A firewall made for browsing
Active mode can ask before an unknown host is contacted, remember your answer for a chosen duration, and show exactly what a page reached or was refused — site, requested host, IP, reverse DNS, network/ASN, protocol and port, with threat-intel lookups one click away. Simple rules can be as direct as google; local lists, hosted community lists and firewall decisions work together. “Allow what this page needs” still keeps analytics, telemetry and ad-tech hosts blocked.