[pabs3]

Sounds like it uses Linux firewall stuff like iptables/nftables/eBPF.

https://github.com/evilsocket/opensnitch/wiki/Dependencies-a...

Seems like the Linux kernel enforces the firewall rules:

https://github.com/evilsocket/opensnitch/wiki/Why-OpenSnitch...