OS X IPFW firewall front-end with bandwidth management, NAT setup, logs, etc.
WaterRoof is a firewall management frontend with bandwidth tuning, NAT setup, port redirection, dynamic rules tracking, predefined rule sets, wizard, logs, statistics and other features. With WaterRoof you can set up the IPFW built-in firewall easily and quickly. With the NAT Setup feature you can fine-tune your internet sharing for the home LAN, or you can also set up a full-featured dual-homed firewall for your network. Rules and network option can be stored and loaded at boot time. WaterRoof is only a frontend so it makes use of system tools: this means that when you have finished configuring/testing your firewall, you can safely delete WaterRoof from your system, without loosing your rules. Bandwidth settings, firewall rules, NAT rules, forwarding, logging and other options will be preserved and activated at boot using launchd, following Apple guidelines. This means that WaterRoof is quite safe because it does not install any strange kernel extension or background daemon. You can also download and check WaterRoof source code, it's open. WaterRoof can be used to learn how ipfw works: you can use predefined rule sets to test firewall behaviour, or you can use the wizard to start from scratch with a step-by-step configuration. But WaterRoof can also be used to deeply configure a ipfw firewall/router, using every ipfw option including qos (dummynet queues). English documentation included. Source code available at my web site. WaterRoof is freeware and open-source.
Easy to use (after learning what it's doing and what YOU are doing); it can do a really great work. I've no server, so nothing tested about these.
Cons
Hard learning curve, it's dangerous to perform experiments without a real knowledge of what's will happen. But it MUST be so, power requires responsibility.
Summary
The right way to set things in deep without Terminal. Powerful, obviously requires learning and understanding. Very good
Makes things simple.
fernblatt
Pros
Much simpler than setting up ipfw using terminal
Cons
Can't think of any. I've not had the problem some have had with prefs not saving.
Summary
Easy. Simple. Works. See the author's other program, NoobProof - just like this, but has a more limited set of options to keep folks from doing things like locking themselves out of their own machines, etc.
So Far, So Good
web.master
Pros
Cons
Summary
This review was originally posted on VersionTracker.com.<br />The product does require you to understand the basic of IP networking (use the simpler NoobProof version if you don't have this basic knowledge) but does an effective job of configuring a network level firewall for OS X 10.5 Leopard.
Since 10.5 switched to the application-level firewall instead of network-level, the customization does not provide the necessary protections for those who may be running one form of a server or another (http, dns, mail, etc.)
Two thumbs up for this application, which once you get past the learning curve of the application and what it's doing, is the best I've tried so far.
Great application, thanks.
felicedep
Pros
Cons
Summary
This review was originally posted on VersionTracker.com.<br />This is a very nice tool for experienced users. It is a very rich and stable application. Net admins usually prefere to use the shell terminal to configure ipfw firewall on osx/freebsd, but with WaterRoof you can speed up it dramatically. The logging option is great, it's very easy to find entries and to make/understand stats. The manual is too vague, but if you want to use WaterRoof you don't need a good WaterRoof manual... you just need to learn how firewalls work.
This is really recommended to every net admin searching for a fast tool for configuring, testing and troubleshooting a firewall.
Only for those with lots of ipfw experience
moire
Pros
Cons
Summary
This review was originally posted on VersionTracker.com.<br />This program is quite simply a gui for the ipfw command prompt firewall program. If you don't understand ipfw this program won't help you as the manual is too vague. If this is the case for you you'll be better off sharpening your ipfw skills by manipulating the command line form of ipfw as that is the true way of learning and mastering ipfw.