Ask Different is a question and answer site for power users of Apple hardware and software. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I am trying to make ports on my OSX 10.6.5 mbp accessible to the open internet.

The only thing I could find in the system firewall was allowing (or disallowing) a file, but nothing about specific ports. From Googling I read that the firewall is supposed to let an use any ports it wants and specification is not needed. I added the .app I wanted to add the port for.

The router is an Airport Extreme v7.5.1.

I've created a DHCP Reservation based on wireless MAC for the laptop,

Under Advanced : Port Mapping, I added a new entry with the same values for each combination of fields:

Public/Private UDP/TCP Port: 9000 Private IP Address:

I want port 9000 on my public IP address to forward to port 9000 on internal IP

When I test my application after this, it doesn't work.

To further test, I've turned off the system firewall on the laptop, and I've also placed the laptop in the 'DMZ' by checking Enable default host at:

Even with this configuration set (disabled firewall in the dmz), a full port scan from GRC Shields Up!! reports no ports open whatsoever. Is that normal for OSX? I come from Windows-land, so that would be a surprise.

Is something wrong here?

share|improve this question
up vote 2 down vote accepted

Something's wrong. If you've only got the Apple device between yourself and the internet - you've verified your external IP, you've lowered your machine's firewall, and you've DMZ'd your internal IP (which you've verified is correct...) - then the only way a connection can be halted is through another piece of software running on your machine.

If you go through all of those steps, you should be completely open to the internet.

share|improve this answer


If you are set to be wide open and you are showing as filtered from somewhere outside your network, then look to your ISP.

EDIT: After some research ipfw supersedes the Application firewall ( socketfilterfw) so, setting ipfw to allow the ports you want open should help. Shields up is most likely testing your router, I had a similar issue recently. You'd want to plug directly into your computer, with your network cable, or, with far more sanity than I, use nmap from your phone or something, and check your ports inside of the network.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.