Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

Filter by
Sorted by
Tagged with
0 votes
0 answers
10 views

macOS 14.1.2 firewall blocking Colima from running

I have macOS 14.1.2 with the Firewall turned on, but not set to block all Firewall is enabled. (State = 1) Block all DISABLED! Automatically allow signed built-in software ENABLED Automatically allow ...
NHunter's user avatar
0 votes
0 answers
59 views

MacOS Ventura: How to permanently disable pftctl

I'm on MacOS Ventura on M1 Apple Silicon. Something keeps re-enabling pfctl that blocks my internet access roughly every 10 minutes. I'm no expert in macos or pfctl but after a bit of googling, I ...
CybaTronX's user avatar
0 votes
0 answers
60 views

Mac firewall blocking incoming connections to app even though it's allowed

I have 2 executables, a server and client. The server just listens on port 44888 for UDP packets and displays them. The client sends UDP packets to an address and port. I determined that the Mac ...
Grant Upson's user avatar
0 votes
0 answers
27 views

Unablet to mount OpenBSD NFS share from MacOS unless I disable firewall

I have an OpenBSD server with NFS shares that I can use without any problem from a Linux client. On MacOS, I had to specify the following options -o nolocks,resvport,vers=3 to get the mount command to ...
dwrz's user avatar
  • 101
0 votes
0 answers
49 views

Using little snitch on Cricut design space

I'm trying to stop Cricut Design Space constantly updating, it should run without internet access but recently there's been some changes and now it wants to connect all the time. I Just installed ...
A.Art's user avatar
  • 1
1 vote
1 answer
143 views

.io .xyz and other less popular TLDs cannot be resolved

I bought a new MacBook Pro 2021 M1, and I can't access URLs ending with .io, .xyz, and other less popular TLDs. The issue does not come from the browser. I tried many browsers and the terminal ...
BonisTech's user avatar
0 votes
0 answers
57 views

UDP problems with virtual machine

I'm using an M1 Mac and I'm trying to run a Windows .exe file called 'simhub'. It uses UDP to allow telemetry between racing games (PS5) and a Windows computer. I don't have a Windows computer, so I'...
Cian Gopal's user avatar
0 votes
0 answers
149 views

NAT rule redirection with Pfctl over VPN

I'm trying to configure a NAT redirection with Pfctl on my macOS (Ventura 13.2). I want to achieve a redirection for a specific IP and port to another IP (which is reachable through VPN) and the same ...
Siraxis's user avatar
0 votes
0 answers
44 views

How to use `pfctl` to define a kill switch?

I use WireGuard, specifically wg-quick, to tunnel both my IPv4 and IPv6 traffic through a VPN server. However, I have noticed that my tunnel often leaks IPv6 traffic to my ISP after waking up from ...
Matt's user avatar
  • 161
1 vote
1 answer
261 views

"Ask for incoming connections" box will not stop appearing for an unknown application

I am getting frustrated with my computer. I have a Macbook Pro 2021, M1 chip running Ventura 13.3.1. A dialog box keeps popping up, almost immediately disappearing, and then coming back, and quickly ...
hotdog101's user avatar
3 votes
1 answer
443 views

After denying an app network permissions, how do I explicitly allow an application to listen on a network port?

I just reinstalled my Macbook (Ventura) and started my privoxy server for the first time. A box popped up asking me if I wanted to allow this application to listen on a network port, or something to ...
Hubro's user avatar
  • 240
2 votes
0 answers
71 views

macOS Big Sur blocking gui internet access if certain connections to apple are denied, ping working

I have the following problem: I use Little Snitch to block just about any connection to apple (please no advice on how important it is to allow updates etc, I know what I'm doing and why ;) ). This ...
co-der-in's user avatar
1 vote
1 answer
353 views

iptables like forwarding of packets with pfctl on mac os

I would like to build a bridge between two interfaces with pf, like with iptables: sudo iptables -t nat -A POSTROUTING -o eth0 -j MASQUERADE sudo iptables -A FORWARD -i eth0 -o wlan0 -m state --...
ptiza_v_nebe's user avatar
0 votes
0 answers
66 views

Can't open 2456-2458 firewall port on OSX

I've tried following this guide: https://www.lifewire.com/open-a-port-on-a-routers-or-computers-firewall-5072435 Here is what my /etc/pf.conf looks like: I'm trying to let a docker image through my ...
cmcoppoletti's user avatar
1 vote
1 answer
247 views

Cannot deactivate Firewall Stealth Mode

Probably after last macOS upgrade I cannot deactivate Stealth Mode in Firewall options. Even if I deactivate it, after system restart it is active. Is there any possibility to disable stealth mode ...
Łukasz Rzeszotarski's user avatar
0 votes
1 answer
107 views

Can I use pf to route incoming incoming traffic on a specific port differently?

I have a mac that's connected to a VPN, where the VPN's gateway is the system's default gateway for all outgoing traffic. This means that I cannot connect to any services running on my mac from some ...
Bri Bri's user avatar
  • 2,194
0 votes
0 answers
91 views

Opening TCP port 443 to specific domains?

I am trying to work remotely with a healthcare professional through Doxy.me, a URL that that they prefer for client calls (e.g., rather than Zoom, etc.). When I attempt to meet with them, everything ...
BobsMyUncle's user avatar
9 votes
1 answer
595 views

Warnings on SSH processes

It's been a while since I've needed to connect to a server via SSH. When I tried to connect today, Little Snitch gave me this warning: The program "ssh" has been modified Previously, the ...
thingEvery's user avatar
0 votes
1 answer
157 views

Internet connection is disabled after updating the pf.conf file

I am trying to redirect traffic on all ports to my local server by editing the pf.conf file on MacBook. pf.conf file content: # # Default PF configuration file. # # This file contains the main ruleset,...
1n4ho12's user avatar
0 votes
1 answer
106 views

Java application connection to the internet blocked when using a different WiFi

I am using dBeaver to connect to some databases that are at AWS. From home this works fine, but when I connect to my mobile hotspot these databases time out when connecting. First I assumed that these ...
Martijn Burger's user avatar
2 votes
0 answers
582 views

Firewall keeps setting an incoming connection to allow for com.google.Chrome.helper despite being set to block

A few months ago, I made this post, asking why the allow or deny dialogue was appearing every time chrome was opened. Everyone stated that this only happens every time an app is opened if it's self ...
GaussStrife's user avatar
-1 votes
1 answer
508 views

Why is PF not working on M1?

I don't understand why PF does not work on M1. This problem is only on M1. I tried turning firewall on/off. PF successfully enabled without my code /etc/pf.conf scrub-anchor "com.apple/*" ...
yepev97979's user avatar
0 votes
0 answers
145 views

macOS Monterey firewall off but cannot access port

I have a PostgreSQL database which is being deployed using docker, basically I'm exposing the port 5432 on my local machine, my firewall is turned off and I'm trying to log into the database from a ...
moth's user avatar
  • 101
-2 votes
1 answer
636 views

Certain programs on Lulu app (Objective see) are not filtered

I am finding that certain apps (on Monterey) are not being filtered. These are native apple apps. Even if I disable network access, on reboot, it resets. When I deny access, it adds another deny rule. ...
CarriMegrabyan's user avatar
0 votes
1 answer
237 views

has apple removed pflog from packetfilter?

FreeBSD includes pflog as a way to analyze pf logs. I dont see a /var/log/pflog. Has MacOS removed the pflog and /var/log/pflog? Is it possible to enable this?
CarriMegrabyan's user avatar
1 vote
1 answer
433 views

How can I allow ONLY iMessage (and not web browsing) through a firewall?

I've looked up what TCP ports iMessage uses to communicate with and Apple says: 80 (TCP) 443 (TCP) 5223 (TCP) In my particular use-case, web browsing (80, 443) is not allowed. But we would like to ...
user227963's user avatar
0 votes
0 answers
84 views

Firewall bug; socket programming

I am seeking a work-around for a bug in MacOS 12.4. I write C++ programs that create TCP/IP listening sockets. When I launch one of them, I see an error dialog containing language Do you want the ...
Arnstein's user avatar
1 vote
0 answers
30 views

What ports and protocols does the Apple "Protect Mail Activity" indirect asset loading feature require?

What are the ports used by the indirect asset loading feature of the Apple Mail app?
gen's user avatar
  • 241
1 vote
0 answers
42 views

Incoming Network Connection alert does not dismiss

I develop web applications and often get the Firewall alert on a new version of my code: This is OK (although I would prefer to just answer one and be done with it). The problem is that selecting ...
Paul Waldo's user avatar
2 votes
1 answer
798 views

Port forwarding

I would like to intercept the tcp traffic from a device on my network. I cannot change the destination but I set the router IP to the IP of my M1 Mac Mini. I used to do this with ipfw on a virtual ...
PatrickB's user avatar
0 votes
1 answer
227 views

I accidentally clicked deny on port open prompt

I'm developing an app that binds to a local address, on a random port when it runs. I used to get a prompt to allow connections but I accidentally pressed Enter key and I think I denied the terminal ...
Romeo Mihalcea's user avatar
6 votes
0 answers
2k views

Getting asked if I want to allow or deny incoming connections on the google chrome helper app every time I launch chrome

I have clicked deny everytime, and I have checked that the firewall rule states block. Yet it keeps appearing. I realize at this point that I am actually unsure what this dialog window is asking. ie ...
GaussStrife's user avatar
2 votes
1 answer
1k views

Apply outgoing firewall rules per app selectively (MacOS Big Sur)

Question: Which firewall can selectively apply multiple named domain resolving rules per app? E.g. like the One Periodic's Hands Off firewall Details: I'm looking for an app or combination of apps ...
questioner56's user avatar
1 vote
1 answer
2k views

pf.conf configuration?

I've been a Windows user for 35+ years and I'm new to Macintosh. I would like to configure PF firewall to block the ports below, incoming and outgoing on all interfaces. What commands do I need to use ...
macintoshnewuser's user avatar
0 votes
0 answers
2k views

How to open a port on MacOS Big Sur?

I am trying to open a specific port (8000) on my Mac (macOS 11.6) for local web development testing. Let’s say my computer’s NAT IP is 192.168.1.10. If I go to 192.168.1.10:8000, I get nothing. nmap ...
Jason's user avatar
  • 1,116
0 votes
1 answer
5k views

What are "netbiosd" and "rapportd"? Why are they asking for incoming network connections? [duplicate]

I was asked to allow/block netbiosd & rapportd, but I do not know what they are, so I block both of them. What are they, and blocking them is okay?
Demoxing's user avatar
  • 113
1 vote
0 answers
423 views

Remote sharing doesn't work even after allowing config in Firewall

I've allowed remote sharing in the Firewall And enabled remote sharing and remote login. I have Observe and Control enabled from the options dialog in Remote sharing. But remote sharing works only ...
Anadi Misra's user avatar
2 votes
1 answer
493 views

Can I compile and locally run SimpleFirewall example app without enrolling with apple developer program?

I was curious about writing my own simple application firewall. After going through several tutorials I've downloaded SimpleFirewall example app available at: https://developer.apple.com/documentation/...
IlliakaillI's user avatar
4 votes
2 answers
3k views

MacOS Firewall: Program grayed out, can't be added to Firewall Options

In MacOS Monterey (12.0.1), I am running Python 2.7 from an Anaconda virtual environment. Each time I run the Python script, I am asked if I want to accept incoming network connections: I have tried ...
P A N's user avatar
  • 9,474
1 vote
0 answers
134 views

Modifying tcp packets going out on a specific port

I am newbie with pf. I want to modify all outgoing TCP traffic having destination port 8001. For that, firstly, I wanted to use pf to redirect all the TCP traffic at en0 with destination port 8001 to ...
Arti Dua's user avatar
0 votes
2 answers
969 views

MacBook blocks all incoming connections, even when firewall is turned off

I moved to a new MacBook (High Sierra initially and BigSur now) and all incoming network connections are blocked on the new MacBook (restored from the backup couple of weeks ago). On an old one ...
FoxyBOA's user avatar
  • 133
2 votes
0 answers
197 views

Monitor VM network with Little Snitch

I've upgraded to Big Sur (yep, late to the party), VM Ware Fusion 12 and Little Snitch 5. I get that kernel extension are no longer valid and VM Ware now uses the Apple network API. Previously I could ...
sansSpoon's user avatar
  • 1,027
-1 votes
1 answer
289 views

Hybrid-Analysis.com indicates macOS built-in file is contacting a malicious website

I'm wondering if anyone knows why this /System/Library/StagedFrameworks/Safari/WebKit.framework/Versions/A/XPCServices/com.apple.WebKit.Networking.xpc is connecting to adriver.ru ? This is according ...
I_Don't_Code's user avatar
1 vote
2 answers
683 views

How to dynamically add anchors on startup for apple pfctl without editing system pf.conf

There are a few answers on using pfctl on os x, but none really give a nice clean way to make an anchor and have it loaded on startup, or to allow programs to hook in and dynamically update / replace ...
nate's user avatar
  • 11
1 vote
0 answers
305 views

How to make XQuartz listen to port 6000?

I have installed XQuartz 2.8.1 onto macOS Catalina 10.15.4. Now I can use ssh -X myremotehost and do xcalc & there. But the -X option appears to work too slow. I am using a LAN and would like to ...
Dims's user avatar
  • 276
3 votes
2 answers
14k views

MacOS Firewall: Best practice to Allow or Block "Incoming connections" for applications?

A relatively large number of my Mac applications causes the MacOS Firewall to ask whether to allow or block "Incoming connections" (System Preferences > Firewall > Firewall Options). ...
P A N's user avatar
  • 9,474
1 vote
0 answers
354 views

How can I stop the macOS firewall from blocking Django server (Python)?

For several years I have been regularly using Python's Django framework and running its web server for development purposes on my local machine. I took a break over the past year and am now returning ...
stackunderflow's user avatar
0 votes
2 answers
2k views

Macbook Pro doesn't accept any incoming connections - Firewall disabled!

My MacBook Pro running macOS Big Sur 11.3.1 doesn't respond to Ping, SSH, and Remote Access. What I tried so far: Made sure "stealth mode" was disabled on Firewall Disabled the Firewall ...
Marcio Granzotto's user avatar
2 votes
2 answers
1k views

Traffic of different Apps in Little Snitch with enabled VPN? What is the meaning?

So, I am trying to understand my VPN connection observing the traffic in Little Snitch. My VPN is connected and I can see its connection to the server and the amount of data that is transfered. ...
monkei's user avatar
  • 29
1 vote
1 answer
120 views

How to get rid of firewall asking when developing a program?

When you develop a program you compile a web server as an executable server. When you run it the firewall would ask "Do you want the application 'server' to accept incoming network connections?&...
Alex Craft's user avatar

1
2 3 4 5
8