Super User is a question and answer site for computer enthusiasts and power users. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Is there a tool that can be used to prohibit internet access for all applications except selected ones (on Mac OS X)?

"Little snitch" can't be the answer, as it doesn't provide a simple "deny all / allow some" rule.

Reason for the question: When tethering / connecting via iPhone's personal hotspot to the internet, Mac OS X will allow all applications to connect. Each app that needs to update or sync will do it and consume your mobile data quota (e.g. 1GB/month) very quickly.

share|improve this question
Much better after rewrite, and should be reopened. However, do mention that you're already aware of "Little Snitch", since your first version included it. – Ben Voigt Aug 16 '12 at 14:25
up vote 1 down vote accepted

TCPBlock will achieve this for free. Just add Chrome etc to the list of permitted applications and tick the "white list" box. Then everything else is blocked. You need to activate and deactivate the software manually.

(Answer taken from

share|improve this answer
Hey, this is awesome! Exactly what I was looking for - for years! Thank you very much! – Urs Feb 22 '15 at 20:16

Actually, Little Snitch does allow "deny all"/"allow some". Simply create a new profile and deny every incoming and outgoing connection for "Any Process". Then, add allowed connections for any applications you want to whitelist to the same profile. The allowed applications will override the top-level deny.

share|improve this answer
Thanks, I've tried that! But when I created the new profile, setting everything to forbidden (see, it wouldn't kick in. Maybe other (permanent and temporary) rules that are not attached to a profile are overriding the global "deny all" from the profile? – Urs Dec 26 '13 at 20:57
Yes, the default rules and temporary rules will override that setting. The first thing I did when setting up the program was to disable all the bundled rules under "Effective in all profiles". Then (I think) it should work. – Archagon Dec 27 '13 at 2:55
You mean these? ? and then, when you create new rules, do you have to add them to a specific profile too? – Urs Dec 28 '13 at 9:20

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.