Introducing PacketShield

See the invisible.
Block every threat.

Complete control of Linux network traffic. Instant blocking, real-time monitoring, and a native Tauri UI. Nothing leaves your machine.

Coming soon
systemd service + native Tauri UI
Offline-first, built-in updater, no telemetry
solrachixβ€’
PacketShield
Microsoft Edge
Microsoft Edge
msedge.exe β€’ 20.47.23.4:443
Active
Traffic
13.7 MB
Slack
slack.exe β€’ 3.211.24.88:443
Active
Traffic
9.1 MB
Discord
discord.exe β€’ 162.159.135.234:443
Idle
Traffic
3.4 MB
Steam
Steam
steam.exe β€’ 155.133.248.33:27036
Blocked
Traffic
0.8 MB
Visual Studio Code
Visual Studio Code
Code.exe β€’ 52.95.245.10:443
Active
Traffic
11.9 MB
Monitoring
42 req/s
Quick demo

See PacketShield in action

Block suspicious traffic and watch what each app sends in real time. Clean interface, control first.

Block domains and sites
Stop access to specific sites and domains with precise control.
Block entire applications
Completely stop apps from reaching the internet at the system level.
Total control

Flexible blocking rules

Don't settle for all-or-nothing. With PacketShield you create granular rules per app, per domain, or wildcards (*.ads.com).

  • Block app and distro telemetry
  • Import/Export your rules (JSON)
Blocked Rules
*.doubleclick.net
Advertising β€’ 45 hits blocked
Just now
metrics.ubuntu.com
System β€’ 120 hits blocked
2m ago
2 RULES ACTIVEPACKETSHIELD PROTECTING

Real capabilities

PacketShield: Linux service + Tauri UI

systemd service + Tauri/React UI. App/domain blocking, exportable rules, and real-time monitoring without sending anything to external servers.

Real-time monitoring

Active apps, domains, and states (blocked/active) appear instantly, with user/system/all filters and real process icons.

App/domain blocking

Block from the list or by path/domain (wildcard *.domain). Apps are blocked with per-cgroup iptables rules; domains via DNS + IP rules. The UI shows status immediately.

Exportable rules

List, create, and remove rules; export/duplicate domain and executable blocks. Searches installed apps for quick blocking.

Traffic and connections

Bytes sent/received, connections, and domains per app. States and counters always visible, with block and activity status.

systemd service + Tauri UI

A systemd service enforces blocks with iptables and cgroups. React/Tauri UI with tray, drag window, updater, and native theme. Nothing leaves your machine.

Offline-first, update ready

No telemetry or cloud: processing and blocking are local. Built-in updater delivers new builds without exposing user data.

Comparison

Why choose PacketShield?

Compare directly with the Linux default firewall and other tools on the market.

Compare with:

Capability
PacketShield
Linux Firewall
Per-app real-time monitoring
List of apps using the internet now
One-click app block
Domain blocking (google.com)
Automatic hostname resolution
Detect apps "talking out"
Modern, clean interface
Per-app (cgroup) + domain (DNS + IP) rules
Connection history / alert base
System impact
Low
Low
Cost
Free during beta
Free (ships with the distro)

What the default Linux firewall lacks:

  • β€’Native tools are powerful, but not approachable for users who do not want to work in a terminal.
  • β€’It doesn't clearly show which apps are online in real time.
  • β€’Creating per-app and per-domain rules takes several technical steps and configuration files.
  • β€’The available layer varies between iptables, nftables, and firewalld depending on the distribution.
  • β€’It was not designed as a monitoring + quick-decision tool.

Why PacketShield wins

  • βœ”
    Instant monitoring:Open the app and instantly see which programs are talking to the internet.
  • βœ”
    Smart blocking:Block apps and specific domains with one click, without hand-editing iptables rules.
  • βœ”
    Native engine:A systemd service applies per-app iptables rules using cgroups, right in the kernel firewall.
  • βœ”
    Real domain control:Block google.com or *.domain.com via DNS + IP rules, without memorizing IPs.
  • βœ”
    Built for humans:Modern, clear interface without extra jargon, yet powerful for devs and admins.

One license, forever

Pay once and use PacketShield with no subscription. Want to try it first? The beta is still free to download.

Lifetime license

Linux (x86_64)
$19One-time payment
  • Unlimited monitoring
  • App and domain blocking
  • Connection history
  • Per-app rules via cgroup
  • Updates included
Buy license

* One-time payment, securely processed by Stripe. Updates included.

Frequently asked questions

What is PacketShield?

PacketShield is a network monitor and application firewall for Windows 10/11 and Linux. It shows which apps are using the internet in real time and lets you block an app or a domain in one click.

How do I see which apps are using the internet?

Open PacketShield. The main screen lists every app that is online with live upload and download speed and the domains it is contacting.

Can PacketShield block a website or domain?

Yes. Add a domain such as example.com or a wildcard such as *.ads.com; PacketShield resolves it and keeps the firewall rules updated.

Does PacketShield send my data anywhere?

No. Monitoring and blocking happen locally. PacketShield has no telemetry and no cloud account.

How much does PacketShield cost?

PacketShield is free during the public beta. It is not sold as a subscription.

Which systems are supported?

Windows 10 and 11 (x64), and x86_64 Linux distributions with systemd and kernel 5.8+, such as Ubuntu 24.04, Debian 12, Fedora 40 and Arch Linux.

Ready to take control?

Take control of your network in minutes.

Coming soon