Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

learn more… | top users | synonyms (1)

2
votes
1answer
193 views

How to trap ssh breakin attempts on El Capitan

Previous to El Capitan one could use pfctl and /etc/pf.conf to "trap" the ip addresses of sites attempting to break into a server using brute force attacks producing 100's of attempts per second. The ...
2
votes
1answer
519 views

Configure ipfw to filter by ip range

I am a Linux user and very new to OSX. I have an OSX 10.7.5 "Lion" server that I am configuring as a webserver. I only have shell access. I am tryin to configure the firewall, but ipfw is quite ...
1
vote
1answer
33 views

Firewall rules ambiguous?

In the stock OSX firewall settings I can add applications to the rules table, and then give them a red dot (block) or a green dot (allow). I've got 6 apps in the table. Some green some red. But what ...
1
vote
1answer
1k views

packet forwarding on OSX mavericks

My MacBookAir(Mavericks 10.9.2) need to share my internet connection(wi-fi;en0) with BeagleBoneBlack(BBB) which are in 192.168.7.0 subnet over en6 interface. ifconfig $ ifconfig lo0: ...
0
votes
1answer
41 views

Allow port arbitrary port (such as 5432) open on El Capitan.

I'm running vagrant and successfully port forwarding from there. My issue is that some ports are not running. I know vagrant is working because I can successfully forward port 80, but cannot forward ...
0
votes
1answer
63 views

How to accept incoming network connections in OS X 10.11 El Capitan?

After logging in the following message appears: Do you want the application “Microsoft Word.app” to accept incoming network connections? How do I allow Word to accept incoming network connections in ...
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
68 views

Any way to transparantly redirect outbound traffic to a particular IP:port on OS X?

OS: Yosemite Basically I am looking for something similar to Mac os x ipfw forward from ip:port to ip:port but since there is no ipfw on Yosemite is there a way to do this trick using pfctl or ...
2
votes
0answers
189 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
2
votes
0answers
110 views

Do pre-built Little Snitch configurations exist and are they shared?

Is it possible to import configurations that have been created elsewhere into Little Snitch? For example, a ready to go basic ruleset for someone who wants to block iCloud's more intrusive features. ...
2
votes
0answers
3k views

How do I use pf/IceFloor to block an outgoing connection to an IP address?

I am running an application that regularly phones home and reports a little more information than I'm comfortable with. I would normally add the reporting server's hostname to /etc/hosts, but the app ...
2
votes
0answers
232 views

Why does my firewall block connections even when it's off?

This most notably happens with iChat. I don't use a firewall, never have on this computer. When I first started using iChat (when Skype 5 came out and sucked hardcore) I couldn't video chat with ...
1
vote
0answers
42 views

Little Snitch shows ping flood to 0.0.0.192

My Little Snitch Network Monitor tells me my machine is ping'ing 0.0.0.192 every second. What's going on? EDIT: A Wireshark capture tells me this ping has Source 0.0.76.188 Destination 0.0.0.192 ...
1
vote
0answers
449 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
1
vote
0answers
284 views

pfctl rules to only allow OpenVPN connection?

I'm trying to lock down my internet connection for privacy reasons and have signed up with a VPN provider who does no filtering (quite opposite to my ISP). The VPN provider supports OpenVPN via UDP on ...
1
vote
0answers
379 views

Open port 8888 for HTTP traffic from local network

I have my OS X 10.9.3 Application Level Firewall turned on (Firewall: On in System Preferences | Security & Privacy with Firewall Options: Block all incoming connections). ipfw show lists a ...
1
vote
0answers
57 views

How can I allow a “development” program through the firewall?

I have an application (java) that I compile/run through netbeans, I want to access it from a different computer. Opening a port might be the best solution, though if so I'd like to be a little more ...
1
vote
0answers
76 views

CalenderAgent: howto allow connection only if needed?

I use LittleSnitch, and there i can see that CalenderAgent makes still connection to Google and iCloud even iCal is closed. Because of several reason..., I want to allow CallanderAgent making ...
1
vote
0answers
156 views

MacOS 10.6 firewall treats IPv4 and IPv6 packets differently

I'm develping a wireless MIDI controller. When connecting to a Mac running Mac OS 10.6, everything works fine, so long as the controller attempts to connect to the Mac using IPv4. When using IPv6, I ...
1
vote
0answers
771 views

Mail.app can't connect to network (can't reach servers)

One day I woke up and could not use my Mail.app anymore :( Mail can't connect to any my account related server, either POP, IMAP or SMTP Why ? I don't know. In Log file I see that: When I try to ...
1
vote
0answers
33 views

Enforcing firewall (native or 3rd-party)

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
1
vote
0answers
3k views

FTP: active vs. passive, command line vs. browser

Here's a weird one for everyone. I'll use AskDifferent because my test bed is on a Mac, but I don't know that the underlying issue is specifically Mac. My Mac is behind a NAT wall. Let's call my ...
1
vote
0answers
664 views

Macbook Pro 10.7.5 I have internet connection but can't open any page

I need some help. My internet was working fine and all of a sudden I am not able to open a web page. I went through some of the steps you recommended to other users, such as adding DNS 208.67.222.222 ...
1
vote
0answers
934 views

How to open port 8080 on external interface?

I am running a server on port 8080, which I can access fine as localhost:8080 or 127.0.0.1:8080. However, assuming my IP address is 192.168.1.15, how can I access the port using 192.168.1.15:8080? ...
1
vote
0answers
105 views

Ip blocked since I updated my Mac to Mountain Lion

Since I've upgraded my mac from lion to mountain lion, the ip 5.9.31.48 (api.shellycloud.com) appear to be down (ping said that "Host is down"). So I think that there is somewhere a firewall rule that ...
0
votes
0answers
34 views

pf port-forwarding on OS X Yosemite to avoid block

My ISP blocked a TCP port, let's say $ip1:$port1 So I setup $ip2:$port2 on my own VPS to get around it. How can I forward all traffic to $ip1:$port1 on OS X Yosemite as client to $ip2:$port2 using ...
0
votes
0answers
64 views

How to open specific port in EI Captain?

I have gone through many articles (please list one article you are following so we might suggest a better or at least follow along) and found the same solution but no result?? I have done -> sudo ...
0
votes
0answers
20 views

Shared Little Snitch rules for all browsers

In Little Snitch (v. 3.6), can I somehow define a shared set of rules for all browsers? i.e. define Firefox, Safari and Chrome to be part of a "group", and update the rules for the entire group ...
0
votes
0answers
53 views

Blocking/Disabling network connections remotely without losing remote access

I have a Windows 7 computer accessing an El Capitan Mac remotely via TeamViewer (a VNC program) While I'm remotely controlling this computer, I need to disable the internet (equivalent of disabling ...
0
votes
0answers
32 views

VPN connection sharing using PF NAT

I have the following network infrastructure, with a Mac Pro that has a VPN connection (ppp0): What I'd like to accomplish is that Device 1 and Device 2 can share the Mac Pro's VPN connection by ...
0
votes
0answers
177 views

Microsoft Word to accept incoming network connections

Lately whenever I open Microsoft Word 2008 I get a prompt Do you want the application “Microsoft Word.app” to accept incoming network connections? I always click Deny (I can't think why anyone ...
0
votes
0answers
38 views

Blocking All Apple Services from OSX

How does one stop Apple from having any sort of control over your mac? For example, they can erase it, track its location etc and even the push notification service lets them know when you're using ...
0
votes
0answers
113 views

How can I block ssh brute force attempts in OS X 10.11?

My system running OS X 10.11 is constantly getting hammered by failed ssh login attempts by bots. I'm using a secure password and the root account isn't accessible via ssh, but even so it's still a ...
0
votes
0answers
38 views

Add permanent Allow rule to Firewall without “Allow signed content…”

I'm working on an OS X 10.5 PowerMac machine. I want to add a permanent Allow rule for an updated OpenSSH server located at /usr/local/sbin/sshd. I have a firewall rule for it in the Firewall App, but ...
0
votes
0answers
66 views

Enable `ipfw` port-forwarding on startup

For older versions of Mac OS X (Mountain Lion), port-forwarding is done with the ipfw tool. (In later versions, use PF tool.) For example, the Apache Tomcat web server listens by default on port ...
0
votes
0answers
33 views

OS X: enable firewall only on Wi-Fi?

When I'm connected to my local LAN via thunderbolt, I don't want the firewall on. When I'm connected via Wi-Fi, I want the firewall on. I can't figure out how to make that happen.
0
votes
0answers
18 views

Change MySQL Norton-Firewall Settings

When I was enabling MySQL on Mac and I was prompted by Norton with a message saying if I wanted to Allow any computer to connect, local computers, or keep firewall settings. I would like to edit ...
0
votes
0answers
338 views

Some ports refusing to open with pfctl

I've tried opening the ports with pfctl, and a ruleset, which includes the following. pass in proto tcp from any to any port 22 pass in proto tcp from any to any port 465 pass in proto tcp from any ...
0
votes
0answers
76 views

Deny TCP CONNECT in appfirewall.log - how do I check what's causing it?

What is this telling me? socketfilterfw[22097] <Info>: dovecot: Deny TCP CONNECT (in:7 out:0) I'm trying to track down why none of my iOS devices can connect to my postfix+dovecot mail ...
0
votes
0answers
112 views

How to configure the pf firewall in the terminal?

I have googled it and have yet to find any good tutorials so far. Most of what I can find are for ipfw or GUI softwares. Does anyone know of any good tutorials on it? Would any of the non mac ...
0
votes
0answers
56 views

Mac Terminal won't accept £ in ssh password?

I have an issue where I'm trying to ssh into the root account of a firewall from my Mac. I'm on the same network as the firewall. ssh root@1.2.3.4 I'm then asked for my password which contains the ...
0
votes
0answers
112 views

Firewall asks always on start if incoming connections should be allowed for one daemon

I am using Yosemite on a MacBook Pro Retina. I have a global deaemon defined to start squezelite. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST ...
0
votes
0answers
529 views

Does iOS Personal Hotspot have a firewall? Port 5353 not working

I have an iPhone 5 with iOS 8 installed. I've connected two devices to the Personal Hotspot, my Macbook Air and an Arduino Yun. Both can connect to the internet through the hotspot fine. I can also ...
0
votes
0answers
135 views

I want to allow a specific port but still keep my firewall active. OS X 10.8

I have tried this from a previous post: The builtin firewall used by OS X is ipfw. To learn more about it from the Terminal you can enter man ipfw. To create a new firewall rule to allow incoming ...
0
votes
0answers
351 views

Bandwidth throttling with onboard tools in Yosemite?

Is there any way with Mac OS Yosemite's built-in firewall to throttle or queue connections from a single application, on a single port or to a certain hostname? The App in question would be the ...
0
votes
0answers
116 views

SelfControl not blocking anything

I have used SelfControl to block the internet for some time, but now it won't block anything anymore. (Edit: Well, acutally one moment SelfControl blocks some sites, then allows them again, apparently ...
0
votes
0answers
21 views

Firewall overwrite with wrong install version - How to fix

Hello. Not sure if this is an appropriate question here: Problem: Partially inaccessible computer. Due to firewall software overwrite (?) Need-Intent: Restore the machine condition & data. ...
0
votes
0answers
341 views

Is there a way to stop OS X opening NAT-PNP/uPNP holes for every open port on *?

With any luck, there's an easy work-around for this: curl ifconfig.me to find your external IP address sudo lsof -i4 -n | grep LISTEN | grep \* to find processes listening for connections from other ...
0
votes
0answers
677 views

What app is this ScannerEventWatcher.app?

After enabling the Firewall, I got this message: Do you want the application “ScannerEventWatcher.app” to accept incoming network connections? Clicking Deny may limit the application’s ...
0
votes
0answers
428 views

Can someone help me with errors in my pf.conf file? OS 10.7

I keep getting errors about the order of my rules and that there are syntax errors in my pf.conf file, and after troubleshooting for days, I thought I'd ask for some help. Please take a look and let ...