Skip to main content

Block All Mode

Block All is TinyShield's strictest mode. It silently blocks a connection unless an Allow List rule or an enabled system exception permits it.

Block All is a TinyShield PRO feature.

Choose Block All when you need a default-deny network policy.

1. Benefits​

  • ✅ Stop unapproved network access at once.
  • ✅ Allow only trusted apps, domains, or IP addresses.
  • ✅ Build a simple default-deny setup for focused work or testing.
  • ✅ Optionally allow Apple-signed programs.
  • ✅ Optionally allow outbound UDP port 53 DNS traffic.
  • ✅ Keep explicit Block List rules available for stricter control.

2. Prepare your Allow List​

Add needed access before turning on Block All:

  1. Open Tools → Allow List.
  2. Add the apps that must stay online.
  3. Add a domain or IP address when only one destination should be allowed.
  4. Avoid adding the same item to both the Allow List and Block List.

The Allow List creates exceptions for Block All. App rules allow every connection from that app, while domain and IP rules are narrower.

3. Turn on Block All​

  1. Select the mode button in the top-right corner.
  2. Choose Block All.
  3. Confirm that the mode button shows Block in red.
  4. Test the apps that must stay online.
  5. Add only the missing trusted destinations to the Allow List.

Block All does not ask before blocking. Use Require Approval when you want a prompt for unknown apps.

4. Choose optional exceptions​

Open the connection mode settings or popover:

  • Allow Apple Programs permits Apple-signed programs unless an explicit rule blocks them.
  • Allow DNS Traffic permits outbound UDP port 53 so TinyShield can keep resolving and showing domain names.

These exceptions also apply to Require Approval mode. Turn them off when you need the strictest behavior.

5. Restore normal access​

Switch to Allow All if too many apps stop working. Your Block List remains active, so explicitly blocked destinations stay blocked.