Outbound 1.3.1
Outbound 1.3.1 adds special destinations, any IP protocol and user-specific rules, rule groups with subscriptions, profiles that switch rule groups and known networks, and an optional encrypted DNS proxy with DNS over HTTPS, TLS and QUIC. Requires macOS 14 or later.
New
- Use multicast, broadcast and Bonjour traffic, or your Mac’s current DNS servers, as a rule’s destination.
- Match any IP protocol by name or number, including GRE and separate ICMPv4 and ICMPv6, and enter ports by service name.
- Limit a rule to connections made by the system or by a particular user account.
- Organize rules into groups, and turn a whole group on or off at once.
- Subscribe to rule groups published as .lsrules files over HTTPS. New or broader allow rules wait for your approval, and a refresh that removes block rules waits for your confirmation.
- Let a profile turn rule groups on or off when it becomes active.
- Manage known networks in a sortable table with location labels, optional Wi-Fi names and separate VPN servers, and choose the profile each network switches to. Wi-Fi names need Location access and are never saved.
- When removing a profile, keep its rules turned off and awaiting approval, and undo the removal.
- Find rules that have not been used in a period you choose, and repair rules whose app has changed identity.
- Manage rule groups, profiles, known networks and rule maintenance from Terminal.
- Optionally send DNS through Outbound’s own encrypted DNS proxy, with DNS over HTTPS, TLS or QUIC, a secondary resolver and automatic failover. The system DNS setting stays the default.
- Check resolver health, and keep an optional query log that hashes names unless you choose to record them.
- Add custom resolvers with their own port, certificate pins, and a username and password stored in Keychain.
- When a captive portal is detected, pause encrypted DNS for 15 minutes to sign in, then resume it.
Improved
- Outbound uses much less CPU while it filters, opens faster, and keeps the connection list, map and menus responsive with a lot of traffic.
- Saved connection history, analytics and rule usage are kept reliably. Earlier versions could fail to save them because the background agent was refused access to the keychain.
- Network Monitor’s traffic chart keeps its history when Outbound is reopened. Earlier versions started it again from the moment the window opened, because the window was refused the saved-history key.
- Double-click a window’s title bar to zoom it.
- The inspector beside Network Monitor’s map reaches the bottom of the window, so the list behind it no longer shows through under its last rows.
- The connection question sizes itself to its content again, limited only by the screen.
Requires macOS 14 or later on Apple silicon or Intel. Signed with Developer ID and notarised by Apple. You’ll need a licence key. See pricing.