Murus Pro 2.5 macOS

Murus unleashes the great power of the macOS built-in PF firewall. Protect your network resources using a very simple interface, take advantage of the many pro features available to design and implement your network infrastructure, to monitor performances and proactively filter dangerous traffic at network layer. Murus is available in three different versions in order to meet everyone’s needs. And there’s even more: port knocking, adaptive firewall, NAT and many other features including a blazing-fast logging system.



macOS features one of the best network firewalls: PF (Packet Filter). It comes in an "under the hood" fashion, installed and disabled by default. Murus' purpose is to unleash its potential. With its easy and intuitive icons-based and drag&drop-based interface, visual layers of abstraction and a friendly view of the PF firewall it's a lean and mean tool to protect your Mac and network.

Designed with ease of use in mind, yet full of advanced options and monitoring tools, Murus is perfect for everybody; from the average user to the experienced UNIX guru/system administrator and even for educational purposes. Configure and start the PF firewall in one click using built-in presets, use Murus graphical ruleset editor design tool or write fully customized rulesets using the advanced rule editor. Murus Pro includes Vallum, an application-layer firewall. This allows you to take full control of your Mac at both application and network level.

• Protect your Mac using tools already built into macOS
• Unleash the hidden power of PF, the macOS packer filter
• Easy firewall configuration using the Assistant
• Create firewall rules managing graphic objects
• Visualize PF configuration using simplified layers of abstraction
• Powerful custom rules system lets you create fully customized PF rulesets
• Access a very large set of advanced networking features and options including bandwidth management
• Block applications using the bundled Vallum application-layer firewall, be aware of what happens under the hood and which apps leak data to the network
• Available in three flavors, including a free version

Forget all about command line. Murus offers you the possibility to access advanced proactive features like port knocking and adaptive firewall in one click. The strong logging ecosystem offered by Murus and its companion app PF Log Reader grant the user a fully customizable logging policy, a realtime graphical view of PF logs and statistics and a user-defined notifications system. Share your Internet connection and define per-client access limits and accounting, export LAN services to the Internet with port forwarding. Everything is done simply using icons, checkboxes, buttons. And everything is based only on features and tools already built into macOS.


A firewall is not magic. You are going to protect your Mac, and you are going to do it using PF, the macOS firewall. Use Murus to learn how PF works, using the three layers of abstraction. These layers represent the firewall configuration using icons or using simplified, commented and visually enriched rules, or using a runtime table-based rules browser. Protecting your Mac is not the only purpose of Murus. It is also a learning tool. We include documentation for both Murus and PF Log Reader, and a generic macOS PF manual. You will learn how to handle PF and you will be able to create and manage your own hand-made rulesets.



Use Murus Assistant to configure and enable pf in a few clicks, or chose one of the predefined configuration profiles. Create your own configurations library and switch between configurations with a mouse click.



Creating firewall rules is easier than ever, simply add Services to Inbound or Outbound managed services then select their policies from a popup button. Everything can be customized: you create your own services and groups, and all services can be configured using a dedicated ruleset using custom rules.



Select a global logging policy, then define a per-service policy. This allows the user to set a fine-tuned pf log policy in order to produce a very data consistent and informative log file. Log is stored in a sqlite database.



Murus 2 ruleset structure is now much more clear and easy to understand. The overview represents current pf ruleset tree structure and is always easy to understand why a rule is there and what’s its purpose.



Murus checks your local listening ports and lists all unmanaged ones. This helps you configuring Murus giving you a view over your Mac currently running network services. Thus, you can easily decide which network services you want to allow or block. Additionally, you can tell Murus to pop up a notification in case a new, unknown network service is started.



Create Dummynet Pipes and Queues to selectively limit download and/or upload bandwidth for inbound and/or outbound connections. Supports Worst-case Fair Weighted Fair Queueing policy (WF2Q+). Bandwidth limits can be applied to managed services or using custom Dummynet rules giving you all the freedom you need.



Hide your public services from port scanners and unauthorized access using port knocking. Use the free multiplatform Murus Knocker client to access hidden services from remote computers.



Share your internet connection with other computers or smartphones and tablets using NAT. Define a per-client or per-group access policy, in order to block unwanted services. Export LAN services to the Internet with port forwarding.



enable adaptive firewall for supported tcp services in order to block brute-force attacks. Subscribe online blacklists services and have them automatically updated. Interact with external tools such as SSHGuard to manage dynamic black lists.



Murus offers several way to monitor your system. You can keep track of current connections using the pf states monitor. You can monitor runtime pf rules, tables and counters. You can see real time pf log or browse/search log database. Additionally, you can tell Murus to notify when a new listening port is found or when a specific connection is passed or blocked.