Diese Seite ist leider nicht auf Deutsch verfügbar.

Little Snitch 1

Factory Default Rules

Generally, you shouldn't modify the default rules. Most of these default rules are necessary for normal system operation. If you block one of these rules, in the worst case your system may freeze. You can remove them, however, then you are probably pestered by a lot of Little Snitch alerts and if you give the "wrong" answer, your system may freeze.

Essential System Daemons

nmblookup is necessary for windows file sharing.
lookupd is the directory information and cache daemon. This is a very sensitive and important daemon, you shouldn't block them.
cupsd is the common unix printing system daemon, there is no need to block it.
ntpd is the network time daemon which synchronizes your clock with a network-time-server.
slpd is slp daemon (service location protocol) that advertises local services to the network.
nmbd is part of the Samba distribution and used by Mac OS X for windows connectivity.
configd is the system configuration daemon which manages your system configuration, like active network interfaces, current network location and so on.
natd is the network translation daemon, necessary for the Internet connection sharing feature.
mDNSResponder is part of Rendezvous.

System Commands

host is a tool for DNS resolution (converting a hostname into an IP-address and vice versa).
nslookup is a tool for DNS resolution like 'host'.
whois is useful to get information about an Internet domain. The whois utility looks up records in the databases maintained by several Network Information Centers (NICs).
ntpdate sets the local date and time by polling a network time server.
To learn more about these daemons, do a Google search on the daemon's name or open a Terminal window and type "man command-name" (e.g. "man ntpd").

Special Network Ranges

local network stands for all your local networks on all your active network cards (including airport and so on). It is computed from the network interface's current IP address and netmask (depending on the number of active network interfaces it can stand for more than one IP-range). And it is recomputed if you change your "Location".
LESS TECHNICAL: "local network" stands for your home or company network
any network connection stands for any connection to other machines
localhost means connections which are local on your machine, like connecting to a local USB printer.
multicast is an alias for the full multicast IP range 224.0.0.0/4 (224.0.0.0 - 239.255.255.255). These addresses can be used for efficient distribution of (e.g.) streaming data like Internet radio, if your provider and the application you use support it.
broadcast is an alias for the broadcast addresses of your local networks. Broadcasts are limited to your local network and won't be routed over the Internet. You can deny broadcast for specific applications, however you shouldn't disallow broadcasts at all. There are also a lot of system daemons which rely on broadcasts.
169.254.0.0/16 is the zeroconf/rendezvous address space which isn't routed over the Internet and only valid within your local network.