Questions tagged [firewall]
Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.
354
questions
0
votes
0
answers
15
views
macOS 14.1.2 firewall blocking Colima from running
I have macOS 14.1.2 with the Firewall turned on, but not set to block all
Firewall is enabled. (State = 1)
Block all DISABLED!
Automatically allow signed built-in software ENABLED
Automatically allow ...
- 1
0
votes
0
answers
60
views
MacOS Ventura: How to permanently disable pftctl
I'm on MacOS Ventura on M1 Apple Silicon. Something keeps re-enabling pfctl that blocks my internet access roughly every 10 minutes. I'm no expert in macos or pfctl but after a bit of googling, I ...
0
votes
0
answers
60
views
Mac firewall blocking incoming connections to app even though it's allowed
I have 2 executables, a server and client. The server just listens on port 44888 for UDP packets and displays them. The client sends UDP packets to an address and port.
I determined that the Mac ...
0
votes
0
answers
29
views
Unablet to mount OpenBSD NFS share from MacOS unless I disable firewall
I have an OpenBSD server with NFS shares that I can use without any problem from a Linux client. On MacOS, I had to specify the following options -o nolocks,resvport,vers=3 to get the mount command to ...
- 101
0
votes
0
answers
49
views
Using little snitch on Cricut design space
I'm trying to stop Cricut Design Space constantly updating, it should run without internet access but recently there's been some changes and now it wants to connect all the time. I Just installed ...
- 1
1
vote
1
answer
143
views
.io .xyz and other less popular TLDs cannot be resolved
I bought a new MacBook Pro 2021 M1, and I can't access URLs ending with .io, .xyz, and other less popular TLDs.
The issue does not come from the browser. I tried many browsers and the terminal ...
- 81
0
votes
0
answers
57
views
UDP problems with virtual machine
I'm using an M1 Mac and I'm trying to run a Windows .exe file called 'simhub'. It uses UDP to allow telemetry between racing games (PS5) and a Windows computer. I don't have a Windows computer, so I'...
0
votes
0
answers
150
views
NAT rule redirection with Pfctl over VPN
I'm trying to configure a NAT redirection with Pfctl on my macOS (Ventura 13.2). I want to achieve a redirection for a specific IP and port to another IP (which is reachable through VPN) and the same ...
- 1
0
votes
0
answers
44
views
How to use `pfctl` to define a kill switch?
I use WireGuard, specifically wg-quick, to tunnel both my IPv4 and IPv6 traffic through a VPN server. However, I have noticed that my tunnel often leaks IPv6 traffic to my ISP after waking up from ...
- 161
1
vote
1
answer
261
views
"Ask for incoming connections" box will not stop appearing for an unknown application
I am getting frustrated with my computer. I have a Macbook Pro 2021, M1 chip running Ventura 13.3.1.
A dialog box keeps popping up, almost immediately disappearing, and then coming back, and quickly ...
- 21
3
votes
1
answer
447
views
After denying an app network permissions, how do I explicitly allow an application to listen on a network port?
I just reinstalled my Macbook (Ventura) and started my privoxy server for the first time. A box popped up asking me if I wanted to allow this application to listen on a network port, or something to ...
- 240
2
votes
0
answers
71
views
macOS Big Sur blocking gui internet access if certain connections to apple are denied, ping working
I have the following problem: I use Little Snitch to block just about any connection to apple (please no advice on how important it is to allow updates etc, I know what I'm doing and why ;) ). This ...
- 21
1
vote
1
answer
357
views
iptables like forwarding of packets with pfctl on mac os
I would like to build a bridge between two interfaces with pf, like with iptables:
sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --...
- 13
0
votes
0
answers
66
views
Can't open 2456-2458 firewall port on OSX
I've tried following this guide: https://www.lifewire.com/open-a-port-on-a-routers-or-computers-firewall-5072435
Here is what my /etc/pf.conf looks like:
I'm trying to let a docker image through my ...
1
vote
1
answer
247
views
Cannot deactivate Firewall Stealth Mode
Probably after last macOS upgrade I cannot deactivate Stealth Mode in Firewall options. Even if I deactivate it, after system restart it is active.
Is there any possibility to disable stealth mode ...
0
votes
1
answer
108
views
Can I use pf to route incoming incoming traffic on a specific port differently?
I have a mac that's connected to a VPN, where the VPN's gateway is the system's default gateway for all outgoing traffic. This means that I cannot connect to any services running on my mac from some ...
- 2,194
0
votes
0
answers
91
views
Opening TCP port 443 to specific domains?
I am trying to work remotely with a healthcare professional through Doxy.me, a URL that that they prefer for client calls (e.g., rather than Zoom, etc.). When I attempt to meet with them, everything ...
9
votes
1
answer
596
views
Warnings on SSH processes
It's been a while since I've needed to connect to a server via SSH. When I tried to connect today, Little Snitch gave me this warning:
The program "ssh" has been modified
Previously, the ...
- 193
0
votes
1
answer
157
views
Internet connection is disabled after updating the pf.conf file
I am trying to redirect traffic on all ports to my local server by editing the pf.conf file on MacBook.
pf.conf file content:
#
# Default PF configuration file.
#
# This file contains the main ruleset,...
- 3
0
votes
1
answer
107
views
Java application connection to the internet blocked when using a different WiFi
I am using dBeaver to connect to some databases that are at AWS.
From home this works fine, but when I connect to my mobile hotspot these databases time out when connecting.
First I assumed that these ...
2
votes
0
answers
583
views
Firewall keeps setting an incoming connection to allow for com.google.Chrome.helper despite being set to block
A few months ago, I made this post, asking why the allow or deny dialogue was appearing every time chrome was opened. Everyone stated that this only happens every time an app is opened if it's self ...
- 108
-1
votes
1
answer
508
views
Why is PF not working on M1?
I don't understand why PF does not work on M1. This problem is only on M1.
I tried turning firewall on/off.
PF successfully enabled without my code
/etc/pf.conf
scrub-anchor "com.apple/*"
...
- 15
0
votes
0
answers
145
views
macOS Monterey firewall off but cannot access port
I have a PostgreSQL database which is being deployed using docker, basically I'm exposing the port 5432 on my local machine, my firewall is turned off and I'm trying to log into the database from a ...
- 101
-2
votes
1
answer
637
views
Certain programs on Lulu app (Objective see) are not filtered
I am finding that certain apps (on Monterey) are not being filtered. These are native apple apps. Even if I disable network access, on reboot, it resets. When I deny access, it adds another deny rule. ...
- 101
0
votes
1
answer
237
views
has apple removed pflog from packetfilter?
FreeBSD includes pflog as a way to analyze pf logs. I dont see a /var/log/pflog. Has MacOS removed the pflog and /var/log/pflog?
Is it possible to enable this?
- 101
1
vote
1
answer
434
views
How can I allow ONLY iMessage (and not web browsing) through a firewall?
I've looked up what TCP ports iMessage uses to communicate with and Apple says:
80 (TCP)
443 (TCP)
5223 (TCP)
In my particular use-case, web browsing (80, 443) is not allowed. But we would like to ...
- 165
0
votes
0
answers
84
views
Firewall bug; socket programming
I am seeking a work-around for a bug in MacOS 12.4. I write C++ programs that create TCP/IP listening sockets. When I launch one of them, I see an error dialog containing language
Do you want the ...
- 91
1
vote
0
answers
30
views
What ports and protocols does the Apple "Protect Mail Activity" indirect asset loading feature require?
What are the ports used by the indirect asset loading feature of the Apple Mail app?
- 241
1
vote
0
answers
42
views
Incoming Network Connection alert does not dismiss
I develop web applications and often get the Firewall alert on a new version of my code:
This is OK (although I would prefer to just answer one and be done with it). The problem is that selecting ...
- 614
2
votes
1
answer
800
views
Port forwarding
I would like to intercept the tcp traffic from a device on my network. I cannot change the destination but I set the router IP to the IP of my M1 Mac Mini.
I used to do this with ipfw on a virtual ...
- 31
0
votes
1
answer
228
views
I accidentally clicked deny on port open prompt
I'm developing an app that binds to a local address, on a random port when it runs. I used to get a prompt to allow connections but I accidentally pressed Enter key and I think I denied the terminal ...
- 169
6
votes
0
answers
2k
views
Getting asked if I want to allow or deny incoming connections on the google chrome helper app every time I launch chrome
I have clicked deny everytime, and I have checked that the firewall rule states block. Yet it keeps appearing. I realize at this point that I am actually unsure what this dialog window is asking. ie ...
- 108
2
votes
1
answer
1k
views
Apply outgoing firewall rules per app selectively (MacOS Big Sur)
Question:
Which firewall can selectively apply multiple named domain resolving rules per app? E.g. like the One Periodic's Hands Off firewall
Details:
I'm looking for an app or combination of apps ...
- 197
1
vote
1
answer
2k
views
pf.conf configuration?
I've been a Windows user for 35+ years and I'm new to Macintosh.
I would like to configure PF firewall to block the ports below, incoming and outgoing on all interfaces.
What commands do I need to use ...
0
votes
0
answers
2k
views
How to open a port on MacOS Big Sur?
I am trying to open a specific port (8000) on my Mac (macOS 11.6) for local web development testing.
Let’s say my computer’s NAT IP is 192.168.1.10. If I go to 192.168.1.10:8000, I get nothing. nmap ...
- 1,116
0
votes
1
answer
5k
views
What are "netbiosd" and "rapportd"? Why are they asking for incoming network connections? [duplicate]
I was asked to allow/block netbiosd & rapportd, but I do not know what they are, so I block both of them. What are they, and blocking them is okay?
- 113
1
vote
0
answers
425
views
Remote sharing doesn't work even after allowing config in Firewall
I've allowed remote sharing in the Firewall
And enabled remote sharing and remote login.
I have Observe and Control enabled from the options dialog in Remote sharing.
But remote sharing works only ...
- 221
2
votes
1
answer
493
views
Can I compile and locally run SimpleFirewall example app without enrolling with apple developer program?
I was curious about writing my own simple application firewall.
After going through several tutorials I've downloaded SimpleFirewall example app available at: https://developer.apple.com/documentation/...
- 133
4
votes
2
answers
3k
views
MacOS Firewall: Program grayed out, can't be added to Firewall Options
In MacOS Monterey (12.0.1), I am running Python 2.7 from an Anaconda virtual environment.
Each time I run the Python script, I am asked if I want to accept incoming network connections:
I have tried ...
- 9,484
1
vote
0
answers
136
views
Modifying tcp packets going out on a specific port
I am newbie with pf. I want to modify all outgoing TCP traffic having destination port 8001. For that, firstly, I wanted to use pf to redirect all the TCP traffic at en0 with destination port 8001 to ...
- 11
0
votes
2
answers
972
views
MacBook blocks all incoming connections, even when firewall is turned off
I moved to a new MacBook (High Sierra initially and BigSur now) and all incoming network connections are blocked on the new MacBook (restored from the backup couple of weeks ago). On an old one ...
- 133
2
votes
0
answers
198
views
Monitor VM network with Little Snitch
I've upgraded to Big Sur (yep, late to the party), VM Ware Fusion 12 and Little Snitch 5.
I get that kernel extension are no longer valid and VM Ware now uses the Apple network API.
Previously I could ...
- 1,027
-1
votes
1
answer
290
views
Hybrid-Analysis.com indicates macOS built-in file is contacting a malicious website
I'm wondering if anyone knows why this
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc
is connecting to adriver.ru ?
This is according ...
- 191
1
vote
2
answers
683
views
How to dynamically add anchors on startup for apple pfctl without editing system pf.conf
There are a few answers on using pfctl on os x, but none really give a nice clean way to make an anchor and have it loaded on startup, or to allow programs to hook in and dynamically update / replace ...
- 11
1
vote
0
answers
306
views
How to make XQuartz listen to port 6000?
I have installed XQuartz 2.8.1 onto macOS Catalina 10.15.4. Now I can use
ssh -X myremotehost
and do
xcalc &
there.
But the -X option appears to work too slow. I am using a LAN and would like to ...
- 276
3
votes
2
answers
15k
views
MacOS Firewall: Best practice to Allow or Block "Incoming connections" for applications?
A relatively large number of my Mac applications causes the MacOS Firewall to ask whether to allow or block "Incoming connections" (System Preferences > Firewall > Firewall Options).
...
- 9,484
1
vote
0
answers
355
views
How can I stop the macOS firewall from blocking Django server (Python)?
For several years I have been regularly using Python's Django framework and running its web server for development purposes on my local machine. I took a break over the past year and am now returning ...
- 113
0
votes
2
answers
2k
views
Macbook Pro doesn't accept any incoming connections - Firewall disabled!
My MacBook Pro running macOS Big Sur 11.3.1 doesn't respond to Ping, SSH, and Remote Access.
What I tried so far:
Made sure "stealth mode" was disabled on Firewall
Disabled the Firewall ...
- 101
2
votes
2
answers
1k
views
Traffic of different Apps in Little Snitch with enabled VPN? What is the meaning?
So, I am trying to understand my VPN connection observing the traffic in Little Snitch. My VPN is connected and I can see its connection to the server and the amount of data that is transfered. ...
- 29
1
vote
1
answer
120
views
How to get rid of firewall asking when developing a program?
When you develop a program you compile a web server as an executable server.
When you run it the firewall would ask "Do you want the application 'server' to accept incoming network connections?&...
- 301