Portmaster

Active

Overview

Portmaster is a free and open-source application firewall that monitors and controls network activity on a per-app basis, blocking trackers, ads, malware, and unwanted connections. It provides detailed views of connections, including domains, countries, and bandwidth usage, with options for global and custom app profiles. Designed for privacy-conscious users on desktops, it stands out with automatic blocking, secure DNS support (DoH/DoT), and advanced configuration for granular control.24

Key Features

  • Network Monitoring - Tracks all app connections, showing details like domains, countries, and active/blocked activity.
  • App Profiles - Creates custom rules and profiles for specific applications or groups using process paths and fingerprints.
  • Automatic Blocking - Blocks trackers, ads, malware links, and LAN connections by default.
  • Secure DNS - Intercepts and resolves DNS queries via DoH/DoT with split horizon support against rebinding attacks.
  • Network History - Records connections in a local database for searching (requires paid upgrade).
  • Bandwidth Usage - Monitors per-app bandwidth (requires paid upgrade).
  • SPN Privacy Network - Next-generation privacy network for enhanced protection (requires premium upgrade).

Pricing

PlanPriceIncludes
FreeFreeCore firewall, monitoring, automatic blocking, secure DNS, app profiles.
ProSubscription (details on site)Network history recording and search, per-app bandwidth usage.
PremiumSubscription (details on site)SPN privacy network access.

Platforms & Requirements

Runs on Windows and Linux desktops with no specified minimum requirements in sources; supports host-based control on installed devices. No mobile or macOS support mentioned. Pro features like history require subscription.124

Integrations & Ecosystem

  • Secure DNS over HTTPS (DoH)
  • DNS over TLS (DoT)
  • Safing account for dashboard access
  • Local database for history (paid)
  • SPN privacy network (paid)

Alternatives

AppDifference
Little SnitchmacOS-only application firewall with similar per-app control but no Linux support.
OpenSnitchOpen-source Linux-focused firewall, lacks built-in ad/tracker blocking and secure DNS.
GlassWireNetwork monitor with firewall features across platforms, more visualization-focused but less privacy-oriented.
Pi-holeNetwork-wide ad blocker via DNS, not per-app and requires separate hardware setup.

Reputation

Portmaster is praised as a recommended free privacy tool for blocking ads, trackers, and monitoring connections on Windows/Linux, with strong defaults and detailed app insights.12 Users appreciate its open-source nature, EU development, and ease for beginners while offering advanced controls.4 Criticisms are minimal in sources, though some features like history and SPN require paid upgrades.4

Sources (6)
  1. https://www.youtube.com/watch?v=8p0XlG_RYQg
  2. https://securityboulevard.com/2023/02/how-to-basics-of-using-safing-portmaster/
  3. https://wiki.safing.io/en/Portmaster/App/AppsAndProfiles
  4. https://github.com/safing/portmaster
  5. https://pkg.go.dev/github.com/safing/portmaster/profile
  6. https://portmaster.games