- Introduced “Shields Up” mode to block all inbound connections while allowing outbound, with UI checkbox on Windows/macOS/iOS.
- Added CIDR‑style ACL destinations, IPv6‑only support, SOCKS proxy outbound, netfilter mode flags (off/nodivert) and option to disable source NAT on subnet routes.
- netcheck now supports JSON output and periodic probing; routing/firewall rules are more compatible and memory usage is reduced on several platforms.