Flying Buttress

As Apple's built-in Firewall preferences improves in both functionality and security, I will be aiming Flying Buttress more at users who need the advanced firewall configuration, logging, and IP sharing options found in Flying Buttress.

There is no reason that a new or inexperienced user cannot use Flying Buttress, but Apple's own Firewall preferences will likely remain a simpler interface for configuring a basic firewall.

However, if you need:

Firewall filters that include qualifiers on host or network addresses Firewall filters that operate on other than TCP or UDP protocols Firewall filters that include the whole range of ipfw qualifiers, such as IP options, ICMP types or TCP flags Per-filter logging configuration, including the ability to log allowed connections and the option to not log certain types of denied connections NAT port forwarding or other custom NAT configuration Different filter configurations on different network interfaces. A persistant, searchable firewall log entry database with graphical log viewer Scriptable control of your firewall, such as via cron or other shell automation Access and ability to easily edit the raw firewall configuration text, including an integrated ipfw filter syntax checker. The ability to switch between different firewall configuration sets quickly and easily. ...then you should consider using Flying Buttress.