Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

learn more… | top users | synonyms (1)

6
votes
4answers
826 views

What is the “akd” process, and do I need to allow it to connect to the internet?

I use Little Snitch as a Mac OS firewall. Usually, it's fairly clear to me what needs to connect to the internet and what doesn't. However, I can't figure out what akd is or does, and why it needs to ...
1
vote
0answers
32 views

Filter by group with pfctl

I'm using this example on 10.10.5 but I can't get my packets filtered correctly using pfctl: dummynet out proto { tcp,udp } all group throttle pipe 1 Based on the man pfctl (see here): group &...
1
vote
1answer
1k views

packet forwarding on OSX mavericks

My MacBookAir(Mavericks 10.9.2) need to share my internet connection(wi-fi;en0) with BeagleBoneBlack(BBB) which are in 192.168.7.0 subnet over en6 interface. ifconfig $ ifconfig lo0: flags=8049<...
0
votes
1answer
14 views

Mac won't load some web contents

My MacBook Pro 2012 running ML has started not to load certain web pages. I tried with every browser but I have the same issue. I thought it was a firewall trouble, but it's disabled. Tried to ping ...
1
vote
1answer
598 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
0
votes
1answer
18 views

Little Snitch: Does restricting address/port for an application disable future connection prompts?

I have downloaded the trial version of Little Snitch. After install, when I am prompted with connection requests, I have the option to allow or deny the connection via "Any Connection" or "Only" a ...
1
vote
2answers
3k views

Little Snitch reports outgoing connections for AirPlayXPCHelper for wrong subnets?

After upgrading to El Capitan, I've started noticing annoying connections from the AirPlayXPCHelper to 192.168.1.0/24 subnet (my home network isn't in 192.168.1.0/24 subnet, it's in 172.16.0.0/12 ...
0
votes
0answers
13 views

Problem with configuring pfctl

I am trying to set up banner checking in MASSCAN. Link to GitHub page The problem is that MASSCAN contains its own TCP/IP stack separate from the system you run it on. I need to firewall the port ...
0
votes
0answers
10 views

Block outgoing Internet connections from an application [duplicate]

How can I block outgoing Internet connections from a specific application? I can block incoming connections using System Preferences > Security & Privacy > Firewall, but it doesn't appear to have ...
2
votes
1answer
69 views

All HTTP requests get ERR_CONNECTION_REFUSED, HTTPS works - How to troubleshoot?

Trying to open a http website on any web browser (event telnet) gives a ‘ERR_CONNECTION_REFUSED’ or ‘connection timed out’. However, the same sites can be opened using https. I tried doing a ...
1
vote
1answer
69 views

Only HTTPS websites working otherwise I receive ERR_CONNECTION_REFUSED [duplicate]

I am facing annoying problem of only HTTPS websites working on my Mac (in all browsers). I can only visit Google, YouTube, Facebook, Yahoo etc. So far, I tried following: Websites shows error of: ...
0
votes
1answer
16 views

Is there any way to look at and modify the Application Layer Firewall via the command line?

We have an issues where an application changed it's service name and UAC prompted users to allow or deny, and a lot of users clicked deny. If users go in to system preferences, security, firewall and ...
1
vote
0answers
50 views

PF / IceFloor - Redirecting a service / port to a specific IP

What I'm trying to do is redirect all requests to a certain service or port to a specific IP address with IceFloor as the frontend for PF. In the example I'm posting en1 is my only enabled network ...
55
votes
6answers
51k views

How to get rid of firewall “accept incoming connections” dialog?

I've accepted this so many times that firewall should already remember it. For example, I get it for Eclipse when starting my java programs in debugging mode ... sometimes this dialog is displayed ...
2
votes
0answers
33 views

OSX Firewall 10.11 keeps getting turned off

For some time, several months at least, my inbuilt Firewall (OSX 10.11.x Application Level Firewall as available via Security and Privacy Preferences) keeps on getting turned off. It will be on for "...
3
votes
2answers
2k views

How can I tell Firewall to allow incoming connections for Python.app running Django

Each time I run my Django development server, I get a dialog to allow incoming connections. No matter what I do : Click Allow in the dialog box Add to the Firewall via the OS X GUI (both real and ...
4
votes
1answer
111 views

Which built-in tools do Little Snitch-like applications rely on?

Little Snitch is a well-known piece of software that allows Mac users to block outgoing connexions from a specific app. Now, whenever I ask how to do the same with built-in OS X tools, I get an ...
15
votes
2answers
10k views

Reasons to prefer Little Snitch over the built-in firewall

Every now and then I browse through software you must have on your mac type lists and more often than not somebody mentions Little Snitch as a must-have application. Now what I think that many people ...
0
votes
1answer
21 views

Serve Application from my Mac over LAN

I am trying to serve an application I'm developing over the LAN at work. I'm doing this using Apache and this is working fine locally, but when I try to access from another client on the network the ...
5
votes
2answers
10k views

Does iOS have a firewall?

Does iOS support a built-in firewall like Mac OS X does? I don't see anything about it in Settings.
7
votes
2answers
3k views

Can I block ports and network traffic when using Personal Hotspot?

I would like to block ports and network traffic when using my jailbroken iOS device as a Personal Hotspot. The reason is I don't want my backup program, computer updates, or any high bandwidth usage ...
0
votes
0answers
30 views

pfctl config to only allow openvpn connection

I found what appears to be a suitable guide here but pfctl complains of a syntax error and "no IP address found for en3" which is my main interface. I have had other pf rules working successfully to ...
1
vote
1answer
2k views

Port blocking on iPhone 6

I am unable to get email to connect to my IMAP server using an iPhone 6+ with iOS 8.3. The telco (Telstra Australia) loves telling me that they do not block ports. Either the telco is blocking ports ...
0
votes
0answers
12 views

Q: Way to limit (not block) frequency of certain connections?

Third party software is okay, although I've tried things like Little Snitch, and the closest feature they have is the ability to create "temporary rules" (i.e. rules that allow/disallow specified ...
0
votes
2answers
53 views

How to Locate an App Running in the Background

My Mac is a work computer that used to have LANDesk installed. My admin ran a script that uninstalled it. However, when my machine starts I still get prompted to allow apps from LANDesk (vulscand, cba,...
1
vote
0answers
46 views

How to start pfctl at boot

Before El Capitan I used to enable pfctl at boot by adding -e to the start up parameters. In /System/Library/LaunchDaemons/com.apple.pfctl.plist <string>/sbin/pfctl</string> <key>...
1
vote
1answer
46 views

For security reasons, what should I block with the firewall?

For security reasons, what should I block with the firewall? I'm just interested in the system itself, not additional installed software. For example, I'd like my system to synchronize the clock or ...
3
votes
2answers
1k views

How to block internet access of all apps (except browser) when using 3g usb modem?

Is there any app that helps me to block all apps for accessing the internet when using 3g modem?
3
votes
1answer
201 views

Port forwarding in OS X 10.10

I have to forward every internet page to my local address i.e. 127.0.0.1 using OS X. I tried following command but it has no effect: echo " rdr pass inet proto tcp from any to any port 80 -> 127....
0
votes
0answers
106 views

What network access can I safely block for Adobe Creative Cloud?

Adobe Creative Cloud talks to a lot of servers via a lot of services, and it personally makes me uncomfortable when software talks home a lot like that. So I'm wondering, what of those network ...
1
vote
1answer
36 views

Using Package Installers behind company firewall

Is there a more efficient way to use package installers behind a firewall than adjusting the proxy settings for each installer? As of now, I'm using Ruby Gems, Bower, and NPM and it's a pain to ...
3
votes
2answers
142 views

How do I drop outgoing packets to specific host/port?

I want to test something locally. For that, I'd like to be able to drop outgoing packets sent to a specific host/port. I tried messing around with pf rules using Murus (the non-free version), but have ...
2
votes
1answer
241 views

How to Use Terminal for “Little Snitch” Functionality without Little Snitch

I'm a Terminal newb, and trying to wrap my head around manual "Little Snitch" functionality without using Little Snitch. From the research I've been doing, I've landed on the fact that I need to ...
3
votes
1answer
2k views

What is the modern way to do port-forwarding on El Capitan? (forward port 80 to 8080)

The old utility ipfw was discouraged in recent versions of Mac OS X and is now gone from El Capitan. What is the modern way to do port forwarding in El Capitan? I simply want port 80 to forward to ...
0
votes
0answers
36 views

How to stop the firewall from dropping packets from outside my network

I have a Mac Mini, with OSX 10.11.3. My problem: I have configured the application firewall to accept incoming connections for a number of services. These I can access fine from hosts within the same ...
21
votes
1answer
63k views

Should I block incoming connections from “netbiosd”?

My (application) firewall settings are configured to block incoming connections from netbiosd. I don't recall setting this myself, and wonder what the consequences are. What are the consequences of ...
1
vote
2answers
95 views

OS X firewall code-signing not working for nginx etc

I am trying to connect to a web server (nginx) on OS X El Capitan - on local wifi from an iOS device. I know from earlier that this is not easy. Tried this without success. Have you come across ...
0
votes
1answer
1k views

Allow port arbitrary port (such as 5432) open on El Capitan.

I'm running vagrant and successfully port forwarding from there. My issue is that some ports are not running. I know vagrant is working because I can successfully forward port 80, but cannot forward ...
1
vote
0answers
61 views

Little Snitch shows ping flood to 0.0.0.192

My Little Snitch Network Monitor tells me my machine is ping'ing 0.0.0.192 every second. What's going on? EDIT: A Wireshark capture tells me this ping has Source 0.0.76.188 Destination 0.0.0.192
0
votes
1answer
51 views

Systems not seeing netrestore image

Turning to here after many futile attempts to resolve. I have an OSX server (10.10.5) which has been hosting a Netrestore image over HTTP without issue for some time now. We replaced our firewall in ...
0
votes
0answers
125 views

pf port-forwarding on OS X Yosemite to avoid block

My ISP blocked a TCP port, let's say $ip1:$port1 So I setup $ip2:$port2 on my own VPS to get around it. How can I forward all traffic to $ip1:$port1 on OS X Yosemite as client to $ip2:$port2 using ...
0
votes
1answer
129 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
0
votes
0answers
384 views

How to open specific port in EI Captain?

I have gone through many articles (please list one article you are following so we might suggest a better or at least follow along) and found the same solution but no result?? I have done -> sudo ...
3
votes
1answer
1k views

Issue turning firewall off on OS X El Capitan 10.11.2

I'm trying to make a simple web server on my machine accessible to a peer on the same network, but with not much success. I am having an issue where my firewall continually turns back on, or won't ...
0
votes
1answer
404 views

How to accept incoming network connections in OS X 10.11 El Capitan?

After logging in the following message appears: Do you want the application “Microsoft Word.app” to accept incoming network connections? How do I allow Word to accept incoming network connections in ...
0
votes
0answers
32 views

Shared Little Snitch rules for all browsers

In Little Snitch (v. 3.6), can I somehow define a shared set of rules for all browsers? i.e. define Firefox, Safari and Chrome to be part of a "group", and update the rules for the entire group ...
0
votes
0answers
159 views

Blocking/Disabling network connections remotely without losing remote access

I have a Windows 7 computer accessing an El Capitan Mac remotely via TeamViewer (a VNC program) While I'm remotely controlling this computer, I need to disable the internet (equivalent of disabling ...
0
votes
1answer
94 views

I need help getting the pf firewall to work

Okay, so I asked this question on security.stackexchange.com and superuser.com and no one on either of those forums answered. Hopefully someone here will know the answer. I am running Mac OS X. I ...
19
votes
2answers
9k views

Xcode.app gets scanned by socketfilterfw (OS X Firewall) at every launch

Situation: When I launch Xcode, socketfilterfw, OS X's application based firewall, starts using a lot of CPU. After some research I narrowed it down to this: socketfilterfw reads all the files in ...
2
votes
2answers
3k views

Apple Remote Desktop Admin blocked by OS X Yosemite Firewall

I'm experiencing an issue where the Firewall in OS X Yosemite is repeatedly preventing me from launching ARD Admin. Symptoms: Launch ARD and no window appears. I am forced to force-quit the ...