Connections Notification Alerts

Notification Alerts can be activated from Vallum Preferences, from Vallum menulet or from Apps view ‘gear’ button.
When active, Vallum is able to intercept apps’ outbound connections and hold them while you decide whether to block or pass them. By default notification alerts do not show all their options, and only one third of the whole alert is visible. Click the blue “more options…” button to expand the notification alert and see connection specific options, and click the “manage at network level…” button to expand it further and display network-level options for filtering the connection using the OS X PF packet filter and Murus.

A notification alert is displayed on right top of the screen only if Vallum Notifications are enabled and:

• an unmanaged app for which Vallum has no rules is trying to connect to a remote host
• an already managed mixed-state app is trying to connect to an address for which it still has no rule set.

• Clicking “Pass this app” or “Block this App” to pass/block the whole app.
  An unmanaged app will now show up in Apps View, with a red or green triangle accordingly.
  An already managed mixed-state (blue dialog icon) app will be set as passed/blocked (green/red) and will not require authorization any more. By default these choices are remembered forever. Click the popup button and use the slider if you want these rules to expire. When a green or red app expires its led will become a blue dialog. From now on it will require authorization in order to pass.
• Clicking “Pass IP Address” or “Block IP Address” to pass/block only current connection. In this case a new record will appear in the App Rules View. Some app can be ossessive at connecting at multiple IP addresses at once. In this case Vallum will display a lot of consecutive notification alerts, one for each new IP address. However you can ‘silence’ an for one minute (or less) in order to silently accept (or block!) all connections from an app. Vallum will ‘automatically answer’ notification alerts for you, and store all IP addresses as passed or blocked accordingly.
• Clicking “Pass port” or “Block port” has a similar effect, as it puts a port record in allowed or blocked addresses.