Hanynet's free GUI for OS X's built-in pf firewall gets management of outbound connection rules, port knocking, SSH brute force protection, an improved default PF ruleset structure, an improved Connection Inspector (including options for NAT), interface updates, and more.
