Changelog

Outbound 1.1.1

Public releaseBuild 70

Outbound 1.1.1 applies IP and range rules to every connection, makes rules for this Mac’s own addresses work, checks large IP blocklists much faster, and recovers from damaged settings without allowing everything.

Fixed

  • Rules for an IP address or network range now also apply to connections that macOS reports before their address is known. Outbound waits for the connection’s first data, then decides it once.
  • Rules for this Mac’s own addresses (127.0.0.1, ::1, localhost) now work. Outbound checks local connections only while such a rule exists, so local development servers are never asked about.
  • “Protected” appears only once the filter confirms it is enforcing your current rules. Until then the status says it is waiting for the filter.
  • If Outbound’s settings files and their backups are damaged, it keeps your last saved mode and block rules. With nothing saved, it asks about connections and blocks the ones nobody answers, instead of allowing everything.
  • “Until logout” rules end when you log out.
  • Connection prompts keep their time limit when the Mac’s clock changes.
  • An answer to a prompt for a connection whose destination is unknown applies to that connection only, instead of to every destination of the app.
  • Apps from different developers that share a name no longer share a row in the connection list.
  • “Show” on the heavy-telemetry notice opens that app’s Telemetry sheet.

Faster

  • Large IP address and network-range blocklists are checked in microseconds per connection instead of entry by entry.

Improved

  • Managed Macs: when your administrator locks rule editing, the filter itself refuses rule changes, and the mode picker shows the mode actually in force.
  • A managed rule feed with an invalid address, range, host, port or program is refused, naming the rule’s number and field. outboundctl feed check reports the same.
  • A feed or blocklist download stops as soon as it passes the size limit, and a feed change during an install can no longer leave the old feed’s rules in place.
  • Importing rules refuses repeated ids, and a store that already repeats an id keeps the first rule of each.
  • If the audit log cannot be written, recent events are kept and retried, and any that had to be dropped are recorded as a gap with their time range.

Download Outbound 1.1.1

Requires macOS 14 or later on Apple silicon or Intel. Signed with Developer ID and notarised by Apple. You’ll need a licence key. See pricing.