Frequently Asked Questions

General Questions

Troubleshooting

Questions related to Little Snitch 1

  • Deny rules and printing

    If you add a "Deny any" rule for a particular application, you break basic system services, which are implemented as network connections to your own machine. One of these services is printing.

    To fix that problem, use the new "Deny any network connection" rule instead of every "Deny any connection" rule.

    If you want to print to a network printer, you must also allow connections to the host running the print service. We recommend that you add an "Allow any connection to local network" rule for the application in this case.

    In general, we recommend that you test "Deny" rules as temporary rules ("Until Quit") before you make them permanent.

  • How to enter the license key
    1. Open the Little Snitch preference pane within the "System Preferences" application.
    2. Click on the round "lock" button to unlock the preference pane. You will be asked for your username and password.
    3. After clicking the "Start" button you will be asked for the license key. If Little Snitch is active, click on "Stop" and after on "Start" and you will be asked for entering the license key. Use copy (Command + c) and paste (Command + v) to be sure.
  • What does "local network" mean in term of IP numbers?
    "local network" stands for all your local subnets on all your active network cards + airport and so on. "local network" is computed from the network interface's current ip and mask. (depending on the number of active network interfaces it can be stand for more than only one IP-range) which is recomputed if you change your "Location". Also see our online documentation on Special Network Ranges.
  • How can I add a rule manually?
    • Open the Little Snitch preference pane within the "System Preferences".
    • Click on the round "lock" button to unlock the preference pane. You will be asked for your username and password.
    • By clicking "Add..." you can create a new rule.
      • Click "Choose..." to get the open panel. You can now either select the application or you can enter the full path by by typing a "/" and then continue with the rest of the path.
      • Permission: Select "Deny" or "Allow"
      • Server: Select "Any" or enter a hostname or an IP-address
      • Port: Select "Any" or a specific port
      • Protocol: Select "Any" or a specific protocol
    • Click the save Button.
  • How can I specify an IP range?
    You could simple specify an ip range within the "Add" or "Edit" rule sheet by entering the base address and clicking on the button which appears at the right. After that use the appearing popup to select your range.
  • How can I specify complementary rules for an application?
    E.G., it's common to want to create a rule, which denies connections to a specific port or host, however allows all other connections

    In this case simple create rules like these:
    "TheApplication" Deny any connection to port 80
    "TheApplication" Deny any connection to "some host"
    "TheApplication" Allow any connection"

    Note:
    More specific rules overrules general rules!!
    A rule for a single application overrules a rule for "any" application.
    A rule for a single IP overrides a rule with an overlapping IP-range.
    In general the rule with the smaller overlapping IP-range overrides the rule with the larger IP-range