[absmiths]

Does the order matter with the Little Snitch rules? In other words, if I have a ruleset like this:

tcp allow any 10.1.1.5
Application deny TextEdit

Will the first entry allow TextEdit to connect to 10.1.1.5, or does the second entry categorically deny TextEdit any regardless of the order of the rules?

I have been trying to add my own rules, but I can't reorder them and that concerns me if order is important (like in a firewall).

[yukon]

Well, some firewalls prioritize the allows over the denies, I'd get the feeling Little Snitch doesn't. Try blocking all web access, allow a browser to, and see what the browser can do.

And yes, it does rule. IPFW plus LittleSnitch beats all the buggy firewalls on Windows easily....ISTR Linux has an extension that needs to be compiled in the kernel for an application level firewall, kexts are apparently handy for that on OS X.