All mentioned items have side-channel borked firewall and route rules in the past. Some bugs intermittently silently block local daemon instances from (re)loading like magic (some bugs only happen when the system is brought up). If your daily tasks include something less borked, than consider yourself very lucky you live without systemd. If I recall, ufw was intended for simple workstation rule sets. Personally,... - Source: Hacker News / 11 months ago

I've been using Shorewall for the last decade or so on everything from custom OpenWRT firewall/gateway solutions to servers running Debian or Ubuntu. It's great software that makes managing iptables/netfilter a breeze. Alas after many years, Mr. Eastep has retired and it doesn't appear the project is maintained by a new person or team. Source: about 1 year ago

Shorewall (https://shorewall.org/) can do the job easily. Source: over 1 year ago

Despite administrating Linux machines since 1994, I have never really looked closely at iptables because I was using shorewall and the briefly firehol. Source: over 1 year ago

You should just use https://shorewall.org/. Source: about 3 years ago

* Homebrew - Package manager (kinda like apt/rpm on Linux). * Secretive - Stores SSH keys in the secure enclave [https://github.com/maxgoedjen/secretive] * Hazel - File automations [https://www.noodlesoft.com/] * Arq - Excellent backup software for local and/or remote backups [https://arqbackup.com/] * ChronoSync - File synchronization on steoroids [https://www.econtechnologies.com/chronosync/overview.html] *... - Source: Hacker News / 8 days ago

The first two can be handled by firewall. Little Snitch for example: https://obdev.at/products/littlesnitch/index.html. Source: over 1 year ago

If you want more control over outgoing traffic, there’s commercial stuff like Little Snitch or the similar free tool LuLu from Objective-See. Source: almost 2 years ago

Objective Development's Little Snitch. It's been the first piece of software I've installed on every Mac I've owned in the last 20 years. Source: over 2 years ago

Little Snitch? https://obdev.at/products/littlesnitch/index.html. Source: almost 3 years ago