It seems that LuLu simply don't work

[Masroor69]

I installed the Lu Lu app as mentioned in the documentation, on Sequoia 15.0.1.
add the network extensions and allow it to have control of the network.

and add the Telegram app to Block List

However, it seems that Telegram is still connecting and is able to transmit the data to its servers.

[mpas97]

Yeah, Apple messed everything up with macOS Sequoia. See eg. #643 where we are already discussing this behaviour. But it's not this plugin's fault if Apple decides to make the firewall behave like it's disabled and make all security plugin useless...

[Masroor69]

Yeap, I found that, if you disable the system-level firewall you can leverage the LULU.

[JStrategic]

Interestingly enough, I downloaded little snitch mini to see if it is encountering the same issue and little snitch seems to be working with the apple firewall enabled as well, not sure on the difference in how that application is handling the network filtering but thought I'd mention it.

[Masroor69]

One of the options I tested then was Little Snitch and it's not working with a system-level firewall. But it seems they solved the problem in the latest release as you said

[JStrategic]

Is Lulu working again for anyone after the 15.1 update? Still having issues on my end

[CoocooFroggy]

I am also facing the same issue where all apps are able to bypass LuLu now—I would appreciate if we could please keep the issue open until this is resolved.

[Masroor69]

@CoocooFroggy @JStrategic

you could enjoy using LULU if you disable the system-level firewall at
preferences > network > firewall
until the patch comes

[dustookk]

same here， looking for patches

[objective-see]

These are (all?) Apple/macOS bugs ...some that yes, still exist in macOS 15.1

1. "Apple’s new macOS Sequoia update is breaking some cybersecurity tools"
2. "Apple’s built-in macOS firewall breaks third-party firewalls"
3. "A memory leak in Apple’s Network Extension framework"

Bug reports have been filed with Apple, so hopefully they'll fix the issue(s) soon? 🤞🏽

[JStrategic]

Wouldn't disabling the system-level firewall be a terrible idea, since that is responsible for handling incoming connections? Since lulu only handles the outgoing connections.