NetFilter SDK for MacOS, PF version

NetFilter SDK for Mac OS, PF version is a framework for transparent filtering of data packets transmitted over a network. It is suitable for developing content filters, basic application-level firewalls, traffic analyzers/shapers, and other software that requires viewing and modifying TCP traffic and controlling access to UDP.

Key features

• The solution allows filtering of outgoing TCP connections in both directions and blocking of UDP datagrams in a user-mode application. It is possible to filter a specified subset of connections/datagrams, restricted by filtering rules. Outgoing TCP connections can be redirected to a different address.

• Both IPv6 and IPv4 are supported.

• The process and user context is available for all network activity.

• Filtering works on Intel and ARM64 platforms.

• Installation
• Building nfproxy
  • Examples:
• Using API
  • Usage scenarios
• I found a bug
• API reference
  • Functions
    • Initialization
      • nf_init()
      • nf_free()
      • nf_setOptions()
    • Filtering rules
      • nf_setRules()
      • nf_deleteRules()
    • TCP protocol
      • nf_tcpClose()
      • nf_tcpPostReceive()
      • nf_tcpPostSend()
      • nf_tcpSetConnectionState()
      • nf_tcpDisableFiltering()
      • nf_getTCPConnInfo()
    • UDP protocol
    • Common functions
      • nf_getProcessName()
      • nf_getUid()
      • nf_getUserName()
      • nf_requireFileLimit()
  • Structures
    • NF_EventHandler
      • threadStart()
      • threadEnd()
      • tcpConnectRequest()
      • tcpConnected()
      • tcpClosed()
      • tcpReceive()
      • tcpSend()
      • tcpCanReceive()
      • tcpCanSend()
      • udpCreated()
      • udpConnectRequest()
      • udpClosed()
      • udpReceive()
      • udpSend()
      • udpCanReceive()
      • udpCanSend()
    • NFEXT_RULE
      • Remarks
    • NF_TCP_CONN_INFO
    • NF_UDP_CONN_INFO
    • NF_UDP_OPTIONS