Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

Filter by
Sorted by
Tagged with
1
vote
1answer
901 views

Browsers opens only https sites

I have OS X Mavericks on my Mac and 3 browsers (Firefox, Safari, Chrome). When I try to open any site I see only "connecting..", but when I try https sites it works fine! Ping and traceroute shows ...
1
vote
1answer
2k views

mDNSResponder - incoming connection from “[name of my Macbook]'s-macbook-pro.local”

As I logged into my admin account to set some things up on my Macbook (I surf using a standard account), I noticed via my third-party firewall application, Little Snitch, that mDNSResponder had ...
7
votes
4answers
17k views

Little Snitch reports outgoing connections for AirPlayXPCHelper for wrong subnets?

After upgrading to El Capitan, I've started noticing annoying connections from the AirPlayXPCHelper to 192.168.1.0/24 subnet (my home network isn't in 192.168.1.0/24 subnet, it's in 172.16.0.0/12 ...
0
votes
1answer
900 views

Incoming connection on UDP port 137 (NBNS) from an internal IP address?

I have a Little Snitch (a third-party firewall application) on my Macbook running OS 10.11.1. I noticed that because of my settings to deny most incoming connections from the LAN, the launchd process ...
4
votes
5answers
2k views

I'm trying to block game “X” from accessing the internet including updating

I'm using OS X El Capitan and I'm trying to prevent a game from accessing the internet including blocking it from checking for updates for the launcher or the game itself. I've gone into Security -> ...
2
votes
1answer
886 views

How to trap ssh breakin attempts on El Capitan

Previous to El Capitan one could use pfctl and /etc/pf.conf to "trap" the ip addresses of sites attempting to break into a server using brute force attacks producing 100's of attempts per second. The ...
2
votes
2answers
2k views

How can I block ssh brute force attempts in OS X 10.11?

My system running OS X 10.11 is constantly getting hammered by failed ssh login attempts by bots. I'm using a secure password and the root account isn't accessible via ssh, but even so it's still a ...
1
vote
1answer
580 views

How do I open a filtered port in pf?

I have opened a number of ports, and am familiar enough with pfctl, but even though I have opened various ports, then show up as "filtered" - which means of course that they are not open. How can I ...
2
votes
0answers
393 views

Any way to transparantly redirect outbound traffic to a particular IP:port on OS X?

OS: Yosemite Basically I am looking for something similar to Mac os x ipfw forward from ip:port to ip:port but since there is no ipfw on Yosemite is there a way to do this trick using pfctl or ...
4
votes
1answer
1k views

How can I configure fail2ban for use with OS X

I've seen instructions for configuring fail2ban on BSD using pf but I'm not sure how these can be adapted to configure the fail2ban rules that ship with homebrew to configure Yosemite's firewall for ...
12
votes
1answer
33k views

MacOS X - iptables?

Where is iptables in MacOS X? I'm running Yosemite 10.10.5 (14F27) and it seems to be missing. If it's not actually native to OS X, what's the best way to install it for this operating system? If for ...
1
vote
2answers
1k views

OS X: How to lock down these frivolous protocols!

I ran a port scan on my Mac (OS X 10.9.4 if its relevant) and i realised all these random protocols with next to no explanation on the internet. 2 of the most unusual protocols include ndl-aas and ...
4
votes
1answer
291 views

What are the services Apple's Firewall considers essential?

I'm trying to determine what Apple's Firewall considers essential services. Apple's Firewall has the following settings available: A search of Apple's site does not reveal a support document on the ...
8
votes
3answers
7k views

Blocking incoming hostile traffic dynamically with PF and fail2ban on OS X

The bigger picture is that I am trying to dynamically block/unblock IPs using fail2ban 0.8.14. I have been following an old guide for OS 10.5 with doesn’t include PF. I think I’ve configured ...
1
vote
1answer
934 views

What is the Correct 'pf' Syntax for an 'iptables' Port Redirection Rule

I am looking to implement a rule like the following iptables rule on my Mac, to redirect traffic from my development workstation (hosting a development copy of a Ruby on Rails project) to another host ...
2
votes
1answer
7k views

Port blocking on iPhone 6

I am unable to get email to connect to my IMAP server using an iPhone 6+ with iOS 8.3. The telco (Telstra Australia) loves telling me that they do not block ports. Either the telco is blocking ports ...
1
vote
1answer
91 views

How to share over ethernet but not over wifi [duplicate]

Running OSX 10.10.3 The office LAN is wired, the guest LAN is WiFi. I need to be on both at the same time. I want to be able to accept connections from the office LAN, but I want to limit access to ...
6
votes
3answers
35k views

How can I setup my mac (OS X Yosemite) as an internet gateway

It should be possible, but I searched for a day and cannot get a decent HowTo. There seemed to be a Gateway Setup Assistant, but the Wikipedia link only goes to the server app now. Maybe it is easier ...
1
vote
2answers
5k views

VNC connection to OS X Yosemite 10.10 not working with Firewall enabled.

I've been connecting to my Mac with the iOS VNC app to monitor a process remotely, and noticed Firewall was turned off in Security & Privacy. So of course I turned it back on, and tried to ...
3
votes
1answer
873 views

Alternative for `fail2ban` on my server running OS X 10.6.8

I have dedicated my old MacBook as a home server. It runs, among other stuff, the following services: Webserver (Apache, PHP, MySQL) i.e. OwnCloud/WebDAV Torrent client SSH server VPN Some game ...
0
votes
1answer
2k views

Open firewall to run nginx

I need to access my computer running nginx on port 8080, but I do not want to turn off the firewall. I know that I can allow application to connect, but I can not figure this out with nginx. The ...
26
votes
2answers
15k views

Xcode.app gets scanned by socketfilterfw (OS X Firewall) at every launch

Situation: When I launch Xcode, socketfilterfw, OS X's application based firewall, starts using a lot of CPU. After some research I narrowed it down to this: socketfilterfw reads all the files in ...
0
votes
1answer
566 views

Firewall blocks all internet sharing except port 80

MacBook Pro on 10.7.5 (Lion) static ip 192.168.10.5 using wireless connection ethernet jack connected to raspberry pi raspberry pi has static ip 192.168.2.3 when internet sharing is enabled and ...
0
votes
1answer
54 views

Modifing a preference via applescript changes file group

I recently request help about modifying firewall settings via command-line (see my previous question). Everything is working, but I have noticed that whenever I use this command in an applescript, the ...
0
votes
1answer
955 views

Little Snitch Global rule not working

I have a little snitch rule effective in all profiles to allow any process to connect to *.apple.com Why do I keep getting request for applications to connect to apple.com? Here are 4 different ...
0
votes
1answer
437 views

OS X firewall blocking torrents outside of VPN

I've seen plenty of tutorials for this around for Windows but I'm wanting to do it on OS X Yosemite. Is it possible to configure the firewall such that torrent traffic will only ever be permitted when ...
1
vote
2answers
2k views

Which incoming ports do you need to open in osx firewall?

I use pf (BSD packet filter via Terminal). The recommended use of pf is to block all incoming ports and then open those you need. I want my system to work properly and don't miss things like ...
3
votes
3answers
3k views

How to limit the bandwidth on a per-application (or per-process) basis in OS X Yosemite?

Whenever I use Homebrew or Apple Store to download a large application, it sucks all my available bandwidth and I am then unable to browse the web. How can limit the bandwidth per-application or per-...
0
votes
1answer
2k views

Cannot connect to SSH server from Mac OSX

Whenever I try to connect to a remote server using SSH, I get an error "ssh: connect to host x.x.x.x port 22: Connection refused" I didn't install a Firewall or something similar. I know for sure the ...
4
votes
1answer
463 views

Is there a way to permanently “Deny” an application incoming network connections (i.e. no more prompts)?

There's a few apps that keep prompting me for incoming network connections, which I prefer to deny, but whenever I open these programs, I'm re-prompted to Allow/Deny incoming network connections for ...
1
vote
1answer
731 views

PF port forwarding not working

I have the following rule in a file in /etc/pf.anchors/ rdr pass on lo0 inet proto {udp,tcp} from any to self port 25 -> 127.0.0.1 port 1025 The intention is to forward all local traffic to port ...
1
vote
1answer
1k views

Configuring OS X Firewall to enable SSH/SCP only on the local subnet? [duplicate]

We would like to configure OS X to only allow Remote File Sharing (SCP) from a specific range of internal IP addresses. That way they only accessible when the user is connected via the VPN. What's ...
1
vote
1answer
950 views

How can I use wifi only for handoff?

Ok OSX wizards... I have a dilemma. In order to use handoff/continuity at work I need to connect my Mac and iPad/iPhone to the same wifi network. Moreover, I also need to be connected to the ...
3
votes
1answer
2k views

Little Snitch reports outgoing connections from Mach Kernel — am I infected?

I monitor all my traffic using Little Snitch. Recently, I've noticed strange IP addresses making connections to the "mach_kernel" process. Most of these IP addresses seem to originate from other ...
3
votes
1answer
1k views

In OS X, how does manually sandboxing an application from the internet compare to blocking it with Little Snitch?

I want to prevent inbound and outbound connections to one application. I can buy Little Snitch if it's the best option, but it feels like I wouldn't be getting much value out of it for that one use. ...
0
votes
0answers
494 views

Bandwidth throttling with onboard tools in Yosemite?

Is there any way with Mac OS Yosemite's built-in firewall to throttle or queue connections from a single application, on a single port or to a certain hostname? The App in question would be the ...
7
votes
1answer
3k views

Dropbox109 process asking to access firewall on Yosemite

As the title says, I have a process called Dropbox109 asking to access the internet. I have denied it. I have Dropbox installed since Mavericks, and its been working fine (uploads/downloads/sync). ...
1
vote
1answer
6k views

What's netbiosd? I must block netbiosd?

I was asked to block netbiosd, but do not know what is. I must to block all connections from netbiosd?
2
votes
2answers
4k views

Apple Remote Desktop Admin blocked by OS X Yosemite Firewall

I'm experiencing an issue where the Firewall in OS X Yosemite is repeatedly preventing me from launching ARD Admin. Symptoms: Launch ARD and no window appears. I am forced to force-quit the ...
18
votes
3answers
4k views

Do pre-built Little Snitch configurations exist and are they shared?

Is it possible to import configurations that have been created elsewhere into Little Snitch? For example, a ready to go basic ruleset for someone who wants to block iCloud's more intrusive features. ...
0
votes
1answer
313 views

Is there a way to do per-application rules in pfctl/alf?

I'd like to implement a mitmproxy for a single application on my mac. Pfctl doesn't natively have (from what I can see) support to set rules based on the application source/dest of the packets, but ...
0
votes
2answers
460 views

Mavericks firewall does not keep my choices

I'm on Mavericks and I run a python script to have a minimalist local server. Anytime I launch the server the firewall popup comes in and asks me "Do you want the application “python2.7” to accept ...
0
votes
1answer
2k views

Rdr Missing on Yosemite

I'm trying to add a rule to my computer which was working on my work computer. strangely enough there's no rdr program on my Yosemite. should I install a particular package to obtain it? sh-3.2# rdr ...
0
votes
1answer
414 views

Yosemite Server, adaptive firewall not stopping screensharingd attempts?

I'm not certain if the Adaptive Firewall in Yosemite Server 4.0 is just not working or just not working for screensharingd. I have a Mac mini Server in a colo and get lots of attempts at ...
1
vote
1answer
65 views

Firewall rules ambiguous?

In the stock OSX firewall settings I can add applications to the rules table, and then give them a red dot (block) or a green dot (allow). I've got 6 apps in the table. Some green some red. But what ...
0
votes
1answer
1k views

Firewall: Add command-line tool to rules (mosh-server)

How can I add a command line tool I've installed manually to the system firewall? The tool is Mobile Shell (mosh) installed via the excellent Homebrew)? Specifically, I want to add a rule for /usr/...
0
votes
0answers
200 views

SelfControl not blocking anything

I have used SelfControl to block the internet for some time, but now it won't block anything anymore. (Edit: Well, acutally one moment SelfControl blocks some sites, then allows them again, apparently ...
3
votes
3answers
974 views

Disable Little Snitch in Guest account

It seems that Little Snitch 3.4.1 is a rehaul of the old version and this solution to disabling it in the guest account posted here Disable Little Snitch in guest account? doesn't work anymore. When ...
0
votes
1answer
3k views

Cant access firewall in system preferences; firewall tab is greyed out

I have tried multiple things to rememdy this issue. I have tried enabling and logging in as root, tried to clone the system preferences app and accessing security and privacy from the view menu and ...
4
votes
1answer
150 views

ShellShock: Do I need to be worried about this on OS X Mavericks?

The title kind of says it all… I was in the process of bringing up a rather extensive set of Mac OS X Server machines when ShellShocked hit the world. As soon as I saw the news, I hastily began ...