Questions tagged [firewall]
Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.
359 questions
0
votes
1
answer
250
views
Cannot connect to mosh(-server), getting error "mosh: Nothing received from server on UDP port 60000"
I'm struggling with getting brew-installed mosh-server to work on my new M2 Mac Mini. The issue is that macOS seems to block the incoming UDP connection from the client:
mosh: Nothing received from ...
- 432
0
votes
0
answers
33
views
Changing incoming packet TTL on MacOS
Is there a way to change the incoming packet TTL on MacOS? It appears using pfctl, but I cannot seem to figure out the syntax. From reading the docs, something like reassemble tcp reassemble-tcp ttl ...
0
votes
1
answer
45
views
How can I manage to allow only one application in MacOS Sonoma to access the internet
in a short while I will be reliant on a direct Iridium satellite connection only in order to get weather data.
The grib files are the only data I will process on my Macbook.
Now I know that usually ...
- 257
0
votes
1
answer
137
views
Approve little snitch (alert mode) popup via SSH
Is it possible to approve a new little-snitch (alert mode) popup remotely to unblock the suspended process ?
In detail:
I have an SSH / VPN from, from my iPad to the Mac. The mac is home, not ...
- 1
0
votes
0
answers
40
views
Question about changing macOS Firewall option
I have installed Apache Web Server into one of my Mac. And then, I've been publishing this WebServer to inter-net. I'm also using OS built-in Firewall, and allow httpd to external connection.
I ...
- 262
2
votes
2
answers
261
views
Disable Firewall Notifications
I am developing some software as part of a research project, and am running into an annoying issue with the Mac firewall. Our system architecture involves running multiple concurrent processes which ...
- 201
1
vote
0
answers
191
views
MacOS Firewall blocks webserver and logging wont work
Currently I wrote a small game webapp. The server is running on my MacBook Air M1 Sonoma 14.3 and listening on 0.0.0.0:8080. I want to connect to it within my local network from my iPhone.
This works ...
- 11
0
votes
0
answers
45
views
Using SOCKS and system Firewall blocks IMAP/SMTP
When I use the internal service of my university, I need to be inside the university network. So I have been using the SOCKS proxy and an SSH login server of my university for many years when I am out ...
1
vote
0
answers
71
views
How do I reliably expose MacPorts dovecot to the LAN?
I am currently making an attempt to run various ports on macOS Sonoma (mail server stuff, like postfix, dovecot, installed by MacPorts) and I am running into a problem.
From inside the machine itself, ...
- 754
0
votes
0
answers
86
views
How can I change destination domain in macOS Sonoma?
for example, whenever an console command like git clone https://github.com/... or wget https://github.com/... which makes a remote call to github.com, change the actual call to an other domain like ...
- 101
2
votes
0
answers
154
views
Allow Steam game to accept incoming connections Mac
So I am not really familiar with Mac, as I usually use Windows. I want to connect two instances of Stardew Valley (installed over Steam) using the LAN option.
host computer uses macOS 13.6.3
joining ...
- 121
2
votes
0
answers
300
views
macOS 14.1.2 firewall blocking Colima from running
I have macOS 14.1.2 with the Firewall turned on, but not set to block all
Firewall is enabled. (State = 1)
Block all DISABLED!
Automatically allow signed built-in software ENABLED
Automatically allow ...
- 21
0
votes
0
answers
203
views
MacOS Ventura: How to permanently disable pftctl
I'm on MacOS Ventura on M1 Apple Silicon. Something keeps re-enabling pfctl that blocks my internet access roughly every 10 minutes. I'm no expert in macos or pfctl but after a bit of googling, I ...
0
votes
0
answers
244
views
Mac firewall blocking incoming connections to app even though it's allowed
I have 2 executables, a server and client. The server just listens on port 44888 for UDP packets and displays them. The client sends UDP packets to an address and port.
I determined that the Mac ...
0
votes
0
answers
64
views
Using little snitch on Cricut design space
I'm trying to stop Cricut Design Space constantly updating, it should run without internet access but recently there's been some changes and now it wants to connect all the time. I Just installed ...
- 1
1
vote
1
answer
223
views
.io .xyz and other less popular TLDs cannot be resolved
I bought a new MacBook Pro 2021 M1, and I can't access URLs ending with .io, .xyz, and other less popular TLDs.
The issue does not come from the browser. I tried many browsers and the terminal ...
- 91
1
vote
1
answer
670
views
"Ask for incoming connections" box will not stop appearing for an unknown application
I am getting frustrated with my computer. I have a Macbook Pro 2021, M1 chip running Ventura 13.3.1.
A dialog box keeps popping up, almost immediately disappearing, and then coming back, and quickly ...
- 21
3
votes
1
answer
4k
views
After denying an app network permissions, how do I explicitly allow an application to listen on a network port?
I just reinstalled my Macbook (Ventura) and started my privoxy server for the first time. A box popped up asking me if I wanted to allow this application to listen on a network port, or something to ...
- 250
2
votes
0
answers
105
views
macOS Big Sur blocking gui internet access if certain connections to apple are denied, ping working
I have the following problem: I use Little Snitch to block just about any connection to apple (please no advice on how important it is to allow updates etc, I know what I'm doing and why ;) ). This ...
- 21
1
vote
1
answer
1k
views
iptables like forwarding of packets with pfctl on mac os
I would like to build a bridge between two interfaces with pf, like with iptables:
sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE
sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --...
- 13
1
vote
1
answer
445
views
Cannot deactivate Firewall Stealth Mode
Probably after last macOS upgrade I cannot deactivate Stealth Mode in Firewall options. Even if I deactivate it, after system restart it is active.
Is there any possibility to disable stealth mode ...
0
votes
1
answer
199
views
Can I use pf to route incoming incoming traffic on a specific port differently?
I have a mac that's connected to a VPN, where the VPN's gateway is the system's default gateway for all outgoing traffic. This means that I cannot connect to any services running on my mac from some ...
- 2,760
0
votes
0
answers
213
views
Opening TCP port 443 to specific domains?
I am trying to work remotely with a healthcare professional through Doxy.me, a URL that that they prefer for client calls (e.g., rather than Zoom, etc.). When I attempt to meet with them, everything ...
0
votes
1
answer
228
views
Internet connection is disabled after updating the pf.conf file
I am trying to redirect traffic on all ports to my local server by editing the pf.conf file on MacBook.
pf.conf file content:
#
# Default PF configuration file.
#
# This file contains the main ruleset,...
- 3
0
votes
1
answer
245
views
Java application connection to the internet blocked when using a different WiFi
I am using dBeaver to connect to some databases that are at AWS.
From home this works fine, but when I connect to my mobile hotspot these databases time out when connecting.
First I assumed that these ...
2
votes
0
answers
712
views
Firewall keeps setting an incoming connection to allow for com.google.Chrome.helper despite being set to block
A few months ago, I made this post, asking why the allow or deny dialogue was appearing every time chrome was opened. Everyone stated that this only happens every time an app is opened if it's self ...
- 118
-1
votes
1
answer
817
views
Why is PF not working on M1?
I don't understand why PF does not work on M1. This problem is only on M1.
I tried turning firewall on/off.
PF successfully enabled without my code
/etc/pf.conf
scrub-anchor "com.apple/*"
...
- 15
0
votes
0
answers
216
views
macOS Monterey firewall off but cannot access port
I have a PostgreSQL database which is being deployed using docker, basically I'm exposing the port 5432 on my local machine, my firewall is turned off and I'm trying to log into the database from a ...
- 101
-1
votes
1
answer
936
views
Certain programs on Lulu app (Objective see) are not filtered
I am finding that certain apps (on Monterey) are not being filtered. These are native apple apps. Even if I disable network access, on reboot, it resets. When I deny access, it adds another deny rule. ...
- 161
0
votes
1
answer
396
views
has apple removed pflog from packetfilter?
FreeBSD includes pflog as a way to analyze pf logs. I dont see a /var/log/pflog. Has MacOS removed the pflog and /var/log/pflog?
Is it possible to enable this?
- 161
1
vote
1
answer
660
views
How can I allow ONLY iMessage (and not web browsing) through a firewall?
I've looked up what TCP ports iMessage uses to communicate with and Apple says:
80 (TCP)
443 (TCP)
5223 (TCP)
In my particular use-case, web browsing (80, 443) is not allowed. But we would like to ...
- 165
0
votes
0
answers
114
views
Firewall bug; socket programming
I am seeking a work-around for a bug in MacOS 12.4. I write C++ programs that create TCP/IP listening sockets. When I launch one of them, I see an error dialog containing language
Do you want the ...
- 81
1
vote
0
answers
34
views
What ports and protocols does the Apple "Protect Mail Activity" indirect asset loading feature require?
What are the ports used by the indirect asset loading feature of the Apple Mail app?
- 251
1
vote
0
answers
47
views
Incoming Network Connection alert does not dismiss
I develop web applications and often get the Firewall alert on a new version of my code:
This is OK (although I would prefer to just answer one and be done with it). The problem is that selecting ...
- 622
2
votes
1
answer
1k
views
Port forwarding
I would like to intercept the tcp traffic from a device on my network. I cannot change the destination but I set the router IP to the IP of my M1 Mac Mini.
I used to do this with ipfw on a virtual ...
- 31
0
votes
1
answer
341
views
I accidentally clicked deny on port open prompt
I'm developing an app that binds to a local address, on a random port when it runs. I used to get a prompt to allow connections but I accidentally pressed Enter key and I think I denied the terminal ...
- 169
6
votes
0
answers
3k
views
Getting asked if I want to allow or deny incoming connections on the google chrome helper app every time I launch chrome
I have clicked deny everytime, and I have checked that the firewall rule states block. Yet it keeps appearing. I realize at this point that I am actually unsure what this dialog window is asking. ie ...
- 118
2
votes
1
answer
3k
views
Apply outgoing firewall rules per app selectively (MacOS Big Sur)
Question:
Which firewall can selectively apply multiple named domain resolving rules per app? E.g. like the One Periodic's Hands Off firewall
Details:
I'm looking for an app or combination of apps ...
- 317
1
vote
1
answer
3k
views
pf.conf configuration?
I've been a Windows user for 35+ years and I'm new to Macintosh.
I would like to configure PF firewall to block the ports below, incoming and outgoing on all interfaces.
What commands do I need to use ...
2
votes
1
answer
3k
views
How to diagnose firewall issues when I open a port locally on MacOS Big Sur?
I have a specific port (8000) open on my Mac (macOS 11.6) for local web development testing. The networking isn’t set up for all machines on my subnet to see this port so I need help with networking ...
- 1,146
0
votes
1
answer
7k
views
What are "netbiosd" and "rapportd"? Why are they asking for incoming network connections? [duplicate]
I was asked to allow/block netbiosd & rapportd, but I do not know what they are, so I block both of them. What are they, and blocking them is okay?
- 113
1
vote
0
answers
546
views
Remote sharing doesn't work even after allowing config in Firewall
I've allowed remote sharing in the Firewall
And enabled remote sharing and remote login.
I have Observe and Control enabled from the options dialog in Remote sharing.
But remote sharing works only ...
- 221
2
votes
1
answer
648
views
Can I compile and locally run SimpleFirewall example app without enrolling with apple developer program?
I was curious about writing my own simple application firewall.
After going through several tutorials I've downloaded SimpleFirewall example app available at: https://developer.apple.com/documentation/...
- 133
5
votes
2
answers
3k
views
MacOS Firewall: Program grayed out, can't be added to Firewall Options
In MacOS Monterey (12.0.1), I am running Python 2.7 from an Anaconda virtual environment.
Each time I run the Python script, I am asked if I want to accept incoming network connections:
I have tried ...
- 10.1k
1
vote
0
answers
171
views
Modifying tcp packets going out on a specific port
I am newbie with pf. I want to modify all outgoing TCP traffic having destination port 8001. For that, firstly, I wanted to use pf to redirect all the TCP traffic at en0 with destination port 8001 to ...
- 11
0
votes
2
answers
2k
views
MacBook blocks all incoming connections, even when firewall is turned off
I moved to a new MacBook (High Sierra initially and BigSur now) and all incoming network connections are blocked on the new MacBook (restored from the backup couple of weeks ago). On an old one ...
- 133
2
votes
0
answers
299
views
Monitor VM network with Little Snitch
I've upgraded to Big Sur (yep, late to the party), VM Ware Fusion 12 and Little Snitch 5.
I get that kernel extension are no longer valid and VM Ware now uses the Apple network API.
Previously I could ...
- 1,057
-1
votes
1
answer
316
views
Hybrid-Analysis.com indicates macOS built-in file is contacting a malicious website
I'm wondering if anyone knows why this
/System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc
is connecting to adriver.ru ?
This is according ...
- 193
1
vote
2
answers
874
views
How to dynamically add anchors on startup for apple pfctl without editing system pf.conf
There are a few answers on using pfctl on os x, but none really give a nice clean way to make an anchor and have it loaded on startup, or to allow programs to hook in and dynamically update / replace ...
- 11
1
vote
0
answers
409
views
How to make XQuartz listen to port 6000?
I have installed XQuartz 2.8.1 onto macOS Catalina 10.15.4. Now I can use
ssh -X myremotehost
and do
xcalc &
there.
But the -X option appears to work too slow. I am using a LAN and would like to ...
- 296