There are actually two default firewalls. The firewall that's configurable in UI can only block inbound connections but not outbound connections. The other fire

There are actually two default firewalls. The firewall that's configurable in UI can only block inbound connections but not outbound connections. The other firewall (pf) doesn't have the concept of application so one cannot allow one app to access a remote IP but block another, and I also don't think it supports DNS.