readme: update as markdown, include gif demo
sirubo, readme: use words as args
Blocks outbound tech conglomerate (AS) network traffic.
sirubo [c|create] [h|halt|stop] [r|resume] [s|show]
||Create and start ruleset enforcement and persistence.|
||Stop ruleset enforcement and persistence.|
||Resume ruleset enforcement and persistence.|
The sirubo utility is a POSIX shell script that makes use of:
Transport-layer packet filtering; in particular, nftables on Linux and pf on OpenBSD, to facilitate the rejection of outgoing traffic to autonomous system network, or ASN, prefixes (subnets).
whois, to perform a query for ASN prefixes (subnets).
Preventing passive and nonconsensual telemetry, and the infringement of one's privacy thereafter, from intrusively inquisitive big tech conglomerates, such as Meta (Facebook) and Alphabet (Google).
Dissecting the etymology of sirubo (pronounced as seer-rue-bow), "si" refers to the silicon chemical symbol of "Si", referencing Silicon Valley. The word "rubo" derives from the Esperanto language, meaning "trash".
sudo make install
AS32934 # Google
nc -vw 1 google.com 443
The command should print a message similar to this:
nc: connect to google.com (0.0.0.0) port 443 (tcp) failed: Connection refused
This will indicate that your operating system firewall is configured to reject all outbound traffic directed at Google's ASN prefixes.
Or, optionally, uninstall sirubo and delete its configuration files:
/usr/local/bin/sirubo- The utility itself.
/usr/local/etc/sirubo.conf- Contains ASNs that you, the user, specify for rejection.
/usr/local/etc/sirubo.ruleset- Contains a cached firewall ruleset.
/usr/local/etc/sirubo.ruleset.backup- Contains a defunct firewall ruleset that is reserved as a backup when creating a new ruleset manually or automatically.
/etc/systemd/system/sirubo.service (Linux) - A service that facilitates
firewall ruleset persistency and automatic ruleset updates with every
operating system reboot.
/etc/rc.d/sirubo (OpenBSD) - A service that facilitates firewall ruleset
persistency and automatic ruleset updates with every operating system
LICENSE file for details.