Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

Filter by
Sorted by
Tagged with
1
vote
1answer
850 views

How can I use wifi only for handoff?

Ok OSX wizards... I have a dilemma. In order to use handoff/continuity at work I need to connect my Mac and iPad/iPhone to the same wifi network. Moreover, I also need to be connected to the ...
3
votes
1answer
2k views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
3
votes
1answer
985 views

In OS X, how does manually sandboxing an application from the internet compare to blocking it with Little Snitch?

I want to prevent inbound and outbound connections to one application. I can buy Little Snitch if it's the best option, but it feels like I wouldn't be getting much value out of it for that one use. ...
0
votes
0answers
492 views

Bandwidth throttling with onboard tools in Yosemite?

Is there any way with Mac OS Yosemite's built-in firewall to throttle or queue connections from a single application, on a single port or to a certain hostname? The App in question would be the ...
7
votes
1answer
3k views

Dropbox109 process asking to access firewall on Yosemite

As the title says, I have a process called Dropbox109 asking to access the internet. I have denied it. I have Dropbox installed since Mavericks, and its been working fine (uploads/downloads/sync). ...
1
vote
1answer
4k views

What's netbiosd? I must block netbiosd?

I was asked to block netbiosd, but do not know what is. I must to block all connections from netbiosd?
2
votes
2answers
4k views

Apple Remote Desktop Admin blocked by OS X Yosemite Firewall

I'm experiencing an issue where the Firewall in OS X Yosemite is repeatedly preventing me from launching ARD Admin. Symptoms: Launch ARD and no window appears. I am forced to force-quit the ...
15
votes
2answers
2k views

Do pre-built Little Snitch configurations exist and are they shared?

Is it possible to import configurations that have been created elsewhere into Little Snitch? For example, a ready to go basic ruleset for someone who wants to block iCloud's more intrusive features. ...
0
votes
1answer
266 views

Is there a way to do per-application rules in pfctl/alf?

I'd like to implement a mitmproxy for a single application on my mac. Pfctl doesn't natively have (from what I can see) support to set rules based on the application source/dest of the packets, but ...
0
votes
2answers
435 views

Mavericks firewall does not keep my choices

I'm on Mavericks and I run a python script to have a minimalist local server. Anytime I launch the server the firewall popup comes in and asks me "Do you want the application “python2.7” to accept ...
0
votes
1answer
1k views

Rdr Missing on Yosemite

I'm trying to add a rule to my computer which was working on my work computer. strangely enough there's no rdr program on my Yosemite. should I install a particular package to obtain it? sh-3.2# rdr ...
0
votes
1answer
410 views

Yosemite Server, adaptive firewall not stopping screensharingd attempts?

I'm not certain if the Adaptive Firewall in Yosemite Server 4.0 is just not working or just not working for screensharingd. I have a Mac mini Server in a colo and get lots of attempts at ...
1
vote
1answer
62 views

Firewall rules ambiguous?

In the stock OSX firewall settings I can add applications to the rules table, and then give them a red dot (block) or a green dot (allow). I've got 6 apps in the table. Some green some red. But what ...
0
votes
1answer
1k views

Firewall: Add command-line tool to rules (mosh-server)

How can I add a command line tool I've installed manually to the system firewall? The tool is Mobile Shell (mosh) installed via the excellent Homebrew)? Specifically, I want to add a rule for /usr/...
0
votes
0answers
170 views

SelfControl not blocking anything

I have used SelfControl to block the internet for some time, but now it won't block anything anymore. (Edit: Well, acutally one moment SelfControl blocks some sites, then allows them again, apparently ...
3
votes
3answers
896 views

Disable Little Snitch in Guest account

It seems that Little Snitch 3.4.1 is a rehaul of the old version and this solution to disabling it in the guest account posted here Disable Little Snitch in guest account? doesn't work anymore. When ...
0
votes
1answer
3k views

Cant access firewall in system preferences; firewall tab is greyed out

I have tried multiple things to rememdy this issue. I have tried enabling and logging in as root, tried to clone the system preferences app and accessing security and privacy from the view menu and ...
4
votes
1answer
146 views

ShellShock: Do I need to be worried about this on OS X Mavericks?

The title kind of says it all… I was in the process of bringing up a rather extensive set of Mac OS X Server machines when ShellShocked hit the world. As soon as I saw the news, I hastily began ...
2
votes
1answer
2k views

How can I add a ipfw forward rule to little snitch?

I use the following rules to connect to my nginx server on a vagrant machine: sudo ipfw add 100 fwd 127.0.0.1,8080 tcp from any to me 80 sudo ipfw add 100 fwd 127.0.0.1,8090 tcp from any to me 443 ...
15
votes
4answers
53k views

How to open a specific port in Firewall OS X 10.9.4

How do I open a specific port in the firewall? I can not use the "allow connections from application" as I want to open the port for Jenkins, that is not on the list...
5
votes
2answers
5k views

How can I tell Firewall to allow incoming connections for Python.app running Django

Each time I run my Django development server, I get a dialog to allow incoming connections. No matter what I do : Click Allow in the dialog box Add to the Firewall via the OS X GUI (both real and ...
1
vote
0answers
1k views

Is there a way to stop OS X opening NAT-PNP/uPNP holes for every open port on *?

With any luck, there's an easy work-around for this: curl ifconfig.me to find your external IP address sudo lsof -i4 -n | grep LISTEN | grep \* to find processes listening for connections from other ...
4
votes
1answer
2k views

Modify existing Little Snitch rule to be Effective in all profiles

I've been using Little Snitch for a while. I have several profiles set up (e.g. Home, Work, Public, etc). I've been working to generalize some of the rules. E.g. Instead of specifically allowing ...
1
vote
1answer
195 views

CrashPlan requests network connection on startup

Since upgrading to Mavericks, CrashPlan requests incoming network connections each time my MBP is restarted. I always click "Allow" and I've ensured that my firewall settings allow it, but I still get ...
3
votes
1answer
5k views

ntpd and incoming connections on OS X client?

I recently received a dialog box on my MacBook Air (10.9.2 Client) asking "Do you want the application “ntpd” to accept incoming network connections?". I have OS X's firewall enabled. Now, my ...
1
vote
1answer
2k views

Packet forwarding on OS X Mavericks

I need my MacBook Air (Mavericks 10.9.2) to share the Internet connection (wi-fi;en0) with BeagleBone Black (BBB) which is in the 192.168.7.0 subnet (en6). ifconfig: $ ifconfig lo0: flags=8049<UP,...
3
votes
2answers
2k views

How to block internet access of all apps (except browser) when using 3g usb modem?

Is there any app that helps me to block all apps for accessing the internet when using 3g modem?
1
vote
0answers
64 views

How can I allow a “development” program through the firewall?

I have an application (java) that I compile/run through netbeans, I want to access it from a different computer. Opening a port might be the best solution, though if so I'd like to be a little more ...
1
vote
1answer
602 views

Free firewall and network monitor Application like the LittleSnitch? [duplicate]

I am searching for a good free firewall and network monitor as the littlesnitch but I can't pay for this app. I want a firewall that will protect me but more of that to monitor any connection in or ...
2
votes
3answers
4k views

Do firewall tools exist for OS X Mavericks for preventing brute force attacks?

Here's the deal: Over the last few weeks, I've noticed a large number of authentication failures for both the sshd service and the screensharingd service on my Mac OS X Mavericks server (running 10.9....
1
vote
2answers
64 views

Enable internet only for specific apps

I will need to spend few weeks with no internet, but I will still have my mobile hot spot. So I wonder if I can prohibit all apps including OS (which I know will try silently to update something) from ...
5
votes
3answers
8k views

Blocking internet access for a specific application on Mac OS X

How can I block internet access to a specific application in Mac OS X? I need this to be done from the command line and hopefully use the ipfw terminal command. Specifically I am looking to toggle ...
3
votes
3answers
417 views

I have a service listening on a port, how do I open the port externally?

I have a service that is listening on a tcp port, and it is listed with this command: >netstat -atp tcp | grep -i "listen" tcp4 0 0 192.168.2.5.8070 *.* LISTEN ...
1
vote
3answers
5k views

Can't access certain websites

I'm trying to access the site http://www.svenskadomaner.se but it's unreachable from my MacBook Pro (OSX 10.8.5). The domain belongs to a web hosting company and it's not only this specific site I can'...
2
votes
0answers
114 views

CalenderAgent: howto allow connection only if needed?

I use Little Snitch, and there I can see that CalenderAgent still connects to Google and iCloud even if iCal is not running. For several reasons I want to allow CalenderAgent to make connections only ...
3
votes
1answer
2k views

What's the “built-in” firewall in OS X 10.9?

By "built-in" I mean the backend of the System firewall (System Preference->Security&Privacy->Firewall). Is it ipfw or pf? (I know that ipfw was the backend for previous versions of OS X). And, ...
5
votes
2answers
4k views

What are the numerous incoming connections I see on public wifi for?

In general I have incoming connections disabled by my security software (Little Snitch). But even when I do this, on public wifi, I see numerous incoming connections for netbios and mDNSResponder ...
1
vote
2answers
2k views

No Jailbreak Firewall for iOS (iPhone) for iOS 7 [duplicate]

Is there a non jailbreak firewall for the iPhone or is there some way to set one up, somehow?
1
vote
1answer
2k views

OSX Firewall: Forwarding Ports & Ignoring Non-Local Requests

On my production Debian server I use this to forward requests that come in to port 80 to a non-root process running on port 8080: sudo iptables -A PREROUTING -t nat -i eth0 -p tcp --dport 80 -j ...
6
votes
2answers
11k views

Migration Assistant fails on Ethernet Mavericks-to-Mavericks migration

I have the following setup and am attempting the use Migration Assistant over Ethernet: Source machine: Early 2009 24-inch iMac running OS X 10.9 Destination machine: Latest MacBook Pro Retina ...
0
votes
1answer
1k views

Migration Assistant fails on FireWire Mavericks-to-Mavericks migration

I have the following setup and am attempting the use Migration Assistant over FireWire: Source machine: Early 2009 24-inch iMac running OS X 10.9 Destination machine: Latest MacBook Pro Retina ...
2
votes
3answers
2k views

Pf firewall logging

I have pf configured and working with rule sets that are logged. Where is pf logging to? How do I check these logs? How do I configure them?
2
votes
2answers
770 views

How to configure `ipfw` on Lion, Mountain Lion?

I'd like to configure and start ipfw on Macs running Lion, Mountain Lion. I found that pfctl is configured and started with: /etc/pf.conf /System/Library/LaunchDaemons/com.apple.pfctl.plist How is ...
1
vote
0answers
69 views

Prevent data on unsecured wireless, until VPN is connected [duplicate]

There's a lot of good advice around about avoiding connecting to unsecured wireless networks, and using a VPN (for all traffic) if you absolutely must use one. What seems to be missing from this ...
6
votes
4answers
1k views

Open ports. Safe?

My friend is currently running the default firewall with "Block all incoming connection" (except the basic ones like 80). I just scanned his mac for open ports and I found the following: Open TCP ...
0
votes
1answer
1k views

Block access from WAN but not from LAN

I have an OSX Lion box behind a router (firewall on in the router). On the OS X, if I switch the firewall on, I'm unable to access the web server running on this box from outside the network (i.e. WAN)...
0
votes
1answer
497 views

How to isolate apps from the internet?

Can I completely isolate apps on mac from the internet, without installing any additional software ? I need a sort of firewall to isolate them thanks
1
vote
1answer
113 views

Sharing screen with Messages.app on Mountain Lion

Both computers are running OS X 10.8.4 When trying to initiate the screen sharing feature, the other computer gets the request, then clicks "Accept" but thats as far as we get. Then we see this: I ...
1
vote
2answers
3k views

Is it possible to block a specific IP from attempting to connect to screen sharing?

I have noticed for some time that the shared screen icon flickers on and off on my menubar every couple of minutes (MacBook Pro, MAC OS X 10.8.4). I thought it was a glitch or a bug. I've checked the ...
1
vote
1answer
1k views

How to configure client OS X VPN (L2TP) connection so you do not loose access to intranet?

I am looking for a solution for configuring the VPN on OS X so you do not loose access to internal network. In fact I want to use the VPN only to enable access to different external services that ...