Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

Filter by
Sorted by
Tagged with
0
votes
1answer
1k views

What is the loopback interface lo0 on Macs?

What is the loopback interface lo0 on Macs? What's the use of it? Does it have any vulnerabilities?
5
votes
1answer
672 views

How to open port 9150 on a Mac so external devices can connect to it?

On Localhost I can access and connect to port 9150, but on another devices on the network it cannot see the port and cannot connect to it. I've checked and there is no firewall on the network ...
1
vote
1answer
1k views

Application Firewall is not enabling pfctl

I have a development environment that uses the Pow webserver. When I initially set it up, it automatically reconfigured the firewall to allow me to connect to my_project_name.dev urls. Last time I ...
3
votes
0answers
22 views

How to avoid OS X downloading things while using tethering [duplicate]

When on the road, I would like to use my phone's LTE connection and tether it to my macbook. However, I do not have an unlimited data plan, so I don't want the mac to download a bunch of stuff (OS X ...
2
votes
1answer
2k views

ARDAgent.app - what is it?

I sign into a few different email accounts for different family members and I have a few. Im not sure if that is how it happened but What is ARDAgent.app? I found it as being allowed in my Security ...
3
votes
1answer
2k views

Port Forwarding on Mac Pro with macOS Sierra

I would like to port forward from my macOS Sierra computer with IP address of 152.1.2.3 to my NAS which is 192.168.2.3. Specifically I would like to access the HTTP web server on my NAS at 192.168.2.3/...
1
vote
1answer
67 views

Filter out ARP query from given ether:ip

Let's say on my network there is a hacker who floods my computer with arp messages to associate his MAC address with the IP of the computer I want to reach. It's like he sends the following message ...
3
votes
1answer
4k views

How to Connect a router to console, using a mac

I just purchased a non-Apple router (a pfSense SG-1000 device by Netgate). As a contingency plan in the event I would forget my web interface password, to then save my bacon, I want to be able to ...
4
votes
0answers
653 views

Logging MacBook firewall is empty

I have enabled the built-in firewall on my MacBook (Sierra v10.12.1), but unfortunately the log files located in /var/log (appfirewall.log and alf.log) stay empty. I contacted Apple Support but they ...
2
votes
1answer
85 views

Should I let malwaredomainlist.com connect to the net?

I am getting Little Snitch alerts for Firefox trying to connect to the malwaredomains.com with the IP-address 76.63.222.170. I have blocked the connection, but I wonder why Firefox needs to connect to ...
1
vote
0answers
302 views

Why can't I access HTTPS sites through my iPhone's hotspot?

I can access HTTP and HTTPS sites from the iPhone without any problems. However, when I use the iPhone as a hotspot and connect my laptop to the it, I can't access HTTPS sites from the laptop. It's ...
1
vote
1answer
647 views

Can using Little Snitch make my mac Less Secure than its “out of the box” settings?

Short Question Im thinking about configuring little snitch to allow all processes incoming and outgoing network traffic. By allowing "any process” incoming / outgoing rights will this make my Mac ...
1
vote
1answer
605 views

How to permanently block all incoming connections in the macOS firewall?

I have the default macOS firewall enabled with stealth mode and block all incoming connections option set. And I have it locked. But after a while, the firewall is in green state with selective ...
5
votes
2answers
36k views

How to open a port in macOS Sierra 10.12.4

I'm running macOS Sierra 10.12.4 and am trying to open a port (12345). I can't use the GUI firewall tool as it's app specific, not port specific. I have tried the following this article, but it did ...
2
votes
1answer
84 views

Apple Software Update behind Websense

I'm trying to keep Mac OS X updated behind an ancient Websense (pre-Cisco websense.com) and corporate IT won't play along. To anything other than Windows, Websense appears as a man-in-the-middle. So, ...
2
votes
1answer
84 views

How can I block iOS 10 Notifications

It seems that I can not find a solid answer on this. Currently, I've tried this... Using my NetGear Genie, I went to security and blocked the keywords/domains of: https://mesu.apple.com https://...
1
vote
1answer
7k views

Command Line Firewall

I have decided to add a firewall to my computer and have heard of applications such as 'Little Snitch' which help to give me control of inbound and outbound connections on my mac running macOS Sierra. ...
5
votes
1answer
610 views

socketfilterfw and repeating error messages

Every two seconds I get the following messages via Console: Standard 13:47:41.404793 +0100 socketfilterfw MacOS error: -67065 Standard 13:47:41.405321 +0100 socketfilterfw UNIX error ...
0
votes
1answer
458 views

Automating pfctl to block incoming connections and IPs

I get a lot of unwanted traffic from Chinese IP addresses. I'm using an old Mac with OS X 10.7.5 (my Mac is ancient, so I cannot update further), so I imagine it's more vulnerable than a newer Mac ...
1
vote
3answers
9k views

How to find culprit blocking TCP ports 80, 443, and 5223 on macOS?

These ports, crucial to iMessage and Facetime, are blocked: TCP Ports 80, 443, and 5223 on macOS Sierra 10.12.2 (MacBookPro11,3). (https://support.apple.com/en-us/HT202078) In Network Utility, I ...
1
vote
1answer
153 views

pfctl config to allow VPN host names instead of IP addresses in OpenVPN connection

I would like to use VPN domain names instead of IP addresses to only allow some VPN servers on my Mac. I did everything here to set up pfctl to only allow some VPN servers to open access to some ...
1
vote
1answer
705 views

How to open two ports (both TCP / UDP) using pf

I own a MacBook pro (Retina, 15-inch, Early 2013), running macOS Sierra 10.12.2 as host computer and VMware Fusion Pro Version 8.5.3 with Windows 10 and Linux as guests OS's. So my question is how do ...
4
votes
1answer
1k views

How to setup the adaptive firewall

I have followed this link: Turn on the adaptive firewall in macOS Server and I get this output, but I don't know if I have indeed activated the adaptive firewall: No ALTQ support in kernel ALTQ ...
2
votes
0answers
546 views

Something has taken over Little Snitch?

Due to sad neglect, I own the computer from the exorcist. I finally looked last night and there were 80 sshd connections from China. I blocked all traffic to/from sshd, and now that sshd is linked ...
1
vote
2answers
171 views

ipfw ruleset limit

We are using ipfw in OSX 10.6 Server, 10.7 Server... all working fine until we add too many rules, I think. ipfw will still work, but only process up to certain number of rules. Currently wc -l /...
1
vote
1answer
616 views

Murus firewall - redirect an ip to localhost web server

Edited to simplify question: using host file, we can redirect a domain (example.com) to localhost: 127.0.0.1 example.com How can we redirect an ip (for example 35.166.133.11) to localhost (web ...
1
vote
1answer
310 views

Port forwarding on all ports except ssh on macOS Sierra (redsocks)

I am trying to forward all ports except port 22 on OSX Sierra using pfctl but it doesn't seem to work. file: /pf.conf ext_if = "inet" rdr pass $ext_if proto tcp from any to any -> 127.0.0.1 port ...
4
votes
1answer
83 views

What services on macOS might leak identifiable information?

I'm looking to make a set of firewall rules in macOS for use on untrusted networks, such that no identifiable information, such as account or device identifiers, might be inadvertently leaked. macOS/...
2
votes
1answer
11k views

How can I open a port (not application) in the macOS Sierra firewall?

I am trying to follow up on this thread and to update it for macOS Sierra (and probably all versions since Yosemite). In that thread, a way to open a single port in the OS's firewall was suggested: ...
2
votes
1answer
1k views

How to add a specific file to Firewall Exceptions list?

I have to add /usr/local/lib/node_modules/npm/bin/npm to the exception list. I tried to find and edit com.apple.sharing.firewall.plist but I didn't found such file anywhere. How can I manually add a ...
4
votes
1answer
2k views

OS X El Capitan port forwarding to Parallels VM using pfctl

I have Parallels Desktop 11, which does not have support port forwarding to VMs (just the Pro version supports it). So I am trying to use pfctl to forward ports to my Parallels VM. I have followed ...
2
votes
1answer
6k views

macOS Sierra 10.12: Configure firewall for a single port (3690)

How can one configure the Firewall on macOS Sierra 10.12 to open up a single port (in this case port 3690)? There's no obvious UI to do this.
1
vote
0answers
33 views

Macbook Pro keeps getting falsely black-holed by ISP(Building's) firewall?

I live in a building that provides internet (both wired and wifi), and has its own infrastructure. This has been going on since Friday, and is driving me insane. Here's the details: Macbook Pro Early ...
2
votes
1answer
1k views

LaunchDaemon for pf won't load at startup

I have a plist in /Library/LaunchDaemons/ that should run as root on startup. When I run sudo launchctl load /Library/LaunchDaemons/com.apple.pfctl.plist, it works. However on reboot it does not work....
2
votes
0answers
361 views

How to block non-vpn traffic on Sierra?

I use an openvpn client to a private server. However, when I run pfctl -e -f /etc/pf.conf I have the following error that i can't fix on line 20 referring to antispoofing. If I remove the ...
0
votes
1answer
93 views

How can I trace the macOS network stack?

In safari, and several other products, I get a network timeout where I have to reload the page, even though I have a full / working Wifi connection. This is a sporadic issue. The problem seems to ...
2
votes
1answer
6k views

Is there a firewall on an iPad on iOS 10, and is it configurable? [duplicate]

I have an iPad Air 2. I've been using a comic book reader called Bookman for years. It allows importing books over FTP on a set port (2121). It has worked for years without an issue, but ever since I ...
1
vote
0answers
858 views

Airport Extreme firewall logging

I have a newer model (2013) Airport Extreme and have activated remote logging with level 7/debug messages going to a Linux box. However, I find the messages actually getting logged seem minimal, and I ...
2
votes
1answer
4k views

Block port on all interfaces using PF

Trying to block incoming traffic on all interfaces to a specific local port on Mac OS X 10.11.15, including loopback. This is my /etc/pf.conf: scrub-anchor "com.apple/*" nat-anchor "com.apple/*" rdr-...
0
votes
1answer
823 views

How to force open TCP 443 on my machine?

I turned off the firewall. Then, using nmap in the terminal, I issued the statement nmap 127.0.0.1 and got Starting Nmap 7.12 ( https://nmap.org ) at 2016-08-15 11:00 PHT Nmap scan report for ...
1
vote
1answer
148 views

Remote control and screenviewing on OS X?

So I have a company Macbook and a co-worker recently told me that it can be controlled or viewed any moment. Not that I do something illegal on it, I value my privacy and this piqued my interest so I ...
0
votes
0answers
102 views

Is it possible for someone to initiate a screen sharing session while my Mac is asleep?

Today when I got home and awoke my MacBook Air (running OS X 10.11.6) from sleep by lifting up the lid to login into it, I noticed the little Screen Sharing icon in the top-right corner (to the left ...
0
votes
1answer
404 views

Mac won't load some web contents

My MacBook Pro 2012 running ML has started not to load certain web pages. I tried with every browser but I have the same issue. I thought it was a firewall trouble, but it's disabled. Tried to ping ...
1
vote
1answer
703 views

Little Snitch: Does restricting address/port for an application disable future connection prompts?

I have downloaded the trial version of Little Snitch. After install, when I am prompted with connection requests, I have the option to allow or deny the connection via "Any Connection" or "Only" a ...
1
vote
1answer
236 views

Only HTTPS websites working otherwise I receive ERR_CONNECTION_REFUSED [duplicate]

I am facing annoying problem of only HTTPS websites working on my Mac (in all browsers). I can only visit Google, YouTube, Facebook, Yahoo etc. So far, I tried following: Websites shows error of: ...
0
votes
1answer
44 views

Is there any way to look at and modify the Application Layer Firewall via the command line?

We have an issues where an application changed it's service name and UAC prompted users to allow or deny, and a lot of users clicked deny. If users go in to system preferences, security, firewall and ...
1
vote
0answers
246 views

PF / IceFloor - Redirecting a service / port to a specific IP

What I'm trying to do is redirect all requests to a certain service or port to a specific IP address with IceFloor as the frontend for PF. In the example I'm posting en1 is my only enabled network ...
2
votes
0answers
507 views

OSX Firewall 10.11 keeps getting turned off

For some time, several months at least, my inbuilt Firewall (OSX 10.11.x Application Level Firewall as available via Security and Privacy Preferences) keeps on getting turned off. It will be on for "...
4
votes
1answer
591 views

All HTTP requests get ERR_CONNECTION_REFUSED, HTTPS works - How to troubleshoot?

Trying to open a http website on any web browser (event telnet) gives a ‘ERR_CONNECTION_REFUSED’ or ‘connection timed out’. However, the same sites can be opened using https. I tried doing a ...
5
votes
1answer
847 views

Which built-in tools do Little Snitch-like applications rely on?

Little Snitch is a well-known piece of software that allows Mac users to block outgoing connexions from a specific app. Now, whenever I ask how to do the same with built-in OS X tools, I get an ...