.meta.stackexchange.com/a/2509/9058 for some more details on this. – nohillside Feb 26 at 11:41
5

From Little Snitch itself…

Login Connections

While no user is logged in or a login is in progress, Little Snitch cannot display Connection Alerts. It therefore creates suggestions for all connection attempts that occur during that time.

See the Little Snitch Help, chapter Rule suggestions for more information.

enter image description here

& detail from just the first entry in that table…

On 27 10 2019, ARDAgent tried to establish a connection to 100.102.5.131. The request was denied automatically during login.

So, yes, it will block attempts by default until you edit the suggestions into actual approved rules.

| improve this answer | |

You must log in to answer this question.