NetFilter SDK for MacOS

NetFilter SDK for Mac OS is a framework for transparent filtering the data packets transmitted via network. It suits for developing the content filters, basic application level firewalls, traffic analyzers/shapers, other software that requires viewing and modifying TCP traffic, and control access for UDP.

Key features

• The solution allows filtering outgoing TCP connections and allow/block UDP datagrams in user mode application. It is possible to filter the specified subset of connections/datagrams, restricted by filtering rules. The outgoing TCP connections can be redirected to different address.

• The filtering operates on transport level, on the top of TCP/IP stack. In effect it automatically supports all kinds of TCP/IP capable network adapters: Ethernet, Dial-up/DSL/Cable modems, wireless adapters including Wi-Fi and Bluetooth, virtual adapters like loopback or VPN.

• Both IPv6 and IPv4 are supported.

• The process and user context is available for all network activity.

• The filtering works on Intel and ARM64 operating systems.

• Installation
• Building the network extension
• Using API
  • Usage scenarios
• I found a bug
• Signing the network extension
• API reference
  • Functions
    • Initialization
      • nf_init()
      • nf_free()
      • nf_setOptions()
    • Filtering rules
      • nf_addRule()
      • nf_addRuleEx()
      • nf_setRules()
      • nf_setRulesEx()
      • nf_deleteRules()
    • TCP protocol
      • nf_tcpClose()
      • nf_tcpPostReceive()
      • nf_tcpPostSend()
      • nf_tcpSetConnectionState()
      • nf_tcpDisableFiltering()
      • nf_getTCPConnInfo()
    • UDP protocol
    • Common functions
      • nf_getProcessName()
      • nf_getUid()
      • nf_getUserName()
      • nf_requireFileLimit()
  • Structures
    • NF_EventHandler
      • threadStart()
      • threadEnd()
      • tcpConnectRequest()
      • tcpConnected()
      • tcpClosed()
      • tcpReceive()
      • tcpSend()
      • tcpCanReceive()
      • tcpCanSend()
      • udpCreated()
      • udpConnectRequest()
      • udpClosed()
      • udpReceive()
      • udpSend()
      • udpCanReceive()
      • udpCanSend()
    • NF_RULE
    • NF_RULE_EX
    • NF_TCP_CONN_INFO
    • NF_UDP_CONN_INFO
    • NF_UDP_OPTIONS