How to allow a program

Plucky can allow or block programs by filename, absolute path, or directory.

pluck + allow program foo.exe
pluck + allow program:C:\Windows\System32\notepad.exe
pluck + allow program /usr/bin/env

To allow a program only for a specific user:

pluck + allow user jane program foo.exe

To allow specific hosts, ips, or ports for a program:

pluck + allow host:microsoft.com program foo.exe
pluck + allow ipv4:1.2.3.4 program foo.exe
pluck + allow port:53 program foo.exe

To allow a program only during specific times, use when:

pluck + when 11-12 allow program foo.exe

To allow a program only during specific times and for a specific user:

pluck + when 11-12 allow user jane program foo.exe

How to block most programs by default

pluck + system
pluck + nhb

How to allow all programs by default

The usual way to do it:

pluck + allow port 443
pluck + allow port 80

Another way to do it (not recommended) is to disable the system feature:

pluck - system

How to know which program to allow

See verdicts

Do not allow a browser

An allow rule that names a program is relatively high priority, and sometimes users do not realize this. For example, the following rule combination would ordinarily cause all content in Chrome to be allowed, including youtube.com.

pluck + block youtube.com
pluck + allow program chrome.exe

That’s usually undesirable.