Ask Different is a question and answer site for power users of Apple hardware and software. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

Little Snitch can block internet traffic of a particular app. Can I do something similar without (paying) Little Snitch, either by using free alternatives or configuring the OS X firewall directly?

share|improve this question
Little Snitch is completely worth the price. Buy it. You will thank me. – Josh Jun 20 '13 at 18:44
up vote 12 down vote accepted


TCPBlock is a lightweight and fast application firewall … you can prevent selected applications on your computer from opening connections to the network.

TCPBlock is free and can be downloaded from MacUpdate, however TCPBlock doesn't appear to work with El Capitan and is no longer being updated.

PF Firewall

OS X comes with the PF firewall, which can be configured to block all connections to certain servers in all apps. Blocking all connections from a single app is not possible as far as I am aware without external software.

You can use IceFloor as a GUI for the PF firewall.

IceFloor Black List

share|improve this answer
Can you really block apps from IceFloor? – dstonek Jan 21 '14 at 21:44
I'm using IceFloor v2.0.2. Can you explain your answer a bit more on how to block a specific application from accessing internet? – Manu Sep 1 '14 at 5:01
5 is no longer available. – J. C. Leitão Jan 22 '15 at 23:40
1 new home of tcpblock? – barrycarter Jul 6 '15 at 13:53
@barrycarter That's just a download hub, like CNet – Django Reinhardt Nov 23 '15 at 16:44

TCPBlock still works in OS X Yosemite (although it doesn't seem to work on El Capitan). Install it, restart the machine, open System Preferences and select TCPBlock. Unlock the pane then select the plus icon then Select Applications and choose Adobe Photoshop.

enter image description here

(sorry about link)

share|improve this answer

I think you can through the firewall as stated in this article:

  1. Click the System Preferences icon in the Dock.
  2. Click the Security icon.
  3. Click the Firewall tab.
  4. Click the Start button to turn on your firewall.
  5. Click the Advanced button.
  6. Click the Automatically Allow Signed Software to Receive Incoming Connections radio button to select it.

This enables the firewall. And, by default, virtually all incoming TCP/IP traffic is blocked. You must enable each sharing method that you want to be able to use. When you enable different sharing methods from the Sharing pane in System Preferences (such as File Sharing or FTP Access), you’ll notice that those types of traffic now appear in the Firewall list. (In other words, when you turn on a sharing method, the firewall automatically allows traffic for that sharing method, which Snow Leopard calls a service.)

Click the up/down arrow icon to the right of any service to specify whether the firewall should allow or block connections.

Sometimes, you might want to allow other traffic through your firewall that isn’t on the firewall list of recognized services and applications. At that point, you can click the Add button (which bears a plus sign) to specify the application that your firewall should allow. Snow Leopard presents you with the familiar Add dialog, and you can choose the application that needs access.

share|improve this answer
It seems to me Firewall only blocks incoming traffic to an app but not outgoing traffic from an app. – ohho Jun 19 '13 at 1:08
Yes, the default firewall in OS X (as edited in this way) only blocks incoming traffic. It does not block outgoing connections from apps on your computer. The default OS X PF firewall blocks both ways (see my answer). – grgarside Jun 20 '13 at 14:37

Use Radio Silence. Very simple application, but does the job nicely.

share|improve this answer
Welcome to Ask Different! Radio Silence appears not to be free. Also try linking people to what you are talking about... – unknowndomain Jul 17 '15 at 20:40

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.