¬  TCPBlock Help

About
TCPBlock is a lightweight and fast application firewall for Mac OS X 10.5 or later developed by delantis.com. The Mac OS X firewall protects you from connections that come from outside of your computer. But what about the software from your computer that opens new connections to the internet? With TCPBlock you can prevent selected applications on your computer from opening connections to the network. TCPBlock is implemented as a loadable kernel module which contains all the blocking logic. You can configure it in the System Preferences TCPBlock preference pane or with the tcpblock command line utility. All the configuration changes are made persistent in a configuration file on the hard disk. At system boot time the TCPBlock kernel extension reads its configuration from disk and is ready to go.

How to use it
In System Preferences open the TCPBlock preference pane. You can choose to enable the firewall, to block all connections to the network and you can specify if your application list is a black list with items to disallow or a white list with items to allow.  In the Application List tab use the + button to add new applications to the list. Use "Select Applications" from the + button menu to add applications or choose "New Item" and type the Unix command name of the application. To get the command name open a Terminal and type "/usr/local/bin/tcpblock -m" to start the TCPBlock network monitor. As soon as your application tries to establish a network connection it is listed in the network monitor. Copy the application name from the network monitor and paste it into the preference pane application list.  In the Connecting Apps tab you have a live view of the current network activity. It displays the last up to 100 network connections. To include connecting apps in your application list select one or more items in the connecting apps table and click the button "Insert into Application List".  Note that, due to the limited knowledge of filenames in the Mac OS X kernel only the first 16 characters of the command name are used for name comparations. Any characters above this limit are truncated.

Advanced configuration
Use the command line client /usr/local/bin/tcpblock to configure TCPBlock or to monitor its activities. tcpblock -h lists all the available options. The TCPBlock configuration is stored in the file /etc/tcpblock.conf. If you edit this file then execute tcpblock -c to load the changed configuration. This file is overwritten if you configure TCPBlock with the preference pane or the tcpblock utility.

Donate
TCPBlock is donationware. If you use it please consider supporting its maintenance with a donation to delantis.com. Donate via PayPal to tcpblock@delantis.com. Thank you for supporting TCPBlock!