I don’t mean to take away from your feeling good, but why is iptables ok on Linux and ipfw is too hard on OS X? uid user Match all TCP or U

I don’t mean to take away from your feeling good, but why is iptables ok on Linux and ipfw is too hard on OS X? uid user Match all TCP or UDP packets sent by or received for a user. A user may be matched by name or identification number. also, since I agree that neither iptables nor ipfw are good enough as UIs, there are a number of graphical firewall apps that allow people to do very very easily filtering per user, per process, per domain, per ip, timed, with different profiles http://www.obdev.at/products/littlesnitch/ http://www.obdev.at/products/littlesnitch/