Applications • Applicazioni
x
x x  
x  
 IceFloor
PF FIREWALL FRONTEND





IceFloor is the first OS X free PF graphic frontend. Configure the PF firewall in a few clicks using a very simple interface and a step by step in-app configuration guide (Quick Start).

  • quickly and easily apply PF configurations using PF Presets
  • define inbound filtering rules, allow connections to your services only from a selected list of IP address, block access to services
  • define outbound filtering rules, block connections to services like p2p or chat, define strict networking policies
  • enable Emerging Threats to block dangerous hosts using a free on line service
  • enable SSH brute force protection to block ssh attacks
  • protect your network services with Port Knocking; access services using a platform independent client/server open source technology
  • build detailed numerical and graphic statistics , analyze network traffic, manage logs entries, get whois and dns records, place logs exceptions.
  • Block unwanted connections on the fly using Network Connection Inspector, list all network connections
  • configure a dual homed NAT gateway with port forwarding to share internet connection with other computers in your LAN and export services
  • configure advanced PF and network options for both IPv4 and IPv6
  • Browse PF ruleset edit, add, remove PF rules, anchors, tables, lists, labels, configuration files. Build your own PF ruleset.
  • PDF documentation included for IceFloor and PF ; contextual helps available for every IceFloor feature.

ICEFLOOR IS FREE AND OPEN SOURCE. ICEFLOOR IS ALSO 100% AD-FREE. IF YOU ARE INCLINE YOU CAN SUPPORT FREE SOFTWARE DEVELOPMENT WITH A SMALL DONATION. WE ACCEPT PAYPAL OR BITCOIN DONATIONS. THANK YOU.

 

  Please support free software  
 





Donate using PayPal
hany@hanynet.com
 
 
  Donate Bitcoins
16UvmZcqEEYT5gYrTaGrh82d12726fQi5x


  
  Thank you  
     
   

 

 

 

Complete list of features:

  • uses Mac OS X built-in PF firewall. No kernel modules, no extensions, no pain. IceFloor is free and open source
  • Safe PF configuration: test PF before installing boot scripts
  • IceFloor is used only to configure the OS X built-in PF firewall. You don't need to keep IceFloor running because PF works in background.
  • the easy of use of NoobProof and the power of WaterRoof, all in one application
  • select the services you want to allow, choose lists of IP addresses to allow connections
  • create a black list to block incoming and outgoing connections
  • network connection inspector : check active connections and kill unwanted traffic on the fly
  • monitor applications connections , block outbound connections to unwanted services (block chat, p2p...)
  • filter inbound connections; define a list of allowed IP addresses for each service with Advanced Filtering
  • enable PF logging, see and search logs, rotate and archive logs, put logs exceptions to avoid overhelming log file
  • supports both ipv4 both ipv6 protocols
  • show blocked hosts statistics, see who is trying to connect to your mac, add bad guys to black list in one click, query WHOIS and DNS
  • create graphic statistics based on PF logs
  • Use the free Emerging Threats on-line database to block well-known dangerous hosts
  • Enable SSH brute force protection, automatically ban and identify remote attempts to exploit your ssh server using brute force attacks
  • protect network services with Port Knocking, enable on-demand key protected remote access. (Server available on OS X 10.8 only, clients available for all operating systems)
  • manage PF rules, browse PF ruleset, build your own PF ruleset using all advanced PF features available on OS X
  • edit PF configuration files with the built-in editor
  • add new rules with rule assistant and new anchors
  • add and manage custom PF tables, easily add and remove IPs from PF tables
  • manage PF lists, import IP lists from file
  • setup a dual-homed router with NAT and port forwarding , use your mac as a gateway; analyze and block on the fly NAT connections
  • monitor PF labels and NAT accounting (traffic counters)
  • check open ports with the built-in tcp port scanner
  • import and export IceFloor configurations
  • install boot scripts to load PF rules at boot
  • english PDF documentation included
  • contextual helps and PF faq from OpenBSD 4.6 are available
  • IceFloor is and will be freely available at no charge, including source code and documentation.
  • IceFloor comes under the terms of the NLPL License
  • IceFloor requires OS X 10.7 , 10.8 or 10.8 Server . Older Mac OS X versions do not feature the PF firewall. For older systems you can use WaterRoof, a powerful free and open source IPFW firewall frontend, or NoobProof, an easy-to-use IPFW configuration tool.
  • we release this application for free but if you want to support free software development you can make a small Paypal donation to hany@hanynet.com. We accept and welcome also BitCoin donations to 16UvmZcqEEYT5gYrTaGrh82d12726fQi5x. Thank you.




  • What's new on version 1.6:
  • Backup PF configuration at application launch
  • User interface improvements
  • Bug fixes
  



IceFloor nightly builds and betas

IceFloor latest developer release is sometime available at this link. Please note: those are beta test versions, often full of bugs and with limited functionality. Developer releases are completely unsupported, untested, unreliable and sometime older than the publicly available official release. Use them at your own risk.
Source code for developer releases is available only on request.
IceFloor developer releases purpose is to collect bug reports and comments from testers. Do not expect any new features from developer releases, and do not expect them to work properly. Developer releases are usually tested only on latest OS X version. Often they are released without any sort of documentation or change list.
New feature found in developer versions may be completely removed from next official release. Please be careful when upgrading from an official IceFloor version to a developer release version because sometime the only way to downgrade is to manually remove/replace all IceFloor and PF configuration files and scripts. Sometime it is not possible to upgrade from a developer release to the next developer release or next official version.
You are strongly encouraged to test developer releases on minimal virtual machines created only for that purpose. Please be sure to correctly snapshot your virtual machines every time you install a new developer release, even if the IceFloor build number is the same. Please contact hanynet.com if you want to be active part of IceFloor beta testing and obtain all available documentation and information about current and future IceFloor developer and official releases. Thank you.





  • Hanynet's applications are NOT available on the Mac App Store because Apple does not allow AppleScriptStudio applications to be listed on the Mac App Store. AppleScriptStudio is the development technology we used to develop applications since 2005.
  • Hanynet's applications are NOT signed with Apple GateKeeper technology because Hanynet's applications are OPEN SOURCE. You don't need any sign to trust Hanynet's application because you (and the Mac community) has FREE ACCESS TO ITS SOURCE CODE.





  • Send comments, advices and code contributions and PayPal donations to hany@hanynet.com . Thank you.
  • old IceFloor versions: 1.0b1 1.0b2 1.0b3 1.0 1.1 1.2 1.3 1.4 1.5


IceFloor inbound filtering


IceFloor PF ruleset browser


IceFloor numerical statistics


IceFloor graphic statistics