Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

learn more… | top users | synonyms (1)

3
votes
1answer
201 views

Port forwarding in OS X 10.10

I have to forward every internet page to my local address i.e. 127.0.0.1 using OS X. I tried following command but it has no effect: echo " rdr pass inet proto tcp from any to any port 80 -> 127....
2
votes
1answer
405 views

How to trap ssh breakin attempts on El Capitan

Previous to El Capitan one could use pfctl and /etc/pf.conf to "trap" the ip addresses of sites attempting to break into a server using brute force attacks producing 100's of attempts per second. The ...
2
votes
1answer
563 views

Configure ipfw to filter by ip range

I am a Linux user and very new to OSX. I have an OSX 10.7.5 "Lion" server that I am configuring as a webserver. I only have shell access. I am tryin to configure the firewall, but ipfw is quite ...
1
vote
1answer
598 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
1
vote
1answer
40 views

Firewall rules ambiguous?

In the stock OSX firewall settings I can add applications to the rules table, and then give them a red dot (block) or a green dot (allow). I've got 6 apps in the table. Some green some red. But what ...
1
vote
1answer
1k views

packet forwarding on OSX mavericks

My MacBookAir(Mavericks 10.9.2) need to share my internet connection(wi-fi;en0) with BeagleBoneBlack(BBB) which are in 192.168.7.0 subnet over en6 interface. ifconfig $ ifconfig lo0: flags=8049<...
4
votes
0answers
146 views

Do pre-built Little Snitch configurations exist and are they shared?

Is it possible to import configurations that have been created elsewhere into Little Snitch? For example, a ready to go basic ruleset for someone who wants to block iCloud's more intrusive features. ...
3
votes
0answers
370 views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
33 views

OSX Firewall 10.11 keeps getting turned off

For some time, several months at least, my inbuilt Firewall (OSX 10.11.x Application Level Firewall as available via Security and Privacy Preferences) keeps on getting turned off. It will be on for "...
2
votes
0answers
118 views

Any way to transparantly redirect outbound traffic to a particular IP:port on OS X?

OS: Yosemite Basically I am looking for something similar to Mac os x ipfw forward from ip:port to ip:port but since there is no ipfw on Yosemite is there a way to do this trick using pfctl or ...
2
votes
0answers
4k views

How do I use pf/IceFloor to block an outgoing connection to an IP address?

I am running an application that regularly phones home and reports a little more information than I'm comfortable with. I would normally add the reporting server's hostname to /etc/hosts, but the app ...
2
votes
0answers
239 views

Why does my firewall block connections even when it's off?

This most notably happens with iChat. I don't use a firewall, never have on this computer. When I first started using iChat (when Skype 5 came out and sucked hardcore) I couldn't video chat with ...
1
vote
0answers
32 views

Filter by group with pfctl

I'm using this example on 10.10.5 but I can't get my packets filtered correctly using pfctl: dummynet out proto { tcp,udp } all group throttle pipe 1 Based on the man pfctl (see here): group &...
1
vote
0answers
50 views

PF / IceFloor - Redirecting a service / port to a specific IP

What I'm trying to do is redirect all requests to a certain service or port to a specific IP address with IceFloor as the frontend for PF. In the example I'm posting en1 is my only enabled network ...
1
vote
0answers
46 views

How to start pfctl at boot

Before El Capitan I used to enable pfctl at boot by adding -e to the start up parameters. In /System/Library/LaunchDaemons/com.apple.pfctl.plist <string>/sbin/pfctl</string> <key>...
1
vote
0answers
61 views

Little Snitch shows ping flood to 0.0.0.192

My Little Snitch Network Monitor tells me my machine is ping'ing 0.0.0.192 every second. What's going on? EDIT: A Wireshark capture tells me this ping has Source 0.0.76.188 Destination 0.0.0.192
1
vote
0answers
313 views

How can I block ssh brute force attempts in OS X 10.11?

My system running OS X 10.11 is constantly getting hammered by failed ssh login attempts by bots. I'm using a secure password and the root account isn't accessible via ssh, but even so it's still a ...
1
vote
0answers
311 views

pfctl rules to only allow OpenVPN connection?

I'm trying to lock down my internet connection for privacy reasons and have signed up with a VPN provider who does no filtering (quite opposite to my ISP). The VPN provider supports OpenVPN via UDP on ...
1
vote
0answers
498 views

Open port 8888 for HTTP traffic from local network

I have my OS X 10.9.3 Application Level Firewall turned on (Firewall: On in System Preferences | Security & Privacy with Firewall Options: Block all incoming connections). ipfw show lists a ...
1
vote
0answers
57 views

How can I allow a “development” program through the firewall?

I have an application (java) that I compile/run through netbeans, I want to access it from a different computer. Opening a port might be the best solution, though if so I'd like to be a little more ...
1
vote
0answers
77 views

CalenderAgent: howto allow connection only if needed?

I use LittleSnitch, and there i can see that CalenderAgent makes still connection to Google and iCloud even iCal is closed. Because of several reason..., I want to allow CallanderAgent making ...
1
vote
0answers
180 views

MacOS 10.6 firewall treats IPv4 and IPv6 packets differently

I'm develping a wireless MIDI controller. When connecting to a Mac running Mac OS 10.6, everything works fine, so long as the controller attempts to connect to the Mac using IPv4. When using IPv6, I ...
1
vote
0answers
800 views

Mail.app can't connect to network (can't reach servers)

One day I woke up and could not use my Mail.app anymore :( Mail can't connect to any my account related server, either POP, IMAP or SMTP Why ? I don't know. In Log file I see that: When I try to ...
1
vote
0answers
33 views

Enforcing firewall (native or 3rd-party)

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
1
vote
0answers
3k views

FTP: active vs. passive, command line vs. browser

Here's a weird one for everyone. I'll use AskDifferent because my test bed is on a Mac, but I don't know that the underlying issue is specifically Mac. My Mac is behind a NAT wall. Let's call my ...
1
vote
0answers
683 views

Macbook Pro 10.7.5 I have internet connection but can't open any page

I need some help. My internet was working fine and all of a sudden I am not able to open a web page. I went through some of the steps you recommended to other users, such as adding DNS 208.67.222.222 &...
1
vote
0answers
982 views

How to open port 8080 on external interface?

I am running a server on port 8080, which I can access fine as localhost:8080 or 127.0.0.1:8080. However, assuming my IP address is 192.168.1.15, how can I access the port using 192.168.1.15:8080? ...
1
vote
0answers
105 views

Ip blocked since I updated my Mac to Mountain Lion

Since I've upgraded my mac from lion to mountain lion, the ip 5.9.31.48 (api.shellycloud.com) appear to be down (ping said that "Host is down"). So I think that there is somewhere a firewall rule that ...
0
votes
0answers
13 views

Problem with configuring pfctl

I am trying to set up banner checking in MASSCAN. Link to GitHub page The problem is that MASSCAN contains its own TCP/IP stack separate from the system you run it on. I need to firewall the port ...
0
votes
0answers
29 views

pfctl config to only allow openvpn connection

I found what appears to be a suitable guide here but pfctl complains of a syntax error and "no IP address found for en3" which is my main interface. I have had other pf rules working successfully to ...
0
votes
0answers
12 views

Q: Way to limit (not block) frequency of certain connections?

Third party software is okay, although I've tried things like Little Snitch, and the closest feature they have is the ability to create "temporary rules" (i.e. rules that allow/disallow specified ...
0
votes
0answers
104 views

What network access can I safely block for Adobe Creative Cloud?

Adobe Creative Cloud talks to a lot of servers via a lot of services, and it personally makes me uncomfortable when software talks home a lot like that. So I'm wondering, what of those network ...
0
votes
0answers
35 views

How to stop the firewall from dropping packets from outside my network

I have a Mac Mini, with OSX 10.11.3. My problem: I have configured the application firewall to accept incoming connections for a number of services. These I can access fine from hosts within the same ...
0
votes
0answers
125 views

pf port-forwarding on OS X Yosemite to avoid block

My ISP blocked a TCP port, let's say $ip1:$port1 So I setup $ip2:$port2 on my own VPS to get around it. How can I forward all traffic to $ip1:$port1 on OS X Yosemite as client to $ip2:$port2 using ...
0
votes
0answers
378 views

How to open specific port in EI Captain?

I have gone through many articles (please list one article you are following so we might suggest a better or at least follow along) and found the same solution but no result?? I have done -> sudo ...
0
votes
0answers
32 views

Shared Little Snitch rules for all browsers

In Little Snitch (v. 3.6), can I somehow define a shared set of rules for all browsers? i.e. define Firefox, Safari and Chrome to be part of a "group", and update the rules for the entire group ...
0
votes
0answers
157 views

Blocking/Disabling network connections remotely without losing remote access

I have a Windows 7 computer accessing an El Capitan Mac remotely via TeamViewer (a VNC program) While I'm remotely controlling this computer, I need to disable the internet (equivalent of disabling ...
0
votes
0answers
341 views

Microsoft Word to accept incoming network connections

Lately whenever I open Microsoft Word 2008 I get a prompt Do you want the application “Microsoft Word.app” to accept incoming network connections? I always click Deny (I can't think why anyone ...
0
votes
0answers
60 views

Blocking All Apple Services from OSX

How does one stop Apple from having any sort of control over your mac? For example, they can erase it, track its location etc and even the push notification service lets them know when you're using ...
0
votes
0answers
46 views

Add permanent Allow rule to Firewall without “Allow signed content…”

I'm working on an OS X 10.5 PowerMac machine. I want to add a permanent Allow rule for an updated OpenSSH server located at /usr/local/sbin/sshd. I have a firewall rule for it in the Firewall App, but ...
0
votes
0answers
96 views

Enable `ipfw` port-forwarding on startup

For older versions of Mac OS X (Mountain Lion), port-forwarding is done with the ipfw tool. (In later versions, use PF tool.) For example, the Apache Tomcat web server listens by default on port 8080....
0
votes
0answers
62 views

Mac Terminal won't accept £ in ssh password?

I have an issue where I'm trying to ssh into the root account of a firewall from my Mac. I'm on the same network as the firewall. ssh root@1.2.3.4 I'm then asked for my password which contains the £...
0
votes
0answers
181 views

I want to allow a specific port but still keep my firewall active. OS X 10.8

I have tried this from a previous post: The builtin firewall used by OS X is ipfw. To learn more about it from the Terminal you can enter man ipfw. To create a new firewall rule to allow incoming ...
0
votes
0answers
387 views

Bandwidth throttling with onboard tools in Yosemite?

Is there any way with Mac OS Yosemite's built-in firewall to throttle or queue connections from a single application, on a single port or to a certain hostname? The App in question would be the ...
0
votes
0answers
128 views

SelfControl not blocking anything

I have used SelfControl to block the internet for some time, but now it won't block anything anymore. (Edit: Well, acutally one moment SelfControl blocks some sites, then allows them again, apparently ...
0
votes
0answers
21 views

Firewall overwrite with wrong install version - How to fix

Hello. Not sure if this is an appropriate question here: Problem: Partially inaccessible computer. Due to firewall software overwrite (?) Need-Intent: Restore the machine condition & data. ...
0
votes
0answers
452 views

Is there a way to stop OS X opening NAT-PNP/uPNP holes for every open port on *?

With any luck, there's an easy work-around for this: curl ifconfig.me to find your external IP address sudo lsof -i4 -n | grep LISTEN | grep \* to find processes listening for connections from other ...
0
votes
0answers
781 views

What app is this ScannerEventWatcher.app?

After enabling the Firewall, I got this message: Do you want the application “ScannerEventWatcher.app” to accept incoming network connections? Clicking Deny may limit the application’s ...
0
votes
0answers
476 views

Can someone help me with errors in my pf.conf file? OS 10.7

I keep getting errors about the order of my rules and that there are syntax errors in my pf.conf file, and after troubleshooting for days, I thought I'd ask for some help. Please take a look and let ...