Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

69 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4 votes
0 answers
113 views

How do I prevent Apple Remote Desktop broadcasting over a specific network interface?

I have two active network interfaces on my machine connected to two different subnets. I run Apple Remote Desktop Admin to administer hosts on only one of the two subnets. How do I restrict Apple ...
user avatar
  • 73
3 votes
0 answers
4k views

Pop-up Appears then dissapears at MacOS Boot: Do you want the application "mediasharingd" to accept incoming network connections?

I'm running MacOS Catalina 10.15.7 (19H114) on a Macbook Pro 11,3 15" mid 2014. Every time I log into my Mac, after about 5 seconds, I get a popup that says... Do you want the application "...
user avatar
  • 549
3 votes
0 answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
user avatar
  • 22.9k
2 votes
0 answers
220 views

Getting asked if I want to allow or deny incoming connections on the google chrome helper app every time I launch chrome

I have clicked deny everytime, and I have checked that the firewall rule states block. Yet it keeps appearing. I realize at this point that I am actually unsure what this dialog window is asking. ie ...
user avatar
2 votes
0 answers
52 views

What port does Handoff use?

It seems that my firewall blocks some Handoff features. When I turn off my firewall it all works as expected. What port does Handoff use?
user avatar
  • 231
2 votes
0 answers
90 views

macOS: Restricted admin account

Is it possible to create an admin account which will allow you to install programs, but not to force install programs that are not verified? In other words, an account that can do anything accept ...
user avatar
  • 21
2 votes
0 answers
275 views

How to prevent "Do you want the application foo to block incoming connections?" popup from command line

As a developer, I run a testsuite of some self-compiled binaries which try to listen on some ports on startup. This causes a barrage of popups "Do you want the application foo to block incoming ...
user avatar
2 votes
0 answers
27 views

Getting notification when firewall settings have changed

I'm using packet filter engine to setup my Firewall connection. However, there might be other entities that may override my firewall settings on the same way (processes running with 'root' privileges ...
user avatar
  • 493
2 votes
0 answers
945 views

How can I block all ports with PF except port 80 and 443?

How can I block/close (or drop all the packets coming from) all ports with PF except TCP port 80 and TCP 443? So I only want to make use of port 80 and 443 via TCP. I tried this, but I receive an ...
user avatar
2 votes
0 answers
808 views

Blocking Incoming Connections to Open Port Daemons

OS: macOS 10.13.5 High Sierra; HW: Mid-2010 MacBookPro7,1 13” 2.66GHz Core 2 Duo I am interested in blocking incoming connections to Apple’s two persistent daemons with internet-facing open ports—...
user avatar
2 votes
0 answers
1k views

Captive portal on MacOS

I want to implement a basic captive portal. For the test setup, I have a mac mini connect to wifi (192.168.1.1) and ubuntu laptop connected to it via lan. What I am trying to achieve is for the the ...
user avatar
  • 21
2 votes
0 answers
654 views

Block internet/network access to a specific application, or just to launch an application?

We have a legacy application which tries to force login at startup - but the server is not accessible. If there is no internet it just skips login (talk about security). I have ethernet so I'm after ...
user avatar
  • 2,333
2 votes
0 answers
147 views

PHP mail not sending (possible macOS Server or Firewall issue?)

This is a relatively complex problem and LONG description, so bear with me. Please ask questions in the comments if you think I can clarify something. I am hosting multiple websites on a single ...
user avatar
  • 3,469
2 votes
0 answers
677 views

Why can't I access HTTPS sites through my iPhone's hotspot?

I can access HTTP and HTTPS sites from the iPhone without any problems. However, when I use the iPhone as a hotspot and connect my laptop to the it, I can't access HTTPS sites from the laptop. It's ...
user avatar
  • 121
2 votes
0 answers
759 views

Something has taken over Little Snitch?

Due to sad neglect, I own the computer from the exorcist. I finally looked last night and there were 80 sshd connections from China. I blocked all traffic to/from sshd, and now that sshd is linked ...
user avatar
2 votes
0 answers
410 views

How to block non-vpn traffic on Sierra?

I use an openvpn client to a private server. However, when I run pfctl -e -f /etc/pf.conf I have the following error that i can't fix on line 20 referring to antispoofing. If I remove the ...
user avatar
2 votes
0 answers
555 views

OSX Firewall 10.11 keeps getting turned off

For some time, several months at least, my inbuilt Firewall (OSX 10.11.x Application Level Firewall as available via Security and Privacy Preferences) keeps on getting turned off. It will be on for "...
user avatar
  • 21
2 votes
0 answers
210 views

Little Snitch shows ping flood to 0.0.0.192

My Little Snitch Network Monitor tells me my machine is ping'ing 0.0.0.192 every second. What's going on? EDIT: A Wireshark capture tells me this ping has Source 0.0.76.188 Destination 0.0.0.192
user avatar
  • 1,214
2 votes
0 answers
432 views

Any way to transparantly redirect outbound traffic to a particular IP:port on OS X?

OS: Yosemite Basically I am looking for something similar to Mac os x ipfw forward from ip:port to ip:port but since there is no ipfw on Yosemite is there a way to do this trick using pfctl or ...
user avatar
  • 193
2 votes
0 answers
156 views

CalenderAgent: howto allow connection only if needed?

I use Little Snitch, and there I can see that CalenderAgent still connects to Google and iCloud even if iCal is not running. For several reasons I want to allow CalenderAgent to make connections only ...
user avatar
2 votes
0 answers
277 views

Why does my firewall block connections even when it's off?

This most notably happens with iChat. I don't use a firewall, never have on this computer. When I first started using iChat (when Skype 5 came out and sucked hardcore) I couldn't video chat with ...
user avatar
  • 1,636
2 votes
3 answers
332 views

Starting `pf` Firewall at System Startup

I have a particular machine that I keep buttoned down very tight. Only a few specific ports/protocols are allowed. I have a pretty basic set of rules that work very well. While working on a different ...
user avatar
  • 1,638
1 vote
1 answer
37 views

How can I allow ONLY iMessage (and not web browsing) through a firewall?

I've looked up what TCP ports iMessage uses to communicate with and Apple says: 80 (TCP) 443 (TCP) 5223 (TCP) In my particular use-case, web browsing (80, 443) is not allowed. But we would like to ...
user avatar
1 vote
0 answers
20 views

Incoming Network Connection alert does not dismiss

I develop web applications and often get the Firewall alert on a new version of my code: This is OK (although I would prefer to just answer one and be done with it). The problem is that selecting ...
user avatar
1 vote
1 answer
88 views

Port forwarding

I would like to intercept the tcp traffic from a device on my network. I cannot change the destination but I set the router IP to the IP of my M1 Mac Mini. I used to do this with ipfw on a virtual ...
user avatar
1 vote
1 answer
94 views

pf.conf configuration?

I've been a Windows user for 35+ years and I'm new to Macintosh. I would like to configure PF firewall to block the ports below, incoming and outgoing on all interfaces. What commands do I need to use ...
user avatar
1 vote
0 answers
42 views

Remote sharing doesn't work even after allowing config in Firewall

I've allowed remote sharing in the Firewall And enabled remote sharing and remote login. I have Observe and Control enabled from the options dialog in Remote sharing. But remote sharing works only ...
user avatar
1 vote
0 answers
58 views

Modifying tcp packets going out on a specific port

I am newbie with pf. I want to modify all outgoing TCP traffic having destination port 8001. For that, firstly, I wanted to use pf to redirect all the TCP traffic at en0 with destination port 8001 to ...
user avatar
1 vote
0 answers
74 views

Monitor VM network with Little Snitch

I've upgraded to Big Sur (yep, late to the party), VM Ware Fusion 12 and Little Snitch 5. I get that kernel extension are no longer valid and VM Ware now uses the Apple network API. Previously I could ...
user avatar
  • 967
1 vote
0 answers
171 views

How can I stop the macOS firewall from blocking Django server (Python)?

For several years I have been regularly using Python's Django framework and running its web server for development purposes on my local machine. I took a break over the past year and am now returning ...
user avatar
1 vote
0 answers
93 views

Open port in firewall on Catalina

I'm trying to run a Kibana (from Elastic) server on an old Mac Mini on my local network. The Kibana instance is running successfully and I can access the UI locally and also from another machine on ...
user avatar
1 vote
0 answers
60 views

How to maintain a Mac protected on the Internet when any sharing is on?

Mac with Internet door closed When a Mac is connected to the Internet but no sharing is activated it is correctly protected on the Internet side. A protection situation one can check with a tool like ...
user avatar
  • 11.3k
1 vote
0 answers
54 views

How to use pf to route this scenario

Scenario I need pf on a Mac to do this: redirecting any connections to localhost:8080 to a public domain. --> localhost:8080 --> public domain Example The public domain is hosting a nginx server. ...
user avatar
1 vote
0 answers
4k views

How to get ufw(8)-like (Uncomplicated Firewall) functionality for macOS firewall?

How can I get ufw(8)-like (Linux Uncomplicated Firewall) functionality for macOS firewall? ufw enables per-IP-address/subnets and per-IP-port configuration. I see no way to do this with macOS sharing ...
user avatar
  • 1,177
1 vote
0 answers
3k views

Hamachi: Cannot ping my or anyone else's IP

I have been using Hamachi successfully on my computer for years, but recently, it's been acting up. I cannot ping anyone else on Hamachi. If I click them and hit ping, I just get: Request timeout for ...
user avatar
  • 403
1 vote
0 answers
111 views

How do I unblock vm from firewall?

How do I accept anything from my virtual machine (named vagrant). Tried to add this row in the /etc/pf.conf: pass in from 192.168.10.11 to 192.168.10.1 where .11 is the vm and the .1 is the host. ...
user avatar
  • 111
1 vote
0 answers
38 views

Macbook Pro keeps getting falsely black-holed by ISP(Building's) firewall?

I live in a building that provides internet (both wired and wifi), and has its own infrastructure. This has been going on since Friday, and is driving me insane. Here's the details: Macbook Pro Early ...
user avatar
  • 1,004
1 vote
0 answers
974 views

Airport Extreme firewall logging

I have a newer model (2013) Airport Extreme and have activated remote logging with level 7/debug messages going to a Linux box. However, I find the messages actually getting logged seem minimal, and I ...
user avatar
1 vote
0 answers
279 views

PF / IceFloor - Redirecting a service / port to a specific IP

What I'm trying to do is redirect all requests to a certain service or port to a specific IP address with IceFloor as the frontend for PF. In the example I'm posting en1 is my only enabled network ...
user avatar
  • 2,445
1 vote
0 answers
2k views

Is there a way to stop OS X opening NAT-PNP/uPNP holes for every open port on *?

With any luck, there's an easy work-around for this: curl ifconfig.me to find your external IP address sudo lsof -i4 -n | grep LISTEN | grep \* to find processes listening for connections from other ...
user avatar
1 vote
0 answers
68 views

How can I allow a "development" program through the firewall?

I have an application (java) that I compile/run through netbeans, I want to access it from a different computer. Opening a port might be the best solution, though if so I'd like to be a little more ...
user avatar
1 vote
0 answers
4k views

FTP: active vs. passive, command line vs. browser

Here's a weird one for everyone. I'll use AskDifferent because my test bed is on a Mac, but I don't know that the underlying issue is specifically Mac. My Mac is behind a NAT wall. Let's call my ...
user avatar
  • 141
1 vote
0 answers
2k views

How to open port 8080 on external interface?

I am running a server on port 8080, which I can access fine as localhost:8080 or 127.0.0.1:8080. However, assuming my IP address is 192.168.1.15, how can I access the port using 192.168.1.15:8080? ...
user avatar
  • 111
1 vote
1 answer
79 views

How do I trigger Appstore check for app updates manually?

I'm using a firewall and by default, everything, including checking for updates is blocked. In some situations, I'd like to disable the firewall and trigger such checks manually. How do I do that?
user avatar
  • 430
0 votes
0 answers
14 views

Is it possible to define groups of programs for which some rules apply in LittleSnitch?

While rules can be applied to Any process it does not seem to be possible to apply a rule to some programs. This would be nice functionality, since I would love for my browser rules to be applied to ...
user avatar
  • 449
0 votes
0 answers
10 views

Any way to use Handoff with "Block all incoming connections" enabled in Firewall?

My firm recently started requiring "Block all incoming connections" to be enabled in Mac Firewall: But with this turned on, I can no longer place phone calls from Mac via iPhone. I get a ...
user avatar
  • 3,632
0 votes
0 answers
19 views

Firewall bug; socket programming

I am seeking a work-around for a bug in MacOS 12.4. I write C++ programs that create TCP/IP listening sockets. When I launch one of them, I see an error dialog containing language Do you want the ...
user avatar
0 votes
0 answers
15 views

What ports and protocols does the Apple "Protect Mail Activity" indirect asset loading feature require?

What are the ports used by the indirect asset loading feature of the Apple Mail app?
user avatar
  • 231
0 votes
1 answer
25 views

I accidentally clicked deny on port open prompt

I'm developing an app that binds to a local address, on a random port when it runs. I used to get a prompt to allow connections but I accidentally pressed Enter key and I think I denied the terminal ...
user avatar
0 votes
0 answers
35 views

CardDAV: HTTP discovery requested, but port x is not allowed

I am currently programming a CardDAV/CalDAV server and would now like to test it on my Mac. The server runs on http://localhost:56510/ (or http://localhost:80/, but that makes no difference). But when ...
user avatar