I wish LuLu had some kind of logging though, and asynchronous rule adding (i.e. no need to take decision when connection happens and block by default, and then review this list when I have time), otherwise it at some point you just start accepting connections for all processes without thinking, just to not be distracted too often.