Permissions settings

Permissions shows the three macOS permissions Outbound depends on: what each one is, why Outbound needs it, what stops working without it, where it stands now, and the step that fixes it. Setup asks for the same permissions first; this page is where you check or repair them later. See Installing Outbound.

The page stays usable when settings are locked. Fixing a macOS permission does not loosen a rule, so Unlock is not required here.

The headline

At the top, one of two summaries:

• “Outbound has everything it needs”, with “Every connection on this Mac is checked against your rules, and you’re asked about new ones.” This is the headline only when every card is granted.
• “One permission needs attention”, or “2 permissions need attention” and “3 permissions need attention”, with “Without …, Outbound can’t fully protect this Mac.” The gap names what is missing: “the network filter”, “macOS’s permission to filter”, “the background agent”, joined with “and” before the last.

Example data.

The three permissions

Each permission is a card: a symbol, the name, a badge, the reason Outbound needs it, and, when it is not granted, what stops working plus the status and a button. A granted card hides that second half. The badge shows the status text when the permission is granted. Otherwise the badge reads “Starting”, “Needs you”, “Off”, or “After the filter”.

A problem enabling the background agent is repeated under the cards.

Network filter

“The part of Outbound that runs inside macOS. It sees each new connection, says which app made it and where it’s going, and applies your rules before the connection goes through.” Without it: “Nothing is filtered: rules, blocklists and alerts have no effect.”

Standing	Status line	Badge	Button
Running	Installed and running	that status	none
Coming up	Starting…	Starting	none
Waiting for approval	Waiting for you to allow it in System Settings › General › Login Items & Extensions	Needs you	Open System Settings
Not installed	Not installed	Off	Install Filter
Install failed	Outbound’s sentence for that error	Needs you	Install Filter

A failed install keeps Install Filter. The status is Outbound’s explanation, for example “Installation was canceled. Choose Install Filter to try again.” or “macOS hasn’t answered yet. Choose Install Filter to ask again. If it keeps waiting, restart your Mac: older copies of the filter may be waiting to be removed.”

Filter network content

“macOS’s own switch for passing connections to a filter. It’s the Allow you choose when macOS asks whether “Outbound” may filter network content.” Without it: “The filter is installed but macOS sends it nothing, so no connection is checked.”

Example data.

Standing	Status line	Badge	Button
On	On	On	none
Configured, switched off, filter running	Turned off in System Settings › Network › Filters	Off	Turn On Filtering
Not configured, filter running	Not turned on	Off	Turn On Filtering
Filter not running yet	Needs the network filter first	After the filter	none

“Needs the network filter first” replaces the other lines whenever the network filter is not running, unless filtering is already on. Turn On Filtering reads “Enabling…” while it runs.

Background agent

“A small part of Outbound that starts when you log in. It asks you about new connections and keeps the menu bar item while the Outbound window is closed.” Without it: “Your rules still apply, but nothing asks you: new connections get the “If I do not answer” choice from Settings › Alerts.” That choice is on Alerts.

Standing	Status line	Badge	Button
Enabled	Runs at login	that status	none
Needs approval in Login Items	Turned off in System Settings › General › Login Items & Extensions	Needs you	Open Login Items
Not enabled, or not found	Not enabled	Off	Enable Background Agent

Enable Background Agent reads “Enabling…” while it runs, and reports “Background access is on.” when it succeeds.

What these permissions let Outbound see

• Who connects, and where: “App identity, server names and addresses, ports and data totals.”
• Never what’s inside: “Pages, messages, files and passwords pass through unread.”
• Kept on this Mac: “History, rules and analytics stay here; they leave only in exports or questions to an AI provider you choose.” History is encrypted on disk, with its key in your Keychain; see Encrypted history. Outbound’s own connections are listed in Settings › Outbound’s Connections.