

Rules are stored in a list and are persistent by default, but you can also create temporary rule that expire at a specific time or event. Once your choice is taken the connection is released and matched against the ruleset, then the flow is passed or blocked accordingly. Rule will match all app's connections or only some connections matching the IP address, hostname, domain or port. The alert is used to define a rule to be applied to this connection. Vallum can be configured to be inclusive, exclusive or interactive.īy default Vallum runs as an interactive firewall, when an app wants to connect the connection is held and a popup notification alert is displayed. The network filter runs in background and is capable of intercepting all third party apps connections and all system processes connections on macOS 11.2 and later. Vallum network extension filter is enabled when Vallum app is started and is disabled when Vallum app quits.


Each flow is matched against a set of rules and then a verdict is applied and the flow is passed or dropped accordigly. This class handles network flows generated by apps running on macOS. Content filter is provided by a network extension using NEFilterDataProvider. Vallum is based on a macOS System Extension. This allows you to monitor your Mac's activity, block unwanted connections and increase your privacy and security. It intercepts apps inbound and outbound connections and applies the corresponding firewall rules. Vallum is an application-layer content filter.
