Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

learn more… | top users | synonyms (1)

17
votes
2answers
7k views

Xcode.app gets scanned by socketfilterfw (OS X Firewall) at every launch

Situation: When I launch Xcode, socketfilterfw, OS X's application based firewall, starts using a lot of CPU. After some research I narrowed it down to this: socketfilterfw reads all the files in ...
0
votes
1answer
176 views

Firewall blocks all internet sharing except port 80

MacBook Pro on 10.7.5 (Lion) static ip 192.168.10.5 using wireless connection ethernet jack connected to raspberry pi raspberry pi has static ip 192.168.2.3 when internet sharing is enabled and ...
0
votes
1answer
40 views

Modifing a preference via applescript changes file group

I recently request help about modifying firewall settings via command-line (see my previous question). Everything is working, but I have noticed that whenever I use this command in an applescript, the ...
0
votes
0answers
18 views

Change MySQL Norton-Firewall Settings

When I was enabling MySQL on Mac and I was prompted by Norton with a message saying if I wanted to Allow any computer to connect, local computers, or keep firewall settings. I would like to edit ...
0
votes
0answers
434 views

Some ports refusing to open with pfctl

I've tried opening the ports with pfctl, and a ruleset, which includes the following. pass in proto tcp from any to any port 22 pass in proto tcp from any to any port 465 pass in proto tcp from any ...
0
votes
0answers
94 views

Deny TCP CONNECT in appfirewall.log - how do I check what's causing it?

What is this telling me? socketfilterfw[22097] <Info>: dovecot: Deny TCP CONNECT (in:7 out:0) I'm trying to track down why none of my iOS devices can connect to my postfix+dovecot mail ...
0
votes
1answer
200 views

Little Snitch Global rule not working

I have a little snitch rule effective in all profiles to allow any process to connect to *.apple.com Why do I keep getting request for applications to connect to apple.com? Here are 4 different ...
0
votes
1answer
112 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
0
votes
1answer
453 views

Which incoming ports do you need to open in osx firewall?

I use pf (BSD packet filter via Terminal). The recommended use of pf is to block all incoming ports and then open those you need. I want my system to work properly and don't miss things like ...
2
votes
2answers
407 views

How to limit the bandwidth on a per-application (or per-process) basis in OS X Yosemite?

Whenever I use Homebrew or Apple Store to download a large application, it sucks all my available bandwidth and I am then unable to browse the web. How can limit the bandwidth per-application or ...
0
votes
0answers
60 views

Mac Terminal won't accept £ in ssh password?

I have an issue where I'm trying to ssh into the root account of a firewall from my Mac. I'm on the same network as the firewall. ssh root@1.2.3.4 I'm then asked for my password which contains the ...
0
votes
1answer
364 views

Cannot connect to SSH server from Mac OSX

Whenever I try to connect to a remote server using SSH, I get an error "ssh: connect to host x.x.x.x port 22: Connection refused" I didn't install a Firewall or something similar. I know for sure the ...
4
votes
1answer
388 views

Is there a way to permanently “Deny” an application incoming network connections (i.e. no more prompts)?

There's a few apps that keep prompting me for incoming network connections, which I prefer to deny, but whenever I open these programs, I'm re-prompted to Allow/Deny incoming network connections for ...
1
vote
1answer
429 views

Configuring OS X Firewall to enable SSH/SCP only on the local subnet? [duplicate]

We would like to configure OS X to only allow Remote File Sharing (SCP) from a specific range of internal IP addresses. That way they only accessible when the user is connected via the VPN. What's ...
0
votes
0answers
164 views

I want to allow a specific port but still keep my firewall active. OS X 10.8

I have tried this from a previous post: The builtin firewall used by OS X is ipfw. To learn more about it from the Terminal you can enter man ipfw. To create a new firewall rule to allow incoming ...
1
vote
1answer
454 views

How can I use wifi only for handoff?

Ok OSX wizards... I have a dilemma. In order to use handoff/continuity at work I need to connect my Mac and iPad/iPhone to the same wifi network. Moreover, I also need to be connected to the ...
1
vote
0answers
512 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
2
votes
1answer
245 views

In OS X, how does manually sandboxing an application from the internet compare to blocking it with Little Snitch?

I want to prevent inbound and outbound connections to one application. I can buy Little Snitch if it's the best option, but it feels like I wouldn't be getting much value out of it for that one use. ...
0
votes
0answers
363 views

Bandwidth throttling with onboard tools in Yosemite?

Is there any way with Mac OS Yosemite's built-in firewall to throttle or queue connections from a single application, on a single port or to a certain hostname? The App in question would be the ...
7
votes
1answer
3k views

Dropbox109 process asking to access firewall on Yosemite

As the title says, I have a process called Dropbox109 asking to access the internet. I have denied it. I have Dropbox installed since Mavericks, and its been working fine (uploads/downloads/sync). ...
1
vote
1answer
419 views

What's netbiosd? I must block netbiosd?

I was asked to block netbiosd, but do not know what is. I must to block all connections from netbiosd?
2
votes
2answers
3k views

Apple Remote Desktop Admin blocked by OS X Yosemite Firewall

I'm experiencing an issue where the Firewall in OS X Yosemite is repeatedly preventing me from launching ARD Admin. Symptoms: Launch ARD and no window appears. I am forced to force-quit the ...
2
votes
0answers
126 views

Do pre-built Little Snitch configurations exist and are they shared?

Is it possible to import configurations that have been created elsewhere into Little Snitch? For example, a ready to go basic ruleset for someone who wants to block iCloud's more intrusive features. ...
0
votes
1answer
62 views

Is there a way to do per-application rules in pfctl/alf?

I'd like to implement a mitmproxy for a single application on my mac. Pfctl doesn't natively have (from what I can see) support to set rules based on the application source/dest of the packets, but ...
0
votes
2answers
294 views

Mavericks firewall does not keep my choices

I'm on Mavericks and I run a python script to have a minimalist local server. Anytime I launch the server the firewall popup comes in and asks me "Do you want the application “python2.7” to accept ...
0
votes
1answer
526 views

Rdr Missing on Yosemite

I'm trying to add a rule to my computer which was working on my work computer. strangely enough there's no rdr program on my Yosemite. should I install a particular package to obtain it? sh-3.2# rdr ...
0
votes
1answer
347 views

Yosemite Server, adaptive firewall not stopping screensharingd attempts?

I'm not certain if the Adaptive Firewall in Yosemite Server 4.0 is just not working or just not working for screensharingd. I have a Mac mini Server in a colo and get lots of attempts at ...
1
vote
1answer
37 views

Firewall rules ambiguous?

In the stock OSX firewall settings I can add applications to the rules table, and then give them a red dot (block) or a green dot (allow). I've got 6 apps in the table. Some green some red. But what ...
0
votes
1answer
468 views

Firewall: Add command-line tool to rules (mosh-server)

How can I add a command line tool I've installed manually to the system firewall? The tool is Mobile Shell (mosh) installed via the excellent Homebrew)? Specifically, I want to add a rule for ...
0
votes
0answers
120 views

SelfControl not blocking anything

I have used SelfControl to block the internet for some time, but now it won't block anything anymore. (Edit: Well, acutally one moment SelfControl blocks some sites, then allows them again, apparently ...
3
votes
3answers
559 views

Disable Little Snitch in Guest account

It seems that Little Snitch 3.4.1 is a rehaul of the old version and this solution to disabling it in the guest account posted here Disable Little Snitch in guest account? doesn't work anymore. When ...
0
votes
1answer
662 views

Cant access firewall in system preferences; firewall tab is greyed out

I have tried multiple things to rememdy this issue. I have tried enabling and logging in as root, tried to clone the system preferences app and accessing security and privacy from the view menu and ...
4
votes
1answer
126 views

ShellShock: Do I need to be worried about this on OS X Mavericks?

The title kind of says it all… I was in the process of bringing up a rather extensive set of Mac OS X Server machines when ShellShocked hit the world. As soon as I saw the news, I hastily began ...
0
votes
0answers
21 views

Firewall overwrite with wrong install version - How to fix

Hello. Not sure if this is an appropriate question here: Problem: Partially inaccessible computer. Due to firewall software overwrite (?) Need-Intent: Restore the machine condition & data. ...
2
votes
1answer
1k views

How can I add a ipfw forward rule to little snitch?

I use the following rules to connect to my nginx server on a vagrant machine: sudo ipfw add 100 fwd 127.0.0.1,8080 tcp from any to me 80 sudo ipfw add 100 fwd 127.0.0.1,8090 tcp from any to me 443 ...
5
votes
3answers
22k views

How to open a specific port in Firewall OS X 10.9.4

How do I open a specific port in the firewall? I can not use the "allow connections from application" as I want to open the port for Jenkins, that is not on the list...
2
votes
2answers
2k views

How can I tell Firewall to allow incoming connections for Python.app running Django

Each time I run my Django development server, I get a dialog to allow incoming connections. No matter what I do : Click Allow in the dialog box Add to the Firewall via the OS X GUI (both real and ...
0
votes
0answers
402 views

Is there a way to stop OS X opening NAT-PNP/uPNP holes for every open port on *?

With any luck, there's an easy work-around for this: curl ifconfig.me to find your external IP address sudo lsof -i4 -n | grep LISTEN | grep \* to find processes listening for connections from other ...
1
vote
0answers
302 views

pfctl rules to only allow OpenVPN connection?

I'm trying to lock down my internet connection for privacy reasons and have signed up with a VPN provider who does no filtering (quite opposite to my ISP). The VPN provider supports OpenVPN via UDP on ...
1
vote
1answer
625 views

Modify existing Little Snitch rule to be Effective in all profiles

I've been using Little Snitch for a while. I have several profiles set up (e.g. Home, Work, Public, etc). I've been working to generalize some of the rules. E.g. Instead of specifically allowing ...
1
vote
0answers
439 views

Open port 8888 for HTTP traffic from local network

I have my OS X 10.9.3 Application Level Firewall turned on (Firewall: On in System Preferences | Security & Privacy with Firewall Options: Block all incoming connections). ipfw show lists a ...
0
votes
1answer
185 views

CrashPlan requests network connection on startup

Since upgrading to Mavericks, CrashPlan requests incoming network connections each time my MBP is restarted. I always click "Allow" and I've ensured that my firewall settings allow it, but I still get ...
3
votes
1answer
2k views

ntpd and incoming connections on OS X client?

I recently received a dialog box on my MacBook Air (10.9.2 Client) asking "Do you want the application “ntpd” to accept incoming network connections?". I have OS X's firewall enabled. Now, my ...
1
vote
1answer
1k views

packet forwarding on OSX mavericks

My MacBookAir(Mavericks 10.9.2) need to share my internet connection(wi-fi;en0) with BeagleBoneBlack(BBB) which are in 192.168.7.0 subnet over en6 interface. ifconfig $ ifconfig lo0: ...
3
votes
2answers
1k views

How to block internet access of all apps (except browser) when using 3g usb modem?

Is there any app that helps me to block all apps for accessing the internet when using 3g modem?
1
vote
0answers
57 views

How can I allow a “development” program through the firewall?

I have an application (java) that I compile/run through netbeans, I want to access it from a different computer. Opening a port might be the best solution, though if so I'd like to be a little more ...
1
vote
1answer
403 views

Free firewall and network monitor Application like the LittleSnitch? [duplicate]

I am searching for a good free firewall and network monitor as the littlesnitch but I can't pay for this app. I want a firewall that will protect me but more of that to monitor any connection in or ...
2
votes
2answers
3k views

Do firewall tools exist for OS X Mavericks for preventing brute force attacks?

Here's the deal: Over the last few weeks, I've noticed a large number of authentication failures for both the sshd service and the screensharingd service on my Mac OS X Mavericks server (running ...
1
vote
2answers
54 views

Enable internet only for specific apps

I will need to spend few weeks with no internet, but I will still have my mobile hot spot. So I wonder if I can prohibit all apps including OS (which I know will try silently to update something) from ...
2
votes
1answer
738 views

Blocking internet access for a specific application on Mac OS X

How can I block internet access to a specific application in Mac OS X? I need this to be done from the command line and hopefully use the ipfw terminal command. Specifically I am looking to toggle ...