Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

learn more… | top users | synonyms (1)

0
votes
0answers
5 views

Add permanent Allow rule to Firewall without “Allow signed content…”

I'm working on an OS X 10.5 PowerMac machine. I want to add a permanent Allow rule for an updated OpenSSH server located at /usr/local/sbin/sshd. I have a firewall rule for it in the Firewall App, but ...
4
votes
1answer
79 views

What are the services Apple's Firewall considers essential?

I'm trying to determine what Apple's Firewall considers essential services. Apple's Firewall has the following settings available: A search of Apple's site does not reveal a support document on the ...
-1
votes
0answers
23 views

Disable NetBIOS from OSX [duplicate]

I am a security engineer in a mixed company, and we were dinged for still using NetBIOS in a recent audit. We disabled this on all of our Windows systems years ago but our Macs (mostly Yosemite) are ...
0
votes
0answers
21 views

Enable `ipfw` port-forwarding on startup

For older versions of Mac OS X (Mountain Lion), port-forwarding is done with the ipfw tool. (In later versions, use PF tool.) For example, the Apache Tomcat web server listens by default on port ...
4
votes
3answers
149 views

Blocking incoming hostile traffic dynamically with PF and fail2ban on OS X

The bigger picture is that I am trying to dynamically block/unblock IPs using fail2ban 0.8.14. I have been following an old guide for OS 10.5 with doesn’t include PF. I think I’ve configured ...
0
votes
1answer
35 views

What is the Correct 'pf' Syntax for an 'iptables' Port Redirection Rule

I am looking to implement a rule like the following iptables rule on my Mac, to redirect traffic from my development workstation (hosting a development copy of a Ruby on Rails project) to another host ...
1
vote
0answers
33 views

Configuring `fail2ban`

I’ve noticed some attempts to log into my Mac via SSH: 30/07/2015 13:30:59.274 sshd[52991]: error: PAM: authentication error for root from 59.47.0.150 via 192.168.1.68 30/07/2015 13:31:00.217 ...
0
votes
0answers
28 views

OS X: enable firewall only on Wi-Fi?

When I'm connected to my local LAN via thunderbolt, I don't want the firewall on. When I'm connected via Wi-Fi, I want the firewall on. I can't figure out how to make that happen.
1
vote
1answer
85 views

Port blocking on iPhone 6

I am unable to get email to connect to my IMAP server using an iPhone 6+ with iOS 8.3. The telco (Telstra Australia) loves telling me that they do not block ports. Either the telco is blocking ports ...
1
vote
1answer
31 views

How to share over ethernet but not over wifi [duplicate]

Running OSX 10.10.3 The office LAN is wired, the guest LAN is WiFi. I need to be on both at the same time. I want to be able to accept connections from the office LAN, but I want to limit access to ...
0
votes
1answer
874 views

How can I setup my mac (OS X Yosemite) as an internet gateway

It should be possible, but I searched for a day and cannot get a decent HowTo. There seemed to be a Gateway Setup Assistant, but the Wikipedia link only goes to the server app now. Maybe it is easier ...
0
votes
1answer
170 views

VNC connection to OS X Yosemite 10.10 not working with Firewall enabled.

I've been connecting to my Mac with the iOS VNC app to monitor a process remotely, and noticed Firewall was turned off in Security & Privacy. So of course I turned it back on, and tried to ...
3
votes
1answer
87 views

Alternative for `fail2ban` on my server running OS X 10.6.8

I have dedicated my old MacBook as a home server. It runs, among other stuff, the following services: Webserver (Apache, PHP, MySQL) i.e. OwnCloud/WebDAV Torrent client SSH server VPN Some game ...
0
votes
1answer
65 views

Open firewall to run nginx

I need to access my computer running nginx on port 8080, but I do not want to turn off the firewall. I know that I can allow application to connect, but I can not figure this out with nginx. The ...
6
votes
1answer
1k views

Xcode.app gets scanned by socketfilterfw (OS X Firewall) at every launch

Situation: When I launch Xcode, socketfilterfw, OS X's application based firewall, starts using a lot of CPU. After some research I narrowed it down to this: socketfilterfw reads all the files in ...
0
votes
1answer
57 views

Firewall blocks all internet sharing except port 80

MacBook Pro on 10.7.5 (Lion) static ip 192.168.10.5 using wireless connection ethernet jack connected to raspberry pi raspberry pi has static ip 192.168.2.3 when internet sharing is enabled and ...
0
votes
1answer
19 views

Modifing a preference via applescript changes file group

I recently request help about modifying firewall settings via command-line (see my previous question). Everything is working, but I have noticed that whenever I use this command in an applescript, the ...
0
votes
0answers
14 views

Change MySQL Norton-Firewall Settings

When I was enabling MySQL on Mac and I was prompted by Norton with a message saying if I wanted to Allow any computer to connect, local computers, or keep firewall settings. I would like to edit ...
0
votes
0answers
112 views

Some ports refusing to open with pfctl

I've tried opening the ports with pfctl, and a ruleset, which includes the following. pass in proto tcp from any to any port 22 pass in proto tcp from any to any port 465 pass in proto tcp from any ...
0
votes
0answers
42 views

Deny TCP CONNECT in appfirewall.log - how do I check what's causing it?

What is this telling me? socketfilterfw[22097] <Info>: dovecot: Deny TCP CONNECT (in:7 out:0) I'm trying to track down why none of my iOS devices can connect to my postfix+dovecot mail ...
0
votes
1answer
40 views

Little Snitch Global rule not working

I have a little snitch rule effective in all profiles to allow any process to connect to *.apple.com Why do I keep getting request for applications to connect to apple.com? Here are 4 different ...
0
votes
0answers
80 views

OSX firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OSX Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
0
votes
0answers
79 views

How to configure the pf firewall in the terminal?

I have googled it and have yet to find any good tutorials so far. Most of what I can find are for ipfw or GUI softwares. Does anyone know of any good tutorials on it? Would any of the non mac ...
0
votes
1answer
176 views

Which incoming ports do you need to open in osx firewall?

I use pf (BSD packet filter via Terminal). The recommended use of pf is to block all incoming ports and then open those you need. I want my system to work properly and don't miss things like ...
2
votes
2answers
191 views

How to limit the bandwidth on a per-application (or per-process) basis in OS X Yosemite?

Whenever I use Homebrew or Apple Store to download a large application, it sucks all my available bandwidth and I am then unable to browse the web. How can limit the bandwidth per-application or ...
0
votes
0answers
47 views

Mac Terminal won't accept £ in ssh password?

I have an issue where I'm trying to ssh into the root account of a firewall from my Mac. I'm on the same network as the firewall. ssh root@1.2.3.4 I'm then asked for my password which contains the ...
0
votes
0answers
90 views

Firewall asks always on start if incoming connections should be allowed for one daemon

I am using Yosemite on a MacBook Pro Retina. I have a global deaemon defined to start squezelite. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST ...
0
votes
1answer
240 views

Cannot connect to SSH server from Mac OSX

Whenever I try to connect to a remote server using SSH, I get an error "ssh: connect to host x.x.x.x port 22: Connection refused" I didn't install a Firewall or something similar. I know for sure the ...
0
votes
0answers
329 views

Does iOS Personal Hotspot have a firewall? Port 5353 not working

I have an iPhone 5 with iOS 8 installed. I've connected two devices to the Personal Hotspot, my Macbook Air and an Arduino Yun. Both can connect to the internet through the hotspot fine. I can also ...
4
votes
1answer
330 views

Is there a way to permanently “Deny” an application incoming network connections (i.e. no more prompts)?

There's a few apps that keep prompting me for incoming network connections, which I prefer to deny, but whenever I open these programs, I'm re-prompted to Allow/Deny incoming network connections for ...
1
vote
1answer
164 views

Configuring OS X Firewall to enable SSH/SCP only on the local subnet? [duplicate]

We would like to configure OS X to only allow Remote File Sharing (SCP) from a specific range of internal IP addresses. That way they only accessible when the user is connected via the VPN. What's ...
0
votes
0answers
164 views

Firewall partly breaks internet sharing over WiFi after upgrading to Yosemite

I used to share my ADSL/Ethernet internet connection over WiFi from a iMac to my iPhone/iPod/MacBook, but after upgrading to Yosemite (10.10) sharing stopped working with a very puzzling behaviour: ...
0
votes
0answers
112 views

I want to allow a specific port but still keep my firewall active. OS X 10.8

I have tried this from a previous post: The builtin firewall used by OS X is ipfw. To learn more about it from the Terminal you can enter man ipfw. To create a new firewall rule to allow incoming ...
1
vote
1answer
272 views

How can I use wifi only for handoff?

Ok OSX wizards... I have a dilemma. In order to use handoff/continuity at work I need to connect my Mac and iPad/iPhone to the same wifi network. Moreover, I also need to be connected to the ...
0
votes
0answers
281 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
1
vote
1answer
127 views

In OS X, how does manually sandboxing an application from the internet compare to blocking it with Little Snitch?

I want to prevent inbound and outbound connections to one application. I can buy Little Snitch if it's the best option, but it feels like I wouldn't be getting much value out of it for that one use. ...
0
votes
0answers
296 views

Bandwidth throttling with onboard tools in Yosemite?

Is there any way with Mac OS Yosemite's built-in firewall to throttle or queue connections from a single application, on a single port or to a certain hostname? The App in question would be the ...
7
votes
1answer
3k views

Dropbox109 process asking to access firewall on Yosemite

As the title says, I have a process called Dropbox109 asking to access the internet. I have denied it. I have Dropbox installed since Mavericks, and its been working fine (uploads/downloads/sync). ...
1
vote
1answer
186 views

What's netbiosd? I must block netbiosd?

I was asked to block netbiosd, but do not know what is. I must to block all connections from netbiosd?
1
vote
3answers
2k views

Apple Remote Desktop Admin blocked by OS X Yosemite Firewall

I'm experiencing an issue where the Firewall in OS X Yosemite is repeatedly preventing me from launching ARD Admin. Symptoms: Launch ARD and no window appears. I am forced to force-quit the ...
2
votes
0answers
74 views

Do pre-built Little Snitch configurations exist and are they shared?

Is it possible to import configurations that have been created elsewhere into Little Snitch? For example, a ready to go basic ruleset for someone who wants to block iCloud's more intrusive features. ...
0
votes
1answer
46 views

Is there a way to do per-application rules in pfctl/alf?

I'd like to implement a mitmproxy for a single application on my mac. Pfctl doesn't natively have (from what I can see) support to set rules based on the application source/dest of the packets, but ...
0
votes
2answers
188 views

Mavericks firewall does not keep my choices

I'm on Mavericks and I run a python script to have a minimalist local server. Anytime I launch the server the firewall popup comes in and asks me "Do you want the application “python2.7” to accept ...
0
votes
1answer
358 views

Rdr Missing on Yosemite

I'm trying to add a rule to my computer which was working on my work computer. strangely enough there's no rdr program on my Yosemite. should I install a particular package to obtain it? sh-3.2# rdr ...
0
votes
0answers
203 views

Forwarding IP address on Yosemite

I've been trying to redirect ip address 1.2.3.4 to 5.6.7.8 using IceFloor and PF rules. I have tried the following: rdr from any to 1.2.3.4 -> 5.6.7.8 This does not make a difference and ...
0
votes
1answer
284 views

Yosemite Server, adaptive firewall not stopping screensharingd attempts?

I'm not certain if the Adaptive Firewall in Yosemite Server 4.0 is just not working or just not working for screensharingd. I have a Mac mini Server in a colo and get lots of attempts at ...
1
vote
1answer
31 views

Firewall rules ambiguous?

In the stock OSX firewall settings I can add applications to the rules table, and then give them a red dot (block) or a green dot (allow). I've got 6 apps in the table. Some green some red. But what ...
0
votes
1answer
340 views

Firewall: Add command-line tool to rules (mosh-server)

How can I add a command line tool I've installed manually to the system firewall? The tool is Mobile Shell (mosh) installed via the excellent Homebrew)? Specifically, I want to add a rule for ...
0
votes
0answers
84 views

SelfControl not blocking anything

I have used SelfControl to block the internet for some time, but now it won't block anything anymore. (Edit: Well, acutally one moment SelfControl blocks some sites, then allows them again, apparently ...
3
votes
3answers
442 views

Disable Little Snitch in Guest account

It seems that Little Snitch 3.4.1 is a rehaul of the old version and this solution to disabling it in the guest account posted here Disable Little Snitch in guest account? doesn't work anymore. When ...