A firewall that knows your data plan

Block an app or a domain

Every app in the Apps room has a switch. Turn it off and the app can't connect. Each app's page lists the domains it talks to, each with its own switch, so you can block an analytics domain and keep the app working.

A block can be permanent, for an hour, or until tomorrow.

Rules with conditions

A rule can apply all the time or only:

• On a particular network, like your phone's hotspot or a hotel's Wi-Fi.
• On metered networks: every network you've marked as paid by the byte.
• Outside free hours, so heavy apps wait for your plan's free night hours.
• After a daily amount: block an app once it has used 1 GB today.
• Once the plan is 90% used, to cut off the big users before you hit the cap.

Quiet unless you ask

There are no popups by default. Drippy notifies you when something changes, like an app using the network for the first time or an upload spike, with Block and Block on this network in the notification.

Turn on Ask in Settings and apps Drippy hasn't seen are held until you click Allow or Deny in Firewall, the menu bar panel or the notification. Apple's own system processes are never asked about, except command-line tools such as curl, ssh and python.

Blocklists

Pick ad, tracker and malware lists, or add the URL of any hosts file or domain list. Lists refresh daily and apply to every app.

Turn it on

1. Move Drippy to ApplicationsmacOS needs it there to turn on blocking.
2. Open Firewall and click Turn on blocking
3. Allow Drippy in System SettingsmacOS asks once. Drippy opens the right page for you.
4. Allow content filteringmacOS asks once more. Click Allow.

Blocking needs macOS 13 or later. The rest of Drippy runs on macOS 11. To check that a block is the cause when something breaks, pause blocking from the menu bar panel.