Super User is a question and answer site for computer enthusiasts and power users. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

From looking at the UI in the System Preferences App, it looks like the application firewall rules in OSX's firewall are "all or nothing" -- "Allow all" or "Block all" effectively. I'm under the impression that this UI is ultimately editing behind the scenes.

Is there a way, perhaps by editing that plist, to get more granular rules? (like "only allow connections from this range of IP addresses, etc.")

share|improve this question
### ALF or PF? If you need to roll your own firewall solution and settings, you have to distinguish between PF and ALF. Do you need to block inbound or outbound connections based on IPs, Port and IP protocol? Or do you need to block network communication for specific applications? In the first case, you will be using OpenBSD's PF, and in the latter ALF. To block by IP range, it's more likely that you'll be using PF, in which case you can use the advanced settings in the free IceFloor app to change configurations. Note: LittleSnitch is a commercial software and not free. – surfbuds Feb 13 '15 at 23:52

Why not use a third party firewall application like LittleSnitch or NoobProof?

LittleSnitch: NoobProof:

Not sure if this is exactly what you are looking for, though.

share|improve this answer

You must log in to answer this question.

Not the answer you're looking for? Browse other questions tagged .