How to Enhance Mac OS X’s Firewall with IceFloor
Posted 03/22/2012 at 1:48pm
| by Cory Bohon
Configuring firewalls can be frustrating, especially if you have to manually add applications, port numbers, or IP addresses that can pass through. Fortunately, applications like IceFloor that help simplify this process. This free Mac App allows you to enable and disable services, applications, and hardware with ease, and with its advanced mode, you can also manually block specific port numbers. Read on to learn how to use this impeccable tool.
Difficulty: Medium to Hard
What You Need:
>> IceFloor (free)
>> Mac OS X Lion (10.7) or higher
Blocking Services, Applications, and Hardware

When you first launch it, IceFloor will display a list of services under the “Services list” heading. Checked items in this list will be allowed (or whitelisted), while any services, applications, or hardware features left unchecked will be blocked (or blacklisted). Some of the items you can choose to blacklist include:
- System services
- VPN
- Screen sharing
- iChat & Messages
- iTunes Sharing
- Printer Sharing
- CD/DVD Sharing
- Remote Login (SSH)
After checking the desired services, you can select an action for the services. Selecting “Allow everyone” will allow anyone on the network (local or wide area network) to take advantage of the checked services; “Allow only local computers (LAN)” will allow anyone on your local network to access the services; and, “Allow only a list of IP addresses (White List)” will only allow those computers added to the white list to take advantage of the checked services.
Exploring the Advanced Features

The main section of IceFloor is for the beginner firewall manager, but if you’re a little more adventurous, then you may want to take advantage of some of the advanced options of IceFloor.
Clicking the “Advanced Options” button in the main window will open a new window. In the first section of the window, you can choose to block certain TCP and UDP ports representing services on your Mac.

If you don’t know the port numbers used for certain services, such as SQL servers, ICQ, AIM, etc., then you can click the “List” button in this section to see and search through one of the biggest port number listings we’ve ever seen.
In the White List section of the advanced options, you can enter IP addresses to allow to connect to your Mac. You can also enter IP addresses in the Black List to block all traffic to and from specific addresses. If you are entering multiple IP addresses in either of these fields, separate them with spaces.
Saving Your Firewall Settings

After you have selected (or entered) services to block, and the action you wish to take, updating your Firewall Settings is as easy as clicking “Enable PF firewall and install boot scripts” on the main IceFloor screen.
Disabling the Firewall Settings

If you choose to disable your firewall settings in the future, open IceFloor again and click the “Disable PF firewall and uninstall boot scripts” button. After authenticating, the scripts will be disabled and the firewall will no longer start at launch.
Viewing Current Network Connections

If you believe that your system is being accessed without your permission, IceFloor can also be of help. Click Advanced options > Show connections to get an instant listing of all of the applications and services being accessed and used on your system. Pretty handy, huh?]
Cory Bohon is a freelance technology writer, indie Mac and iOS developer, and amateur photographer. Follow this article's author, Cory Bohon on Twitter.