IceFloor
Your rating: Now say why...

(6) 3.9166666666666665

Front-end for the built-in PF firewall in OS X 10.7 or later.   Free
Add to my Watch List
Email me when discounted
IceFloor IceFloor is a free and open source graphic interface for the OS X built-in PF network firewall.
  • IceFloor is group based. Create groups and assign addresses, services and parameters to pass or block connections
  • makes use of its own set of PF configuration files; default OS X PF configuration files in /etc are not modified by IceFloor
  • start with IceFloor Wizard to create a basic PF configuration in a few mouse clicks
  • use IceFloor interface to set up very complex and customized PF rulesets
  • manage inbound and outbound
What's New
Version 2.0:
  • first IceFloor 2 stable release
Requirements
Intel, OS X 10.7 or later



MacUpdate - IceFloor




  • WaterRoof
    +3

  • Little Snitch
    +2

  • NetBarrier
    +1

  • NoobProof
    +1

  • TCPBlock
    +1

  • Radio Silence
    +1
IceFloor User Discussion (Write a Review)
ver. 2.x:
(6)
Your rating: Now say why...
Overall:
(18)

sort: smiles | time
burypromote
-4

-4

bobc3934 reviewed on 14 Jan 2014
Hi,
i have several admin accounts on my mac. the installation account gets informed that it needs to be an administrator to run the program...when i log to a different account admin account, i can run the program. switching back to my main account, no such luck...any suggestions? I really can't write a valid review until i can operate the program...
[Version 2.0]

2 Replies

burypromote
+3
Hanynet.com (developer) replied on 04 Feb 2014
Posting a review in which you admit that you cannot review, is almost useless. The manual is clear. YOU MUST BE AN ADMIN, period.
Anyway. Icefloor 2 can be used only by admin users. You can't run it from a normal user and then authenticate as admin. It won't work. You must log in to OSX with an admin account. Say thanks to Mavericks security APIs.
Please note: this kind of "reviews" is completely useless, nobody needs it.
burypromote
+1

+1
LuukLuuk replied on 31 Mar 2014
I agree with the developer: I find it unfair for Hany's hard work to post a comment like bob's as a review.
burypromote

+22
Snaporaz commented on 20 Jul 2013
would be interesting to see how many of you have the same issue with this app: after rebooting the computer, the icefloor ruleset ist not enabled anymore. this happens to me on various computers, even on a fresh and clean install of os x mountain lion. if you enable it again in the icefloor-firewall-tab, everything is fine until the next reboot of your computer after which the ruleset is disabled again.
[Version 1.6.1]

2 Replies

burypromote
Hanynet.com (developer) replied on 22 Sep 2013
I've received 2 or 3 reports about pf rules not loading at boot. After many tests I was unable to replicate the same errors so I don't know why this happens. Maybe you should look at system logs and try to guess why pf rules do not load at boot.
burypromote
Hanynet.com (developer) replied on 14 Oct 2013
try these shell commands:

sudo xattr -c /Library/LaunchDaemons/com.hanynet*
sudo xattr -c /etc/icefloor.sh

and reboot :)
burypromote
+1

+1

xeen3d reviewed on 09 Jan 2013
Hi
IceFloor 1.4 is most stable and Feature rich PF Front-end i know. For normal User a fast way to get a secure system and for advanced User a good Way to control what have done with PF.
For all Users without knowledge of TCP/IP use the set and forget it Mode, select your Services that you would share like SMB and enable Firewall thats all.
For all Users with enough Network knowledge try this PF front-end you will get enough Power to make advanced Firewall Rulesets and nice Logging Features.
[Version 1.4]


burypromote
+2

+4

charlesolease reviewed on 11 Dec 2012
5/5 stars!!!

Great application. I had slow internet for 2 weeks and called Geek Squad. Some elongated story about UPnP was hacked, my router was hacked etc. etc. and they wanted to come out and the cost was going to be $500 dollars. Instead I tried this application and installed it on all my Macs (only have Apple computers) setting up the firewall rules and "emerging threats." Internet is now running fast again and with online help I checked my router and the UPnP rules that were created in my router by a remote hacker, according to Geek Squad, are now gone. So long story short this app saved me $500.

As a noobie I would just like to ask how the "emerging threats" works? Where is this list pulled from and how will it automatically update? How will this part of the firewall protect me?
[Version 1.3]


burypromote
-3

-1

newsun reviewed on 18 Jul 2012
Tried this out to be able to open some ports on OSX 10.7. After enabling it, everything that tried to access the internet in any fashion crashed or got stuck, pfctl was getting stuck when looking at top, IceFloor would not load back up once closed. I ended up having to disable the IceFloor anchors in the pf.conf file and then hard reset the system before I could load IceFloor to disable it and get back to a working state for my machine.

I really don't understand why the default firewall on OSX does not have any semi-advanced options such as opening ports. :(
[Version 1.2]

1 Reply

burypromote
+3
Hanynet.com (developer) replied on 12 Sep 2012
PF on 10.7 is somehow buggy, it hangs the system on some macs. Bugs has been fixed in 10.8's PF.
Bad PF configurations may also hang the system. IceFloor is not responsible for system hangs in any case, it's just a PF frontend.

About "opening ports"... Easy answer: firewalls are not used to open ports. Firewalls are used to close or filter ports. Ports are open by default. Please RTM.
burypromote
+1

+4
Rick72 commented on 01 Mar 2012
Looks promising and was eager to give this a whirl on my Lion Server but it says that Lion Server is not supported?
[Version 1.0 beta 3]

2 Replies

burypromote
+9
Hanynet.com (developer) replied on 01 Mar 2012
Lion server is not supported by IceFloor. Lion server still relies on ipfw, even if ipfw itself is deprecated. The firewall pane in serveradmin is about ipfw not pf. Lion server is also officially marketed with ipfw and not pf (see apple page for osx server). It is possible to use both pf and ipfw on osx lion server but, to me, it's not a good idea.
This first release of IceFloor is aimed at client systems only. Feature like forwarding, port redirection, nat, traffic shaping will be added in a future version of IceFloor.
For these reasons IceFloor does not support osx server.
burypromote
+3
Hanynet.com (developer) replied on 06 May 2012
IceFloor version 1.2 runs on Mac OS X Server 10.7. The support for this os is experimental. The main window (services list, action and options) is not available. You must configure PF using the IceFloor Rules manager (by hand, WaterRoof-way :D).
Use only on test environments. Do not rely on PF using Mac OS X Server 10.7.
There are currently no troubleshooting comments. If you are experiencing a problem with this app, please post a comment.


stayf7204 rated on 05 Apr 2014

[Version 2.0]



DJ_RodrigoSA rated on 08 Jan 2014

[Version 2.0]



+3

a_m_k rated on 24 Nov 2013

[Version 2.0]



+29

Dgeo rated on 17 Nov 2013

[Version 2.0]



+1

xeen3d rated on 04 Nov 2013

[Version 2.0]



Deev rated on 16 Jun 2013

[Version 1.6.1]



-10

rriley rated on 09 Jun 2013

[Version 1.6]



Byteburner rated on 22 May 2013

[Version 1.5]



+4

charlesolease rated on 11 Dec 2012

[Version 1.3]



+74

Haliomaster rated on 07 May 2012

[Version 1.2]


Downloads:18,862
Version Downloads:4,611
Type:Utilities : Network
License:Free
Date:25 Nov 2013
Platform:Intel 32 / OS X
Price:Free0.00
Overall (Version 2.x):
Features:
Ease of Use:
Value:
Stability:
Displaying 1-6 of 6
Displaying 1-10 of 17
1 2 >
-
-
-
Please login or create a new
MacUpdate Member account
to use this feature
Watch Lists are available to
MacUpdate Desktop Members
Upgrade Now
Install with MacUpdate Desktop.
Save time moving files & cleaning
up space wasting archives.
IceFloor IceFloor is a free and open source graphic interface for the OS X built-in PF network firewall.
  • IceFloor is group based. Create groups and assign addresses, services and parameters to pass or block connections
  • makes use of its own set of PF configuration files; default OS X PF configuration files in /etc are not modified by IceFloor
  • start with IceFloor Wizard to create a basic PF configuration in a few mouse clicks
  • use IceFloor interface to set up very complex and customized PF rulesets
  • manage inbound and outbound connections with filtering and bandwidth rules for your Mac and NAT clients
  • hide services using port knocking, list and block connections on the fly using Inspector
  • create new configuration presets and easily switch between predefined and custom PF presets
  • mix IceFloor PF rules with your custom PF rules, interact with external applications like sshguard
  • share Internet connection using PF NAT, assign per-client filtering and bandwidth rules and redirections
  • browse PF ruleset with the new PF Rules Browser, display filtering, bandwidth and NAT PF rules and pipes
  • analyze PF logs with numerical and graphical statistics, enumerate remote hosts using stroke or nmap based GUI tools
  • debug and test PF rulesets easily and quickly using the optional IceFloor Menulet
  • IceFloor requires OS X 10.7 or later. Some features requires OS X 10.8 or later.
Note: While the software is classified as free, it is actually donationware. Please consider making a donation to help support development.


- -