Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

learn more… | top users | synonyms (1)

0
votes
1answer
36 views

Allow port arbitrary port (such as 5432) open on El Capitan.

I'm running vagrant and successfully port forwarding from there. My issue is that some ports are not running. I know vagrant is working because I can successfully forward port 80, but cannot forward ...
0
votes
1answer
16 views

Systems not seeing netrestore image

Turning to here after many futile attempts to resolve. I have an OSX server (10.10.5) which has been hosting a Netrestore image over HTTP without issue for some time now. We replaced our firewall in ...
0
votes
0answers
32 views

pf port-forwarding on OS X Yosemite to avoid block

My ISP blocked a TCP port, let's say $ip1:$port1 So I setup $ip2:$port2 on my own VPS to get around it. How can I forward all traffic to $ip1:$port1 on OS X Yosemite as client to $ip2:$port2 using ...
1
vote
2answers
37 views

OS X firewall code-signing not working for nginx etc

I am trying to connect to a web server (nginx) on OS X El Capitan - on local wifi from an iOS device. I know from earlier that this is not easy. Tried this without success. Have you come across ...
0
votes
0answers
63 views

How to open specific port in EI Captain?

I have gone through many articles (please list one article you are following so we might suggest a better or at least follow along) and found the same solution but no result?? I have done -> sudo ...
3
votes
1answer
165 views

Issue turning firewall off on OS X El Capitan 10.11.2

I'm trying to make a simple web server on my machine accessible to a peer on the same network, but with not much success. I am having an issue where my firewall continually turns back on, or won't ...
0
votes
1answer
56 views

How to accept incoming network connections in OS X 10.11 El Capitan?

After logging in the following message appears: Do you want the application “Microsoft Word.app” to accept incoming network connections? How do I allow Word to accept incoming network connections in ...
1
vote
0answers
42 views

Little Snitch shows ping flood to 0.0.0.192

My Little Snitch Network Monitor tells me my machine is ping'ing 0.0.0.192 every second. What's going on? EDIT: A Wireshark capture tells me this ping has Source 0.0.76.188 Destination 0.0.0.192 ...
0
votes
0answers
20 views

Shared Little Snitch rules for all browsers

In Little Snitch (v. 3.6), can I somehow define a shared set of rules for all browsers? i.e. define Firefox, Safari and Chrome to be part of a "group", and update the rules for the entire group ...
0
votes
0answers
51 views

Blocking/Disabling network connections remotely without losing remote access

I have a Windows 7 computer accessing an El Capitan Mac remotely via TeamViewer (a VNC program) While I'm remotely controlling this computer, I need to disable the internet (equivalent of disabling ...
0
votes
1answer
30 views

I need help getting the pf firewall to work

Okay, so I asked this question on security.stackexchange.com and superuser.com and no one on either of those forums answered. Hopefully someone here will know the answer. I am running Mac OS X. I ...
1
vote
1answer
58 views

Browsers opens only https sites

I have OS X Mavericks on my Mac and 3 browsers (Firefox, Safari, Chrome). When I try to open any site I see only "connecting..", but when I try https sites it works fine! Ping and traceroute shows ...
0
votes
1answer
46 views

mDNSResponder - incoming connection from “[name of my Macbook]'s-macbook-pro.local”

As I logged into my admin account to set some things up on my Macbook (I surf using a standard account), I noticed via my third-party firewall application, Little Snitch, that mDNSResponder had ...
0
votes
1answer
789 views

Little Snitch reports outgoing connections for AirPlayXPCHelper for wrong subnets?

After upgrading to El Capitan, I've started noticing annoying connections from the AirPlayXPCHelper to 192.168.1.0/24 subnet (my home network isn't in 192.168.1.0/24 subnet, it's in 172.16.0.0/12 ...
0
votes
1answer
38 views

Incoming connection on UDP port 137 (NBNS) from an internal IP address?

I have a Little Snitch (a third-party firewall application) on my Macbook running OS 10.11.1. I noticed that because of my settings to deny most incoming connections from the LAN, the launchd process ...
0
votes
0answers
30 views

VPN connection sharing using PF NAT

I have the following network infrastructure, with a Mac Pro that has a VPN connection (ppp0): What I'd like to accomplish is that Device 1 and Device 2 can share the Mac Pro's VPN connection by ...
0
votes
0answers
165 views

Microsoft Word to accept incoming network connections

Lately whenever I open Microsoft Word 2008 I get a prompt Do you want the application “Microsoft Word.app” to accept incoming network connections? I always click Deny (I can't think why anyone ...
0
votes
0answers
37 views

Blocking All Apple Services from OSX

How does one stop Apple from having any sort of control over your mac? For example, they can erase it, track its location etc and even the push notification service lets them know when you're using ...
4
votes
4answers
412 views

I'm trying to block game “X” from accessing the internet including updating

I'm using OS X El Capitan and I'm trying to prevent a game from accessing the internet including blocking it from checking for updates for the launcher or the game itself. I've gone into Security -> ...
2
votes
1answer
190 views

How to trap ssh breakin attempts on El Capitan

Previous to El Capitan one could use pfctl and /etc/pf.conf to "trap" the ip addresses of sites attempting to break into a server using brute force attacks producing 100's of attempts per second. The ...
0
votes
0answers
112 views

How can I block ssh brute force attempts in OS X 10.11?

My system running OS X 10.11 is constantly getting hammered by failed ssh login attempts by bots. I'm using a secure password and the root account isn't accessible via ssh, but even so it's still a ...
0
votes
1answer
47 views

How do I open a filtered port in pf?

I have opened a number of ports, and am familiar enough with pfctl, but even though I have opened various ports, then show up as "filtered" - which means of course that they are not open. How can I ...
2
votes
0answers
68 views

Any way to transparantly redirect outbound traffic to a particular IP:port on OS X?

OS: Yosemite Basically I am looking for something similar to Mac os x ipfw forward from ip:port to ip:port but since there is no ipfw on Yosemite is there a way to do this trick using pfctl or ...
2
votes
0answers
185 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
2
votes
1answer
2k views

MacOS X - iptables?

Where is iptables in MacOS X? I'm running Yosemite 10.10.5 (14F27) and it seems to be missing. If it's not actually native to OS X, what's the best way to install it for this operating system? If for ...
1
vote
2answers
122 views

OS X: How to lock down these frivolous protocols!

I ran a port scan on my Mac (OS X 10.9.4 if its relevant) and i realised all these random protocols with next to no explanation on the internet. 2 of the most unusual protocols include ndl-aas and ...
0
votes
0answers
38 views

Add permanent Allow rule to Firewall without “Allow signed content…”

I'm working on an OS X 10.5 PowerMac machine. I want to add a permanent Allow rule for an updated OpenSSH server located at /usr/local/sbin/sshd. I have a firewall rule for it in the Firewall App, but ...
4
votes
1answer
114 views

What are the services Apple's Firewall considers essential?

I'm trying to determine what Apple's Firewall considers essential services. Apple's Firewall has the following settings available: A search of Apple's site does not reveal a support document on the ...
0
votes
0answers
66 views

Enable `ipfw` port-forwarding on startup

For older versions of Mac OS X (Mountain Lion), port-forwarding is done with the ipfw tool. (In later versions, use PF tool.) For example, the Apache Tomcat web server listens by default on port ...
5
votes
3answers
1k views

Blocking incoming hostile traffic dynamically with PF and fail2ban on OS X

The bigger picture is that I am trying to dynamically block/unblock IPs using fail2ban 0.8.14. I have been following an old guide for OS 10.5 with doesn’t include PF. I think I’ve configured ...
0
votes
1answer
194 views

What is the Correct 'pf' Syntax for an 'iptables' Port Redirection Rule

I am looking to implement a rule like the following iptables rule on my Mac, to redirect traffic from my development workstation (hosting a development copy of a Ruby on Rails project) to another host ...
0
votes
0answers
33 views

OS X: enable firewall only on Wi-Fi?

When I'm connected to my local LAN via thunderbolt, I don't want the firewall on. When I'm connected via Wi-Fi, I want the firewall on. I can't figure out how to make that happen.
1
vote
1answer
644 views

Port blocking on iPhone 6

I am unable to get email to connect to my IMAP server using an iPhone 6+ with iOS 8.3. The telco (Telstra Australia) loves telling me that they do not block ports. Either the telco is blocking ports ...
1
vote
1answer
40 views

How to share over ethernet but not over wifi [duplicate]

Running OSX 10.10.3 The office LAN is wired, the guest LAN is WiFi. I need to be on both at the same time. I want to be able to accept connections from the office LAN, but I want to limit access to ...
1
vote
2answers
4k views

How can I setup my mac (OS X Yosemite) as an internet gateway

It should be possible, but I searched for a day and cannot get a decent HowTo. There seemed to be a Gateway Setup Assistant, but the Wikipedia link only goes to the server app now. Maybe it is easier ...
0
votes
1answer
730 views

VNC connection to OS X Yosemite 10.10 not working with Firewall enabled.

I've been connecting to my Mac with the iOS VNC app to monitor a process remotely, and noticed Firewall was turned off in Security & Privacy. So of course I turned it back on, and tried to ...
3
votes
1answer
234 views

Alternative for `fail2ban` on my server running OS X 10.6.8

I have dedicated my old MacBook as a home server. It runs, among other stuff, the following services: Webserver (Apache, PHP, MySQL) i.e. OwnCloud/WebDAV Torrent client SSH server VPN Some game ...
0
votes
1answer
278 views

Open firewall to run nginx

I need to access my computer running nginx on port 8080, but I do not want to turn off the firewall. I know that I can allow application to connect, but I can not figure this out with nginx. The ...
12
votes
2answers
5k views

Xcode.app gets scanned by socketfilterfw (OS X Firewall) at every launch

Situation: When I launch Xcode, socketfilterfw, OS X's application based firewall, starts using a lot of CPU. After some research I narrowed it down to this: socketfilterfw reads all the files in ...
0
votes
1answer
140 views

Firewall blocks all internet sharing except port 80

MacBook Pro on 10.7.5 (Lion) static ip 192.168.10.5 using wireless connection ethernet jack connected to raspberry pi raspberry pi has static ip 192.168.2.3 when internet sharing is enabled and ...
0
votes
1answer
32 views

Modifing a preference via applescript changes file group

I recently request help about modifying firewall settings via command-line (see my previous question). Everything is working, but I have noticed that whenever I use this command in an applescript, the ...
0
votes
0answers
18 views

Change MySQL Norton-Firewall Settings

When I was enabling MySQL on Mac and I was prompted by Norton with a message saying if I wanted to Allow any computer to connect, local computers, or keep firewall settings. I would like to edit ...
0
votes
0answers
338 views

Some ports refusing to open with pfctl

I've tried opening the ports with pfctl, and a ruleset, which includes the following. pass in proto tcp from any to any port 22 pass in proto tcp from any to any port 465 pass in proto tcp from any ...
0
votes
0answers
76 views

Deny TCP CONNECT in appfirewall.log - how do I check what's causing it?

What is this telling me? socketfilterfw[22097] <Info>: dovecot: Deny TCP CONNECT (in:7 out:0) I'm trying to track down why none of my iOS devices can connect to my postfix+dovecot mail ...
0
votes
1answer
151 views

Little Snitch Global rule not working

I have a little snitch rule effective in all profiles to allow any process to connect to *.apple.com Why do I keep getting request for applications to connect to apple.com? Here are 4 different ...
0
votes
1answer
97 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
0
votes
0answers
112 views

How to configure the pf firewall in the terminal?

I have googled it and have yet to find any good tutorials so far. Most of what I can find are for ipfw or GUI softwares. Does anyone know of any good tutorials on it? Would any of the non mac ...
0
votes
1answer
363 views

Which incoming ports do you need to open in osx firewall?

I use pf (BSD packet filter via Terminal). The recommended use of pf is to block all incoming ports and then open those you need. I want my system to work properly and don't miss things like ...
2
votes
2answers
347 views

How to limit the bandwidth on a per-application (or per-process) basis in OS X Yosemite?

Whenever I use Homebrew or Apple Store to download a large application, it sucks all my available bandwidth and I am then unable to browse the web. How can limit the bandwidth per-application or ...
0
votes
0answers
56 views

Mac Terminal won't accept £ in ssh password?

I have an issue where I'm trying to ssh into the root account of a firewall from my Mac. I'm on the same network as the firewall. ssh root@1.2.3.4 I'm then asked for my password which contains the ...