We stand with Ukraine to help keep people safe. Join us
IceFloor
IceFloor
3.8
0.0

Front-end for the built-in PF firewall in OS X 10.7 or later.

3.8
Based on 26 user ratesRead reviews & comments

IceFloor overview

IceFloor

IceFloor is a free and open source graphic interface for the OS X built-in PF network firewall.
  • IceFloor is group based. Create groups and assign addresses, services and parameters to pass or block connections
  • makes use of its own set of PF configuration files; default OS X PF configuration files in /etc are not modified by IceFloor
  • start with IceFloor Wizard to create a basic PF configuration in a few mouse clicks
  • use IceFloor interface to set up very complex and customized PF rulesets
  • manage inbound and outbound connections with filtering and bandwidth rules for your Mac and NAT clients
  • hide services using port knocking, list and block connections on the fly using Inspector
  • create new configuration presets and easily switch between predefined and custom PF presets
  • mix IceFloor PF rules with your custom PF rules, interact with external applications like sshguard
  • share Internet connection using PF NAT, assign per-client filtering and bandwidth rules and redirections
  • browse PF ruleset with the new PF Rules Browser, display filtering, bandwidth and NAT PF rules and pipes
  • analyze PF logs with numerical and graphical statistics, enumerate remote hosts using stroke or nmap based GUI tools
  • debug and test PF rulesets easily and quickly using the optional IceFloor Menulet
  • IceFloor requires OS X 10.7 or later. Some features requires OS X 10.8 or later.
Note: While the software is classified as free, it is actually donationware. Please consider making a donation to help support development.

What’s new in version 2.0.2

Updated on Jun 05 2014

Version 2.0.2:
  • Boot scripts bug fixed. Now pf is enabled after system reboot
  • Now compatible with OS X 10.10 Yosemite DP1
  • Minor bug fixes
  • To update from IceFloor 2.0, please backup your IceFloor configuration, uninstall IceFloor 2.0, and install IceFloor 2.0.x, then re-import your configuration and start PF.
View older IceFloor updates

Information

License

Free

Size

5.7 MB

Downloads

31277

App requirements

  • Intel 32
  • Mac OS X 10.7 or later
Try our new feature and write a detailed review about IceFloor. All reviews will be posted soon.

Write your thoughts in our old-fashioned comment

MacUpdate Comment Policy. We strongly recommend leaving comments, however comments with abusive words, bullying, personal attacks of any type will be moderated.
0.0

(0 Reviews of )

There are no reviews yet
  • Comments

  • User Ratings

DesignT
DesignT
Jan 9 2017
2.0.2
5.0
Jan 9 2017
5.0
Version: 2.0.2
I am testing IceFloor with El Capitan 10.11.6 with Menulet and it seems a great PF. How can I see the banned IP and how can I remove a banned IP address ? Thanks
robert-30
robert-30
Mar 8 2016
2.0.2
2.5
Mar 8 2016
2.5
Version: 2.0.2
I'd be a lot happier with it if it loaded my existing pf.conf rules into itself so I could check/use them immediately. Instead, it took over and blocked everything from the get go. I had to uninstall it again to get back online. So although it looks really good, and really does seem to cover just about everything needed, if you have an existing rule set - be careful. Correct me if I'm wrong of course, I usually am.
ozotheclown
ozotheclown
Dec 26 2014
2.0.2
4.5
Dec 26 2014
4.5
Version: 2.0.2
@hanynet.com Great that you are providing the sources with your project! I would like to compile the sources myself, already have Xcode on my system. However, I'm lacking the information on building the application; things like a project or makefile. Do you have any tips/guidance on how to start?
ozotheclown
ozotheclown
Dec 26 2014
2.0.2
4.5
Dec 26 2014
4.5
Version: 2.0.2
@hanynet.com Great that you are providing the sources with your project! I would like to compile the sources myself, already have Xcode on my system. However, I'm lacking the information on building the application; things like a project or makefile. Do you have any tips/guidance on how to start?
LokC1457
LokC1457
May 24 2014
2.0.1
4.0
May 24 2014
4.0
Version: 2.0.1
Well all I wanted to do is limit my upload speed when I have to upload large files (I have no qos). I've tried many other apps that claimed to do that but after a long time this is the only one that works. A bit complicated to use for me, I'm sure this app got many other functions, but I'm happy I can upload large files without slowing down my internet.
Dbrock6931
Dbrock6931
May 18 2014
2.0.1
4.0
May 18 2014
4.0
Version: 2.0.1
Not really a problem but a question. I am trying to escalate the privilege of Lync for audio calls. Is there a way to do that with this tool? the Audio quality stinks when running, currently.
JamesK9816
JamesK9816
Apr 25 2014
2.0.1
3.5
Apr 25 2014
3.5
Version: 2.0.1
IceFloor has helped me to rebuild a firewall for blocking specific ports after Apple took the GUI away in Server 10.8. Unfortunately, with it turned on, I have problems connecting wireless devices to our network. Our server is connected to the internet via a Netgear wireless router. The DHCP server on the router is disabled and instead we use the DHCP server bulit into Mac OS X Server 10.8. Clients connected to the LAN via ethernet get an IP address from the DHCP server, no problem. However clients which connect to the wireless router do not get an IP address from the server when IceFloor is turned on. It works fine with IceFloor turned off. The server is on 10.0.0.201 and I have a 'local' address group which includes 10.0.0.0/24. This address group is associated with Essential system services which includes ports 67 & 68 (all protocols) - I understand that these are the ones needed for DHCP. The log shows lots of the following: Mar 10 19:37:26 mail.ferry-marina.co.uk pf[46237]: 00:00:01.706581 rule 9/0(match): block in on en0: 0.0.0.0.68 > 255.255.255.255.67: BOOTP/DHCP, Request from 3c:07:54:5c:dc:20, length 300 this suggests to me that the DHCP requests from wireless clients are being blocked by the firewall. I've added 0.0.0.0 to the local address list to see if that made a difference, and it didn't. Please can you help?
bobc3934
bobc3934
Jan 15 2014
2.0
1.0
Jan 15 2014
1.0
Version: 2.0
Hi, i have several admin accounts on my mac. the installation account gets informed that it needs to be an administrator to run the program...when i log to a different account admin account, i can run the program. switching back to my main account, no such luck...any suggestions? I really can't write a valid review until i can operate the program...
Snaporaz
Snaporaz
Jul 20 2013
1.6.1
0.0
Jul 20 2013
0.0
Version: 1.6.1
would be interesting to see how many of you have the same issue with this app: after rebooting the computer, the icefloor ruleset ist not enabled anymore. this happens to me on various computers, even on a fresh and clean install of os x mountain lion. if you enable it again in the icefloor-firewall-tab, everything is fine until the next reboot of your computer after which the ruleset is disabled again.
xeen3d
xeen3d
Jan 9 2013
1.4
5.0
Jan 9 2013
5.0
Version: 1.4
Hi IceFloor 1.4 is most stable and Feature rich PF Front-end i know. For normal User a fast way to get a secure system and for advanced User a good Way to control what have done with PF. For all Users without knowledge of TCP/IP use the set and forget it Mode, select your Services that you would share like SMB and enable Firewall thats all. For all Users with enough Network knowledge try this PF front-end you will get enough Power to make advanced Firewall Rulesets and nice Logging Features.
charlesolease
charlesolease
Dec 11 2012
1.3
5.0
Dec 11 2012
5.0
Version: 1.3
5/5 stars!!! Great application. I had slow internet for 2 weeks and called Geek Squad. Some elongated story about UPnP was hacked, my router was hacked etc. etc. and they wanted to come out and the cost was going to be $500 dollars. Instead I tried this application and installed it on all my Macs (only have Apple computers) setting up the firewall rules and "emerging threats." Internet is now running fast again and with online help I checked my router and the UPnP rules that were created in my router by a remote hacker, according to Geek Squad, are now gone. So long story short this app saved me $500. As a noobie I would just like to ask how the "emerging threats" works? Where is this list pulled from and how will it automatically update? How will this part of the firewall protect me?
newsun
newsun
Jul 19 2012
1.2
0.5
Jul 19 2012
0.5
Version: 1.2
Tried this out to be able to open some ports on OSX 10.7. After enabling it, everything that tried to access the internet in any fashion crashed or got stuck, pfctl was getting stuck when looking at top, IceFloor would not load back up once closed. I ended up having to disable the IceFloor anchors in the pf.conf file and then hard reset the system before I could load IceFloor to disable it and get back to a working state for my machine. I really don't understand why the default firewall on OSX does not have any semi-advanced options such as opening ports. :(
Rick72
Rick72
Mar 1 2012
1.0 beta 3
0.0
Mar 1 2012
0.0
Version: 1.0 beta 3
Looks promising and was eager to give this a whirl on my Lion Server but it says that Lion Server is not supported?
winonafonda
winonafonda
Nov 12 2020
5.0
Nov 12 2020
5.0
Version: null
rochakbaveja452
rochakbaveja452
Jul 2 2019
2.5
Jul 2 2019
2.5
Version: null
DesignT
DesignT
Jan 9 2017
5.0
Jan 9 2017
5.0
Version: null
robert-30
robert-30
Mar 8 2016
2.5
Mar 8 2016
2.5
Version: null
ozotheclown
ozotheclown
Dec 26 2014
4.5
Dec 26 2014
4.5
Version: null
LokC1457
LokC1457
May 24 2014
4.0
May 24 2014
4.0
Version: null
Dbrock6931
Dbrock6931
May 18 2014
4.0
May 18 2014
4.0
Version: null
JamesK9816
JamesK9816
Apr 25 2014
3.5
Apr 25 2014
3.5
Version: null
RunTime
RunTime
Apr 25 2014
4.0
Apr 25 2014
4.0
Version: null
stayf7204
stayf7204
Apr 6 2014
2.5
Apr 6 2014
2.5
Version: null
bobc3934
bobc3934
Jan 15 2014
1.0
Jan 15 2014
1.0
Version: null
DJ-RodrigoSA
DJ-RodrigoSA
Jan 8 2014
5.0
Jan 8 2014
5.0
Version: null
a-m-k
a-m-k
Nov 24 2013
5.0
Nov 24 2013
5.0
Version: null
Dgeo
Dgeo
Nov 17 2013
5.0
Nov 17 2013
5.0
Version: null
xeen3d
xeen3d
Nov 4 2013
5.0
Nov 4 2013
5.0
Version: null
Deev
Deev
Jun 16 2013
4.0
Jun 16 2013
4.0
Version: null
rriley
rriley
Jun 9 2013
2.5
Jun 9 2013
2.5
Version: null
Byteburner
Byteburner
May 22 2013
4.0
May 22 2013
4.0
Version: null
charlesolease
charlesolease
Dec 12 2012
5.0
Dec 12 2012
5.0
Version: null
newsun
newsun
Jul 19 2012
0.5
Jul 19 2012
0.5
Version: null
Haliomaster
Haliomaster
May 7 2012
4.0
May 7 2012
4.0
Version: null
Beamy
Beamy
May 4 2012
4.0
May 4 2012
4.0
Version: null
Graby
Graby
Apr 24 2012
3.5
Apr 24 2012
3.5
Version: null
Saschier
Saschier
Mar 14 2012
2.0
Mar 14 2012
2.0
Version: null
Widber
Widber
Mar 7 2012
5.0
Mar 7 2012
5.0
Version: null
Greedyfranky
Greedyfranky
Mar 3 2012
5.0
Mar 3 2012
5.0
Version: null
How would you rate IceFloor?
Similar apps
Little Snitch
Alerts you about outgoing network connections.
Is this app is similar to Little Snitch? Vote to improve the quality of this list.
Vote results
1
Upvotes
1
Total score
0
Downvotes
Hands Off!
Monitor and control application access to network and disks.
Is this app is similar to Hands Off!? Vote to improve the quality of this list.
Vote results
1
Upvotes
1
Total score
0
Downvotes
LuLu
Shared-source macOS firewall.
Is this app is similar to LuLu? Vote to improve the quality of this list.
Vote results
1
Upvotes
1
Total score
0
Downvotes
NetBarrier X9
Firewall and identity-protection software.
Is this app is similar to NetBarrier X9? Vote to improve the quality of this list.
Vote results
0
Upvotes
0
Total score
0
Downvotes
PFLists
Group-based basic PF firewall frontend.
Is this app is similar to PFLists? Vote to improve the quality of this list.
Vote results
1
Upvotes
-1
Total score
-2
Downvotes