How does this work on a technical level? What stops an app bypassing the firewall?
https://github.com/evilsocket/opensnitch/wiki/Dependencies-a...
Seems like the Linux kernel enforces the firewall rules:
https://github.com/evilsocket/opensnitch/wiki/Why-OpenSnitch...