Questions tagged [firewall]
Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.
361
questions
0
votes
0
answers
17
views
Question about changing macOS Firewall option
I have installed Apache Web Server into one of my Mac. And then, I've been publishing this WebServer to inter-net. I'm also using OS built-in Firewall, and allow httpd to external connection.
I ...
2
votes
2
answers
46
views
Disable Firewall Notifications
I am developing some software as part of a research project, and am running into an annoying issue with the Mac firewall. Our system architecture involves running multiple concurrent processes which ...
1
vote
0
answers
34
views
MacOS Firewall blocks webserver and logging wont work
Currently I wrote a small game webapp. The server is running on my MacBook Air M1 Sonoma 14.3 and listening on 0.0.0.0:8080. I want to connect to it within my local network from my iPhone.
This works ...
0
votes
0
answers
23
views
Using SOCKS and system Firewall blocks IMAP/SMTP
When I use the internal service of my university, I need to be inside the university network. So I have been using the SOCKS proxy and an SSH login server of my university for many years when I am out ...
1
vote
0
answers
38
views
How do I reliably expose MacPorts dovecot to the LAN?
I am currently making an attempt to run various ports on macOS Sonoma (mail server stuff, like postfix, dovecot, installed by MacPorts) and I am running into a problem.
From inside the machine itself, ...
0
votes
0
answers
36
views
How can I change destination domain in macOS Sonoma?
for example, whenever an console command like git clone https://github.com/... or wget https://github.com/... which makes a remote call to github.com, change the actual call to an other domain like ...
2
votes
0
answers
39
views
Allow Steam game to accept incoming connections Mac
So I am not really familiar with Mac, as I usually use Windows. I want to connect two instances of Stardew Valley (installed over Steam) using the LAN option.
host computer uses macOS 13.6.3
joining ...
1
vote
0
answers
179
views
macOS 14.1.2 firewall blocking Colima from running
I have macOS 14.1.2 with the Firewall turned on, but not set to block all
Firewall is enabled. (State = 1)
Block all DISABLED!
Automatically allow signed built-in software ENABLED
Automatically allow ...
0
votes
0
answers
109
views
MacOS Ventura: How to permanently disable pftctl
I'm on MacOS Ventura on M1 Apple Silicon. Something keeps re-enabling pfctl that blocks my internet access roughly every 10 minutes. I'm no expert in macos or pfctl but after a bit of googling, I ...
0
votes
0
answers
134
views
Mac firewall blocking incoming connections to app even though it's allowed
I have 2 executables, a server and client. The server just listens on port 44888 for UDP packets and displays them. The client sends UDP packets to an address and port.
I determined that the Mac ...
0
votes
0
answers
63
views
Unablet to mount OpenBSD NFS share from MacOS unless I disable firewall
I have an OpenBSD server with NFS shares that I can use without any problem from a Linux client. On MacOS, I had to specify the following options -o nolocks,resvport,vers=3 to get the mount command to ...
0
votes
0
answers
51
views
Using little snitch on Cricut design space
I'm trying to stop Cricut Design Space constantly updating, it should run without internet access but recently there's been some changes and now it wants to connect all the time. I Just installed ...
1
vote
1
answer
167
views
.io .xyz and other less popular TLDs cannot be resolved
I bought a new MacBook Pro 2021 M1, and I can't access URLs ending with .io, .xyz, and other less popular TLDs.
The issue does not come from the browser. I tried many browsers and the terminal ...
0
votes
0
answers
75
views
UDP problems with virtual machine
I'm using an M1 Mac and I'm trying to run a Windows .exe file called 'simhub'. It uses UDP to allow telemetry between racing games (PS5) and a Windows computer. I don't have a Windows computer, so I'...
0
votes
0
answers
228
views
NAT rule redirection with Pfctl over VPN
I'm trying to configure a NAT redirection with Pfctl on my macOS (Ventura 13.2). I want to achieve a redirection for a specific IP and port to another IP (which is reachable through VPN) and the same ...
0
votes
0
answers
62
views
How to use `pfctl` to define a kill switch?
I use WireGuard, specifically wg-quick, to tunnel both my IPv4 and IPv6 traffic through a VPN server. However, I have noticed that my tunnel often leaks IPv6 traffic to my ISP after waking up from ...
1
vote
1
answer
391
views
"Ask for incoming connections" box will not stop appearing for an unknown application
I am getting frustrated with my computer. I have a Macbook Pro 2021, M1 chip running Ventura 13.3.1.
A dialog box keeps popping up, almost immediately disappearing, and then coming back, and quickly ...
3
votes
1
answer
902
views
After denying an app network permissions, how do I explicitly allow an application to listen on a network port?
I just reinstalled my Macbook (Ventura) and started my privoxy server for the first time. A box popped up asking me if I wanted to allow this application to listen on a network port, or something to ...
2
votes
0
answers
78
views
macOS Big Sur blocking gui internet access if certain connections to apple are denied, ping working
I have the following problem: I use Little Snitch to block just about any connection to apple (please no advice on how important it is to allow updates etc, I know what I'm doing and why ;) ). This ...
1
vote
1
answer
538
views
iptables like forwarding of packets with pfctl on mac os
I would like to build a bridge between two interfaces with pf, like with iptables:
sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --...
0
votes
0
answers
92
views
Can't open 2456-2458 firewall port on OSX
I've tried following this guide: https://www.lifewire.com/open-a-port-on-a-routers-or-computers-firewall-5072435
Here is what my /etc/pf.conf looks like:
I'm trying to let a docker image through my ...
1
vote
1
answer
295
views
Cannot deactivate Firewall Stealth Mode
Probably after last macOS upgrade I cannot deactivate Stealth Mode in Firewall options. Even if I deactivate it, after system restart it is active.
Is there any possibility to disable stealth mode ...
0
votes
1
answer
130
views
Can I use pf to route incoming incoming traffic on a specific port differently?
I have a mac that's connected to a VPN, where the VPN's gateway is the system's default gateway for all outgoing traffic. This means that I cannot connect to any services running on my mac from some ...
0
votes
0
answers
142
views
Opening TCP port 443 to specific domains?
I am trying to work remotely with a healthcare professional through Doxy.me, a URL that that they prefer for client calls (e.g., rather than Zoom, etc.). When I attempt to meet with them, everything ...
9
votes
1
answer
636
views
Warnings on SSH processes
It's been a while since I've needed to connect to a server via SSH. When I tried to connect today, Little Snitch gave me this warning:
The program "ssh" has been modified
Previously, the ...
0
votes
1
answer
178
views
Internet connection is disabled after updating the pf.conf file
I am trying to redirect traffic on all ports to my local server by editing the pf.conf file on MacBook.
pf.conf file content:
#
# Default PF configuration file.
#
# This file contains the main ruleset,...
0
votes
1
answer
141
views
Java application connection to the internet blocked when using a different WiFi
I am using dBeaver to connect to some databases that are at AWS.
From home this works fine, but when I connect to my mobile hotspot these databases time out when connecting.
First I assumed that these ...
2
votes
0
answers
612
views
Firewall keeps setting an incoming connection to allow for com.google.Chrome.helper despite being set to block
A few months ago, I made this post, asking why the allow or deny dialogue was appearing every time chrome was opened. Everyone stated that this only happens every time an app is opened if it's self ...
-1
votes
1
answer
592
views
Why is PF not working on M1?
I don't understand why PF does not work on M1. This problem is only on M1.
I tried turning firewall on/off.
PF successfully enabled without my code
/etc/pf.conf
scrub-anchor "com.apple/*"
...
0
votes
0
answers
166
views
macOS Monterey firewall off but cannot access port
I have a PostgreSQL database which is being deployed using docker, basically I'm exposing the port 5432 on my local machine, my firewall is turned off and I'm trying to log into the database from a ...
-2
votes
1
answer
716
views
Certain programs on Lulu app (Objective see) are not filtered
I am finding that certain apps (on Monterey) are not being filtered. These are native apple apps. Even if I disable network access, on reboot, it resets. When I deny access, it adds another deny rule. ...
0
votes
1
answer
278
views
has apple removed pflog from packetfilter?
FreeBSD includes pflog as a way to analyze pf logs. I dont see a /var/log/pflog. Has MacOS removed the pflog and /var/log/pflog?
Is it possible to enable this?
1
vote
1
answer
497
views
How can I allow ONLY iMessage (and not web browsing) through a firewall?
I've looked up what TCP ports iMessage uses to communicate with and Apple says:
80 (TCP)
443 (TCP)
5223 (TCP)
In my particular use-case, web browsing (80, 443) is not allowed. But we would like to ...
0
votes
0
answers
98
views
Firewall bug; socket programming
I am seeking a work-around for a bug in MacOS 12.4. I write C++ programs that create TCP/IP listening sockets. When I launch one of them, I see an error dialog containing language
Do you want the ...
1
vote
0
answers
33
views
What ports and protocols does the Apple "Protect Mail Activity" indirect asset loading feature require?
What are the ports used by the indirect asset loading feature of the Apple Mail app?
1
vote
0
answers
42
views
Incoming Network Connection alert does not dismiss
I develop web applications and often get the Firewall alert on a new version of my code:
This is OK (although I would prefer to just answer one and be done with it). The problem is that selecting ...
2
votes
1
answer
904
views
Port forwarding
I would like to intercept the tcp traffic from a device on my network. I cannot change the destination but I set the router IP to the IP of my M1 Mac Mini.
I used to do this with ipfw on a virtual ...
0
votes
1
answer
266
views
I accidentally clicked deny on port open prompt
I'm developing an app that binds to a local address, on a random port when it runs. I used to get a prompt to allow connections but I accidentally pressed Enter key and I think I denied the terminal ...
6
votes
0
answers
2k
views
Getting asked if I want to allow or deny incoming connections on the google chrome helper app every time I launch chrome
I have clicked deny everytime, and I have checked that the firewall rule states block. Yet it keeps appearing. I realize at this point that I am actually unsure what this dialog window is asking. ie ...
2
votes
1
answer
2k
views
Apply outgoing firewall rules per app selectively (MacOS Big Sur)
Question:
Which firewall can selectively apply multiple named domain resolving rules per app? E.g. like the One Periodic's Hands Off firewall
Details:
I'm looking for an app or combination of apps ...
1
vote
1
answer
2k
views
pf.conf configuration?
I've been a Windows user for 35+ years and I'm new to Macintosh.
I would like to configure PF firewall to block the ports below, incoming and outgoing on all interfaces.
What commands do I need to use ...
0
votes
1
answer
2k
views
How to open a port on MacOS Big Sur?
I am trying to open a specific port (8000) on my Mac (macOS 11.6) for local web development testing.
Let’s say my computer’s NAT IP is 192.168.1.10. If I go to 192.168.1.10:8000, I get nothing. nmap ...
0
votes
1
answer
6k
views
What are "netbiosd" and "rapportd"? Why are they asking for incoming network connections? [duplicate]
I was asked to allow/block netbiosd & rapportd, but I do not know what they are, so I block both of them. What are they, and blocking them is okay?
1
vote
0
answers
462
views
Remote sharing doesn't work even after allowing config in Firewall
I've allowed remote sharing in the Firewall
And enabled remote sharing and remote login.
I have Observe and Control enabled from the options dialog in Remote sharing.
But remote sharing works only ...
2
votes
1
answer
545
views
Can I compile and locally run SimpleFirewall example app without enrolling with apple developer program?
I was curious about writing my own simple application firewall.
After going through several tutorials I've downloaded SimpleFirewall example app available at: https://developer.apple.com/documentation/...
4
votes
2
answers
3k
views
MacOS Firewall: Program grayed out, can't be added to Firewall Options
In MacOS Monterey (12.0.1), I am running Python 2.7 from an Anaconda virtual environment.
Each time I run the Python script, I am asked if I want to accept incoming network connections:
I have tried ...
1
vote
0
answers
151
views
Modifying tcp packets going out on a specific port
I am newbie with pf. I want to modify all outgoing TCP traffic having destination port 8001. For that, firstly, I wanted to use pf to redirect all the TCP traffic at en0 with destination port 8001 to ...
0
votes
2
answers
1k
views
MacBook blocks all incoming connections, even when firewall is turned off
I moved to a new MacBook (High Sierra initially and BigSur now) and all incoming network connections are blocked on the new MacBook (restored from the backup couple of weeks ago). On an old one ...
2
votes
0
answers
221
views
Monitor VM network with Little Snitch
I've upgraded to Big Sur (yep, late to the party), VM Ware Fusion 12 and Little Snitch 5.
I get that kernel extension are no longer valid and VM Ware now uses the Apple network API.
Previously I could ...
-1
votes
1
answer
296
views
Hybrid-Analysis.com indicates macOS built-in file is contacting a malicious website
I'm wondering if anyone knows why this
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc
is connecting to adriver.ru ?
This is according ...