A comprehensive macOS security suite combining a PF firewall, privatizing proxy, and ClamAV anti-virus to block trackers, malware, and attacks.
macOS-Fortress is a multi-layered security package for macOS that integrates kernel-level, OS-level, and client-level protections. It addresses visible network attacks and enhances privacy by blocking ads, malicious scripts, and web trackers through an adaptive firewall, privatizing proxy, and anti-virus scanning. The project offers significantly more capability than simple browser ad-blockers by employing a defense-in-depth philosophy.
macOS users, particularly system administrators, security-conscious developers, and privacy advocates who require comprehensive network security and ad/tracker blocking beyond basic browser extensions. It's also suitable for those managing secure LAN environments or setting up VPN servers.
Developers choose macOS-Fortress for its integrated, multi-layered approach that combines firewall, proxy filtering, and anti-virus into a single customizable package. Its unique selling point is the ability to block attacks at the network level using dynamically updated threat lists while providing HTTPS inspection and privacy protection through a configurable proxy chain.
Firewall and Privatizing Proxy for Trackers, Attackers, Malware, Adware, and Spammers with Anti-Virus On-Demand and On-Access Scanning (PF, squid, privoxy, hphosts, dshield, emergingthreats, hostsfile, PAC file, clamav)
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
Automatically updates IP and host blocklists twice daily from sources like Emerging Threats and DShield, keeping defenses current against new attacks as noted in the README.
Combines multiple rulesets including EasyList and EasyPrivacy via Privoxy to block ads, trackers, and malicious content system-wide, beyond basic browser extensions.
Configures ClamAV for on-demand and on-access scanning of user directories like Downloads and Desktop, adding malware protection as part of the security layers.
Allows firewall-only or proxy-only setups via MacPorts, enabling customized deployments based on specific security needs without installing the full package.
Requires installing via MacPorts, running multiple kickstart commands for daemons, and manually editing configuration files like pf.conf for network-specific settings, which is time-consuming.
All configuration and troubleshooting are done through terminal commands and editing text files, making it inaccessible for users who prefer GUI-based management tools.
Running multiple daemons (firewall, proxy, AV) can interfere with other security software or system updates, as noted in the README with issues like services not launching at boot.