GeoNetMon
Initial release.
- Live TCP/UDP connection monitor with per-connection GeoIP, reverse DNS, bandwidth, and risk scoring
- Interactive outbound firewall — allow/deny prompts per app, with configurable scope and duration (Little Snitch /
OpenSnitch style) - Privilege-separated daemon (geonetmond) — GUI runs unprivileged, daemon handles packet interception via nftables + NFQUEUE
- DNS-aware prompts — shows hostnames not IPs on the first packet
- Binary integrity pinning — flags if an allowed app's executable changes
- Blocklist subscriptions — 14 preset lists (StevenBlack, OISD, Hagezi, URLhaus, Phishing Army and more)
- World connection map with great-circle arcs
- Connection history (SQLite, 30 day retention)
- Statistics dashboard — top apps, hosts, countries
- GNOME desktop notifications for allow/deny prompts (visible when minimised)
- Manual IP blocking via ufw, nftables, or iptables
- Themes: System, Dracula, Catppuccin (Latte, Frappé, Macchiato, Mocha)
- System tray support
Install
sudo dpkg -i geonetmon_1.0.0_all.deb
sudo apt install -f # pulls any missing dependencies
Log out and back in after install, then launch from your application menu or run geonetmon.