Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

Filter by
Sorted by
Tagged with
0
votes
1answer
17 views

How can I force all traffic for a single app through VPN / Proxy + Open Source? aka App Firewall?

I'm looking for an app that is fully Open Source OR built-in to MacOS as I am trying to use this for security / privacy (to ensure that particular apps cannot make arbitrary connections) I have ...
0
votes
0answers
18 views

How can I connect immediately to VPN after sleep when using PF permanent kill switch?

I have a secure VPN setup that uses macOS’ low-level PF firewall as a permanent kill switch. See https://medium.com/@sunknudsen/setting-up-your-very-own-macos-kernel-level-ikev2-ipsec-vpn-kill-switch-...
0
votes
0answers
26 views

Opening ports on MacOS X High Serra

Ok so I am having a time trying to get this to work. I have a program that needs to push to another program on port 8080. However I can't seem to get that port to respond. I have checked my router (...
1
vote
1answer
29 views

What Firewall settings needs to be enabled for Airdrop?

Which option in the built-in firewall in System Preferences needs to be enabled to allow AirDrop to receive files on a Mac? The Mac can currently see iPhone's and other devices in Airdrop, but does ...
3
votes
3answers
73 views

PF set condition for not equal to a list of ports for MacOS

I'd like to set a condition so that a firewall rule will not apply to a list of ports, something along the lines of this: table <my_table> persist file "/etc/pf.anchors/entries" set skip on ...
5
votes
1answer
52 views

SSH daemon listens on both IPv4 and IPv6, but I can connect only over v6

Ok, maybe I'm weird or something, but I can't figure this one out. MacOS Mojave, native IPv6 from my ISP. As you can see, sshd is listening on both v4 and v6: alluminium:~ root# netstat -an | grep ...
0
votes
1answer
22 views

Do packets routed to another interface using `pf`'s `route-to` option on macOS actually pass the given interface?

Do packets routed to another interface using pf's route-to option on macOS actually pass the given interface? I've read that pf's firewall rules only applies to packets that (physically) pass the ...
1
vote
2answers
33 views

Why can't I create new network connections after enabling PF with a simple custom ruleset using `pfctl -f`?

Why can't I create new network connections after enabling PF with a simple custom ruleset using pfctl -f? I'm reading the official FAQ tutorial for OpenBSD's PF firewall, also used in macOS. I've a ...
0
votes
1answer
35 views

Can't access localhost server after pf redirect

After adding some pf rules to redirect certain egress traffic to a localhost server, I can't access that localhost server directly. I can access it through the redirect just fine though. I basically ...
3
votes
2answers
619 views

Figuring out what is blocking HTTP request on macOS Mojave?

I have a simple http-server running with an index.html, which I'm trying to serve over to another device over LAN. I can access the website in the host computer using localhost and it is recorded as a ...
3
votes
1answer
69 views

pf redirect rules don't work logging

TL;DR: On Mojave (haven't tested on others), when creating rdr rules in pf, the rules work for a while (with some issues accessing the target port directly), but after a while the rules stop working, ...
1
vote
1answer
66 views

Where can i find the source code for the pfctl utility?

I have looked here: https://github.com/apple/darwin-xnu But all i can find is the 'back end' for the pfctl tool, but i am interested in the command-line pfctl tool itself, the option parser and so on....
0
votes
0answers
19 views

Program mouse and keyboard movements to be run with input on Mac

This is a very specific question. I'm running a gaming server for my friends and I to play on (on my old iMac that I just use as an external monitor for my MacBook Pro now), and I have a firewall in ...
2
votes
1answer
176 views

Mac OS X firewall rules to block UDP connection to an external server

Can anybody help to recommand a firewall app for Mac OS X? I'm going to block UDP connection to an external server, and then I need to check whether it switch to TCP connection to the server ...
0
votes
1answer
72 views

How to route traffic out a non-standard interface using pfctl?

I have a VPN which has setup a default route, which is (of course) different to my gateway. All my traffic therefore gets routed through the tunnel. however i would like to exempt certain apps from ...
0
votes
0answers
28 views

Any way to block a specific HTTPS request from a specific application?

There's an app running on my mac (macOS 10.12.6) that occasionally makes an HTTPS request to a resource at a specific URL. I'd like to block this request, but allow all other requests from this ...
0
votes
2answers
170 views

PF Firewall : Every time I use `pfctl`, I get errors about ALTQ support

I have a slightly elaborate firewall setup where my server usually has between 400 and 800 ip addresses firewalled. It switches back and forth between two different pf tables. Every day it rebuilds ...
2
votes
0answers
35 views

macOS: Restricted admin account

Is it possible to create an admin account which will allow you to install programs, but not to force install programs that are not verified? In other words, an account that can do anything accept ...
1
vote
1answer
366 views

Routing localhost traffic to external IP address

I have a host with Mac OS and another machine (192.168.100.50) in the same LAN. I would like to configure Mac OS in that way if I access localhost:443 it will redirect to 192.168.100.50:443. I'm able ...
1
vote
1answer
45 views

Enable packet filter firewall (pfctl -Ef) temporarily stops all network connection

I've noticed that when re-setting my firewall with a new set of rules, all network communication completely stops for a short time, until it regains with the new set of rules. In fact, it also ...
0
votes
1answer
332 views

Can I Open Port 443 on my MacMini without using the Server App?

I'm using an AT&T router where I have port 443 open. I did a port scan and it does not show 443 open. I have the firewall open with all the default options listed that Allow incoming connections. ...
1
vote
0answers
167 views

How to block TCP connections from unidentified IP addresses mac

I started up a private minecraft server for my friend and I, and that required me to use generic TCP forwarding in order to open it up to accept his IP address. I used this program called serveo.io ...
0
votes
0answers
18 views

Firewall off by default, and when I turn it on it doesn't block connections

Yesterday, I had to get a PHP app running locally on my brand new, plain-vanilla Mac Mini. I was disturbed (to put it mildly) to discover that Apache was already installed, and running, and serving ...
2
votes
1answer
1k views

How to configure MacOS firewall to block outgoing IP ranges?

Recently I was watching a Gizmodo journalist's videos about her experiment with blocking outgoing connections to Google, FB, Microsoft and Apple. I wonder if it is possible to modify MacOS's built in ...
0
votes
0answers
248 views

`pf` - No ALTQ support in kernel - ALTQ related functions disabled [duplicate]

I'm using pf on my server, and it's working great. So much easier to use than ipfw (after some initial config confusion). But there is one thing that is driving me nuts.... I'm sure you probably ...
0
votes
0answers
1k views

PF Firewall on macOS Mojave - Block outbound rule not working (blocking Plex SSDP/UDP broadcast)

All, I'm new to pf please forgive my ignorance in advance. I'm attempting to block an SSDP/UDP Broadcast from my Plex Server on a Mac Mini to the LAN. The Mac Mini is on internal IP address 192.168.2....
1
vote
2answers
552 views

How to block everything except my connection to the VPN?

I'm trying to make Murus block everything, except my connection to the VPN server. I don't want my Mac to make any outbound calls to any ports unless via the VPN connection. I'm trying to add a rule ...
1
vote
1answer
33 views

Blocked websites on macOS host but not on Win7 virtual machine

In China there in the Great Firewall which blocks i.e. youtube. Fortunately in my university in China someway they provide access to youtube, so students can use youtube by means of campus wifi. I ...
1
vote
1answer
88 views

Several applications trying to connect to IP

I have several applications on my computer which are attempting to connect to a small hand-full of IPs over port 80(http). This seems suspect to me and I'm not sure how to proceed. Currently I am ...
2
votes
1answer
303 views

How to unblock an application with socketfilterfw?

I am compiling a software from scratch and running its tests. I do this often. The tests open ports and expect connections. Whenever I run the tests, I get the Do you want the application “run-...
2
votes
0answers
208 views

How to prevent “Do you want the application foo to block incoming connections?” popup from command line

As a developer, I run a testsuite of some self-compiled binaries which try to listen on some ports on startup. This causes a barrage of popups "Do you want the application foo to block incoming ...
1
vote
1answer
244 views

use `pf` to allow TCP traffic on specific port (from specific subnet)

So, I've read various posts about how to use both the Application Firewall (apf or socketfilterfw) and the Packet Filter (pf) at the same time. I thought this would be straightfoward since I'm not a ...
-3
votes
1answer
302 views

Who is trying to use the Stealth Mode as reported in Console

I found following in my Console on MBA 10.13 Stealth Mode connection attempt to UDP 192.168.0.12:52734 from 8.8.8.8:53 Stealth Mode connection attempt to UDP 192.168.0.12:57880 from 8.8.8.8:53 ...
2
votes
0answers
21 views

Getting notification when firewall settings have changed

I'm using packet filter engine to setup my Firewall connection. However, there might be other entities that may override my firewall settings on the same way (processes running with 'root' privileges ...
3
votes
2answers
2k views

Mojave install crashes after power on login

I have a mid 2012 MBA (4GB ram, 128GB SSD) that I have upgraded from High Sierra to Mojave 10.14. the upgrade finished successfully. When I power on I am presented with the initial logon screen, and ...
0
votes
0answers
107 views

Passing L2TP over IPSec VPN through a `pf` Firewall

I am trying to set up some custom firewall rules in the pf firewall in macOS (10.11 in this case). These are traditional network-based rules, not application-specific rules. I'm having some issues: ...
1
vote
1answer
101 views

How can I reconfigure my PF.conf to be more secure

I want to make my computer more secure and a part of it I want to do with reconfiguring my PF firewall. How can I reconfigure my PF.conf to be more secure? I made a github repo where I posted my ...
1
vote
0answers
302 views

How can I block all ports with PF except port 80 and 443?

How can I block/close (or drop all the packets coming from) all ports with PF except TCP port 80 and TCP 443? So I only want to make use of port 80 and 443 via TCP. I tried this, but I receive an ...
0
votes
2answers
427 views

Firewall on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n

The firewall is on. I blocked IP 93.184.220.29 with PF but it still popsup in netstat -n. How is that possible? jen:~ jen$ sudo pfctl -t blockedips -T show Password: No ALTQ support in kernel ALTQ ...
1
vote
0answers
50 views

How do I unblock vm from firewall?

How do I accept anything from my virtual machine (named vagrant). Tried to add this row in the /etc/pf.conf: pass in from 192.168.10.11 to 192.168.10.1 where .11 is the vm and the .1 is the host. ...
1
vote
1answer
364 views

Is the firewall really pfctl, or another instance of pfctl?

I was mucking around with pfctl a while back, didn't get very far and forgot about it. Yesterday, I couldn't ssh into a remote machine. I disabled the firewall in system preferences but still had the ...
2
votes
1answer
633 views

pfctl to add rules at runtime WITHOUT editing /etc/pf.conf?

I have an app that (while it is running and only while it is running) needs to make changes to the packet filter (pf) so that it blocks or allows certain traffic. These rules should be in addition to ...
2
votes
0answers
476 views

Blocking Incoming Connections to Open Port Daemons

OS: macOS 10.13.5 High Sierra; HW: Mid-2010 MacBookPro7,1 13” 2.66GHz Core 2 Duo I am interested in blocking incoming connections to Apple’s two persistent daemons with internet-facing open ports—...
1
vote
1answer
89 views

FTP Issues on MacOS, can't write on the disk

I'm developing a website for a client, but some space of the server we will be used to transfer large files of softwares like Maya Autodesk (my client working with 3D modeling). I'm trying to ...
4
votes
1answer
200 views

How to allow the “Word of the Day” screen saver to fetch the words with LittleSnitch?

A friend of mine (not on StackEchange) has used LittleSnitch to explicitly disallow Internet access for every process/app that attempted to access the Internet except the ones he actually needs to do ...
3
votes
0answers
78 views

How do I prevent Apple Remote Desktop broadcasting over a specific network interface?

I have two active network interfaces on my machine connected to two different subnets. I run Apple Remote Desktop Admin to administer hosts on only one of the two subnets. How do I restrict Apple ...
1
vote
1answer
430 views

pf.conf to block *only* a specific IP address when VPN is not connected

I'm trying to configure a packet filter firewall to block access to a small range of IP addresses when a VPN is not connected. My rules should allow https/http traffic apart from this small, specific ...
3
votes
1answer
18k views

Apple USB Ethernet Adapter has a self-assigned IP address and will not be able to connect to the Internet

Cannot connect MacBook Pro (Retina, 15-inch, Mid 2015) (10.13.3) to the internet through my Apple USB Ethernet Adapter. I am receiving this error under System Preferences/Network: "Apple USB Ethernet ...
2
votes
0answers
757 views

Captive portal on MacOS

I want to implement a basic captive portal. For the test setup, I have a mac mini connect to wifi (192.168.1.1) and ubuntu laptop connected to it via lan. What I am trying to achieve is for the the ...
2
votes
1answer
837 views

OS X Firewall blocking external connections to NGinx Docker container

I have an Docker container running NGinx on a macOS High Sierra machine behind a corporate firewall that cannot be disabled. The container is unable to be accessed externally from other machines on ...