Skip to content

GeoNetMon

Choose a tag to compare

@jegly jegly released this 08 Jun 03:24

Initial release.

  • Live TCP/UDP connection monitor with per-connection GeoIP, reverse DNS, bandwidth, and risk scoring
  • Interactive outbound firewall — allow/deny prompts per app, with configurable scope and duration (Little Snitch /
    OpenSnitch style)
  • Privilege-separated daemon (geonetmond) — GUI runs unprivileged, daemon handles packet interception via nftables + NFQUEUE
  • DNS-aware prompts — shows hostnames not IPs on the first packet
  • Binary integrity pinning — flags if an allowed app's executable changes
  • Blocklist subscriptions — 14 preset lists (StevenBlack, OISD, Hagezi, URLhaus, Phishing Army and more)
  • World connection map with great-circle arcs
  • Connection history (SQLite, 30 day retention)
  • Statistics dashboard — top apps, hosts, countries
  • GNOME desktop notifications for allow/deny prompts (visible when minimised)
  • Manual IP blocking via ufw, nftables, or iptables
  • Themes: System, Dracula, Catppuccin (Latte, Frappé, Macchiato, Mocha)
  • System tray support

Install

sudo dpkg -i geonetmon_1.0.0_all.deb
sudo apt install -f # pulls any missing dependencies

Log out and back in after install, then launch from your application menu or run geonetmon.