Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

learn more… | top users | synonyms (1)

2
votes
1answer
471 views

Configure ipfw to filter by ip range

I am a Linux user and very new to OSX. I have an OSX 10.7.5 "Lion" server that I am configuring as a webserver. I only have shell access. I am tryin to configure the firewall, but ipfw is quite ...
1
vote
1answer
31 views

Firewall rules ambiguous?

In the stock OSX firewall settings I can add applications to the rules table, and then give them a red dot (block) or a green dot (allow). I've got 6 apps in the table. Some green some red. But what ...
1
vote
1answer
940 views

packet forwarding on OSX mavericks

My MacBookAir(Mavericks 10.9.2) need to share my internet connection(wi-fi;en0) with BeagleBoneBlack(BBB) which are in 192.168.7.0 subnet over en6 interface. ifconfig $ ifconfig lo0: ...
0
votes
1answer
37 views

What is the Correct 'pf' Syntax for an 'iptables' Port Redirection Rule

I am looking to implement a rule like the following iptables rule on my Mac, to redirect traffic from my development workstation (hosting a development copy of a Ruby on Rails project) to another host ...
0
votes
1answer
918 views

How can I setup my mac (OS X Yosemite) as an internet gateway

It should be possible, but I searched for a day and cannot get a decent HowTo. There seemed to be a Gateway Setup Assistant, but the Wikipedia link only goes to the server app now. Maybe it is easier ...
0
votes
1answer
61 views

Firewall blocks all internet sharing except port 80

MacBook Pro on 10.7.5 (Lion) static ip 192.168.10.5 using wireless connection ethernet jack connected to raspberry pi raspberry pi has static ip 192.168.2.3 when internet sharing is enabled and ...
0
votes
1answer
47 views

Is there a way to do per-application rules in pfctl/alf?

I'd like to implement a mitmproxy for a single application on my mac. Pfctl doesn't natively have (from what I can see) support to set rules based on the application source/dest of the packets, but ...
0
votes
1answer
284 views

Yosemite Server, adaptive firewall not stopping screensharingd attempts?

I'm not certain if the Adaptive Firewall in Yosemite Server 4.0 is just not working or just not working for screensharingd. I have a Mac mini Server in a colo and get lots of attempts at ...
0
votes
1answer
342 views

Firewall: Add command-line tool to rules (mosh-server)

How can I add a command line tool I've installed manually to the system firewall? The tool is Mobile Shell (mosh) installed via the excellent Homebrew)? Specifically, I want to add a rule for ...
0
votes
1answer
476 views

Cant access firewall in system preferences; firewall tab is greyed out

I have tried multiple things to rememdy this issue. I have tried enabling and logging in as root, tried to clone the system preferences app and accessing security and privacy from the view menu and ...
0
votes
1answer
164 views

CrashPlan requests network connection on startup

Since upgrading to Mavericks, CrashPlan requests incoming network connections each time my MBP is restarted. I always click "Allow" and I've ensured that my firewall settings allow it, but I still get ...
0
votes
1answer
146 views

How can I permanently suppress the firewall access prompt while developing a server program

I have a server process that I am developing that opens listening TCP sockets. Each time that happens, the firewall opens a dialog with the text "Do you want the application “server” to accept ...
0
votes
1answer
93 views

How can I disable the firewall on OS X after forgetting how I set it?

I have enabled an option on my mac to ask for permission every time I open an network application, But I can't seem to find out how to turn it off. Where would I disable the below dialog?
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
74 views

Do pre-built Little Snitch configurations exist and are they shared?

Is it possible to import configurations that have been created elsewhere into Little Snitch? For example, a ready to go basic ruleset for someone who wants to block iCloud's more intrusive features. ...
2
votes
0answers
3k views

How do I use pf/IceFloor to block an outgoing connection to an IP address?

I am running an application that regularly phones home and reports a little more information than I'm comfortable with. I would normally add the reporting server's hostname to /etc/hosts, but the app ...
2
votes
0answers
225 views

Why does my firewall block connections even when it's off?

This most notably happens with iChat. I don't use a firewall, never have on this computer. When I first started using iChat (when Skype 5 came out and sucked hardcore) I couldn't video chat with ...
1
vote
0answers
35 views

Configuring `fail2ban`

I’ve noticed some attempts to log into my Mac via SSH: 30/07/2015 13:30:59.274 sshd[52991]: error: PAM: authentication error for root from 59.47.0.150 via 192.168.1.68 30/07/2015 13:31:00.217 ...
1
vote
0answers
207 views

pfctl rules to only allow OpenVPN connection?

I'm trying to lock down my internet connection for privacy reasons and have signed up with a VPN provider who does no filtering (quite opposite to my ISP). The VPN provider supports OpenVPN via UDP on ...
1
vote
0answers
275 views

Open port 8888 for HTTP traffic from local network

I have my OS X 10.9.3 Application Level Firewall turned on (Firewall: On in System Preferences | Security & Privacy with Firewall Options: Block all incoming connections). ipfw show lists a ...
1
vote
0answers
55 views

How can I allow a “development” program through the firewall?

I have an application (java) that I compile/run through netbeans, I want to access it from a different computer. Opening a port might be the best solution, though if so I'd like to be a little more ...
1
vote
0answers
74 views

CalenderAgent: howto allow connection only if needed?

I use LittleSnitch, and there i can see that CalenderAgent makes still connection to Google and iCloud even iCal is closed. Because of several reason..., I want to allow CallanderAgent making ...
1
vote
0answers
130 views

MacOS 10.6 firewall treats IPv4 and IPv6 packets differently

I'm develping a wireless MIDI controller. When connecting to a Mac running Mac OS 10.6, everything works fine, so long as the controller attempts to connect to the Mac using IPv4. When using IPv6, I ...
1
vote
0answers
687 views

Mail.app can't connect to network (can't reach servers)

One day I woke up and could not use my Mail.app anymore :( Mail can't connect to any my account related server, either POP, IMAP or SMTP Why ? I don't know. In Log file I see that: When I try to ...
1
vote
0answers
31 views

Enforcing firewall (native or 3rd-party)

We're currently doing PCI compliance, and one of the requirements is that mobile devices that have access to systems involved in processing card data have personal firewall software installed which ...
1
vote
0answers
3k views

FTP: active vs. passive, command line vs. browser

Here's a weird one for everyone. I'll use AskDifferent because my test bed is on a Mac, but I don't know that the underlying issue is specifically Mac. My Mac is behind a NAT wall. Let's call my ...
1
vote
0answers
614 views

Macbook Pro 10.7.5 I have internet connection but can't open any page

I need some help. My internet was working fine and all of a sudden I am not able to open a web page. I went through some of the steps you recommended to other users, such as adding DNS 208.67.222.222 ...
1
vote
0answers
869 views

How to open port 8080 on external interface?

I am running a server on port 8080, which I can access fine as localhost:8080 or 127.0.0.1:8080. However, assuming my IP address is 192.168.1.15, how can I access the port using 192.168.1.15:8080? ...
1
vote
0answers
104 views

Ip blocked since I updated my Mac to Mountain Lion

Since I've upgraded my mac from lion to mountain lion, the ip 5.9.31.48 (api.shellycloud.com) appear to be down (ping said that "Host is down"). So I think that there is somewhere a firewall rule that ...
0
votes
0answers
7 views

Add permanent Allow rule to Firewall without “Allow signed content…”

I'm working on an OS X 10.5 PowerMac machine. I want to add a permanent Allow rule for an updated OpenSSH server located at /usr/local/sbin/sshd. I have a firewall rule for it in the Firewall App, but ...
0
votes
0answers
23 views

Enable `ipfw` port-forwarding on startup

For older versions of Mac OS X (Mountain Lion), port-forwarding is done with the ipfw tool. (In later versions, use PF tool.) For example, the Apache Tomcat web server listens by default on port ...
0
votes
0answers
28 views

OS X: enable firewall only on Wi-Fi?

When I'm connected to my local LAN via thunderbolt, I don't want the firewall on. When I'm connected via Wi-Fi, I want the firewall on. I can't figure out how to make that happen.
0
votes
0answers
14 views

Change MySQL Norton-Firewall Settings

When I was enabling MySQL on Mac and I was prompted by Norton with a message saying if I wanted to Allow any computer to connect, local computers, or keep firewall settings. I would like to edit ...
0
votes
0answers
113 views

Some ports refusing to open with pfctl

I've tried opening the ports with pfctl, and a ruleset, which includes the following. pass in proto tcp from any to any port 22 pass in proto tcp from any to any port 465 pass in proto tcp from any ...
0
votes
0answers
42 views

Deny TCP CONNECT in appfirewall.log - how do I check what's causing it?

What is this telling me? socketfilterfw[22097] <Info>: dovecot: Deny TCP CONNECT (in:7 out:0) I'm trying to track down why none of my iOS devices can connect to my postfix+dovecot mail ...
0
votes
0answers
80 views

OSX firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OSX Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
0
votes
0answers
79 views

How to configure the pf firewall in the terminal?

I have googled it and have yet to find any good tutorials so far. Most of what I can find are for ipfw or GUI softwares. Does anyone know of any good tutorials on it? Would any of the non mac ...
0
votes
0answers
48 views

Mac Terminal won't accept £ in ssh password?

I have an issue where I'm trying to ssh into the root account of a firewall from my Mac. I'm on the same network as the firewall. ssh root@1.2.3.4 I'm then asked for my password which contains the ...
0
votes
0answers
91 views

Firewall asks always on start if incoming connections should be allowed for one daemon

I am using Yosemite on a MacBook Pro Retina. I have a global deaemon defined to start squezelite. <?xml version="1.0" encoding="UTF-8"?> <!DOCTYPE plist PUBLIC "-//Apple//DTD PLIST ...
0
votes
0answers
332 views

Does iOS Personal Hotspot have a firewall? Port 5353 not working

I have an iPhone 5 with iOS 8 installed. I've connected two devices to the Personal Hotspot, my Macbook Air and an Arduino Yun. Both can connect to the internet through the hotspot fine. I can also ...
0
votes
0answers
164 views

Firewall partly breaks internet sharing over WiFi after upgrading to Yosemite

I used to share my ADSL/Ethernet internet connection over WiFi from a iMac to my iPhone/iPod/MacBook, but after upgrading to Yosemite (10.10) sharing stopped working with a very puzzling behaviour: ...
0
votes
0answers
112 views

I want to allow a specific port but still keep my firewall active. OS X 10.8

I have tried this from a previous post: The builtin firewall used by OS X is ipfw. To learn more about it from the Terminal you can enter man ipfw. To create a new firewall rule to allow incoming ...
0
votes
0answers
283 views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
0
votes
0answers
297 views

Bandwidth throttling with onboard tools in Yosemite?

Is there any way with Mac OS Yosemite's built-in firewall to throttle or queue connections from a single application, on a single port or to a certain hostname? The App in question would be the ...
0
votes
0answers
204 views

Forwarding IP address on Yosemite

I've been trying to redirect ip address 1.2.3.4 to 5.6.7.8 using IceFloor and PF rules. I have tried the following: rdr from any to 1.2.3.4 -> 5.6.7.8 This does not make a difference and ...
0
votes
0answers
84 views

SelfControl not blocking anything

I have used SelfControl to block the internet for some time, but now it won't block anything anymore. (Edit: Well, acutally one moment SelfControl blocks some sites, then allows them again, apparently ...
0
votes
0answers
21 views

Firewall overwrite with wrong install version - How to fix

Hello. Not sure if this is an appropriate question here: Problem: Partially inaccessible computer. Due to firewall software overwrite (?) Need-Intent: Restore the machine condition & data. ...
0
votes
0answers
221 views

Is there a way to stop OS X opening NAT-PNP/uPNP holes for every open port on *?

With any luck, there's an easy work-around for this: curl ifconfig.me to find your external IP address sudo lsof -i4 -n | grep LISTEN | grep \* to find processes listening for connections from other ...
0
votes
0answers
539 views

What app is this ScannerEventWatcher.app?

After enabling the Firewall, I got this message: Do you want the application “ScannerEventWatcher.app” to accept incoming network connections? Clicking Deny may limit the application’s ...
0
votes
0answers
356 views

Can someone help me with errors in my pf.conf file? OS 10.7

I keep getting errors about the order of my rules and that there are syntax errors in my pf.conf file, and after troubleshooting for days, I thought I'd ask for some help. Please take a look and let ...