DeadInternal wrote:I'm having some trouble understanding how Little Snitch works. I recently got it, and it works pretty well.
Here's the question that came to mind. Let's say I have a 'All Applications' rule that allows any port. But I want to block 1 specific app. So I make another rule for that app, and it does not allow any ports. Will the new rule for that app override the all applications one, or will the all applications override that one?
Blocking a specific app only affects that app, not any others, unless you make a mistake and choose Deny Connections and All Applications. You must click on Choose Application... (or System Process... if applicable) and navigate to where it's located.
The key to using Little Snitch is that you have to create "Rules" for each app/game. When I install a new app, I generally block it before I start it (whether it's already cracked or it needs to be patched or registration info added). If I choose not to do this (or forget) Little Snitch will pop up to ask. I open Little Snitch, click New and then add the app with "Deny Connections."
Now, you can't do this with every app as some must have internet access. For instance, I didn't block the mail app Postbox, in advance, because I knew it would need internet access. I started it and Allowed all the obvious ones [smtp (port 25), http (port 80), imaps (port 993 and pop3s (port 995)] and only blocked https access (port 443) which is what the developer's website uses. In each of these cases, LittleSnitch popped up to ask me if I wanted to allow access. I clicked "Forever" and "Allow" on the first 4 I mentioned and "Forever" and "Deny" on the last one. Doing this will automatically create the rules.
You can always block something and then go into Little Snitch and delete or edit the rule(s) for the specific app, if there's a problem. The more you use Little Snitch, and the more things you install, the more you'll learn what you need to do. If you ever have a question, you can always post in the Share thread of the app (be sure to check other posts to see if it's already been mentioned).
Some apps have other ways of trying to mess with your "5 finger discount" and the workaround is usually explained...in the thread or in documentation in the download.
Hope this helps.