Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

41 questions with no upvoted or accepted answers
Filter by
Sorted by
Tagged with
4
votes
0answers
651 views

Logging MacBook firewall is empty

I have enabled the built-in firewall on my MacBook (Sierra v10.12.1), but unfortunately the log files located in /var/log (appfirewall.log and alf.log) stay empty. I contacted Apple Support but they ...
3
votes
0answers
64 views

How do I prevent Apple Remote Desktop broadcasting over a specific network interface?

I have two active network interfaces on my machine connected to two different subnets. I run Apple Remote Desktop Admin to administer hosts on only one of the two subnets. How do I restrict Apple ...
3
votes
0answers
2k views

How can I enable DVD or CD Sharing with the Firewall on?

I'm trying to enable "DVD or CD Sharing" in the System Preferences. When I enable it, it says that the Firewall is blocking it. If I go into the Security > Firewall settings, I see that the first item ...
2
votes
0answers
29 views

macOS: Restricted admin account

Is it possible to create an admin account which will allow you to install programs, but not to force install programs that are not verified? In other words, an account that can do anything accept ...
2
votes
0answers
675 views

How to configure MacOS firewall to block outgoing IP ranges?

Recently I was watching a Gizmodo journalist's videos about her experiment with blocking outgoing connections to Google, FB, Microsoft and Apple. I wonder if it is possible to modify MacOS's built in ...
2
votes
0answers
173 views

How to prevent “Do you want the application foo to block incoming connections?” popup from command line

As a developer, I run a testsuite of some self-compiled binaries which try to listen on some ports on startup. This causes a barrage of popups "Do you want the application foo to block incoming ...
2
votes
0answers
18 views

Getting notification when firewall settings have changed

I'm using packet filter engine to setup my Firewall connection. However, there might be other entities that may override my firewall settings on the same way (processes running with 'root' privileges ...
2
votes
0answers
443 views

Blocking Incoming Connections to Open Port Daemons

OS: macOS 10.13.5 High Sierra; HW: Mid-2010 MacBookPro7,1 13” 2.66GHz Core 2 Duo I am interested in blocking incoming connections to Apple’s two persistent daemons with internet-facing open ports—...
2
votes
0answers
715 views

Captive portal on MacOS

I want to implement a basic captive portal. For the test setup, I have a mac mini connect to wifi (192.168.1.1) and ubuntu laptop connected to it via lan. What I am trying to achieve is for the the ...
2
votes
0answers
50 views

PHP mail not sending (possible macOS Server or Firewall issue?)

This is a relatively complex problem and LONG description, so bear with me. Please ask questions in the comments if you think I can clarify something. I am hosting multiple websites on a single ...
2
votes
0answers
544 views

Something has taken over Little Snitch?

Due to sad neglect, I own the computer from the exorcist. I finally looked last night and there were 80 sshd connections from China. I blocked all traffic to/from sshd, and now that sshd is linked ...
2
votes
0answers
361 views

How to block non-vpn traffic on Sierra?

I use an openvpn client to a private server. However, when I run pfctl -e -f /etc/pf.conf I have the following error that i can't fix on line 20 referring to antispoofing. If I remove the ...
2
votes
0answers
507 views

OSX Firewall 10.11 keeps getting turned off

For some time, several months at least, my inbuilt Firewall (OSX 10.11.x Application Level Firewall as available via Security and Privacy Preferences) keeps on getting turned off. It will be on for "...
2
votes
0answers
151 views

Little Snitch shows ping flood to 0.0.0.192

My Little Snitch Network Monitor tells me my machine is ping'ing 0.0.0.192 every second. What's going on? EDIT: A Wireshark capture tells me this ping has Source 0.0.76.188 Destination 0.0.0.192
2
votes
0answers
337 views

Any way to transparantly redirect outbound traffic to a particular IP:port on OS X?

OS: Yosemite Basically I am looking for something similar to Mac os x ipfw forward from ip:port to ip:port but since there is no ipfw on Yosemite is there a way to do this trick using pfctl or ...
2
votes
0answers
114 views

CalenderAgent: howto allow connection only if needed?

I use Little Snitch, and there I can see that CalenderAgent still connects to Google and iCloud even if iCal is not running. For several reasons I want to allow CalenderAgent to make connections only ...
2
votes
0answers
261 views

Why does my firewall block connections even when it's off?

This most notably happens with iChat. I don't use a firewall, never have on this computer. When I first started using iChat (when Skype 5 came out and sucked hardcore) I couldn't video chat with ...
1
vote
0answers
28 views

Enable packet filter firewall (pfctl -Ef) temporarily stops all network connection

I've noticed that when re-setting my firewall with a new set of rules, all network communication completely stops for a short time, until it regains with the new set of rules. In fact, it also ...
1
vote
0answers
106 views

How to block TCP connections from unidentified IP addresses mac

I started up a private minecraft server for my friend and I, and that required me to use generic TCP forwarding in order to open it up to accept his IP address. I used this program called serveo.io ...
1
vote
0answers
202 views

use `pf` to allow TCP traffic on specific port (from specific subnet)

So, I've read various posts about how to use both the Application Firewall (apf or socketfilterfw) and the Packet Filter (pf) at the same time. I thought this would be straightfoward since I'm not a ...
1
vote
0answers
249 views

How can I block all ports with PF except port 80 and 443?

How can I block/close (or drop all the packets coming from) all ports with PF except TCP port 80 and TCP 443? So I only want to make use of port 80 and 443 via TCP. I tried this, but I receive an ...
1
vote
0answers
46 views

How do I unblock vm from firewall?

How do I accept anything from my virtual machine (named vagrant). Tried to add this row in the /etc/pf.conf: pass in from 192.168.10.11 to 192.168.10.1 where .11 is the vm and the .1 is the host. ...
1
vote
0answers
131 views

Block internet/network access to a specific application, or just to launch an application?

We have a legacy application which tries to force login at startup - but the server is not accessible. If there is no internet it just skips login (talk about security). I have ethernet so I'm after ...
1
vote
0answers
296 views

Why can't I access HTTPS sites through my iPhone's hotspot?

I can access HTTP and HTTPS sites from the iPhone without any problems. However, when I use the iPhone as a hotspot and connect my laptop to the it, I can't access HTTPS sites from the laptop. It's ...
1
vote
0answers
33 views

Macbook Pro keeps getting falsely black-holed by ISP(Building's) firewall?

I live in a building that provides internet (both wired and wifi), and has its own infrastructure. This has been going on since Friday, and is driving me insane. Here's the details: Macbook Pro Early ...
1
vote
0answers
858 views

Airport Extreme firewall logging

I have a newer model (2013) Airport Extreme and have activated remote logging with level 7/debug messages going to a Linux box. However, I find the messages actually getting logged seem minimal, and I ...
1
vote
0answers
246 views

PF / IceFloor - Redirecting a service / port to a specific IP

What I'm trying to do is redirect all requests to a certain service or port to a specific IP address with IceFloor as the frontend for PF. In the example I'm posting en1 is my only enabled network ...
1
vote
0answers
1k views

Is there a way to stop OS X opening NAT-PNP/uPNP holes for every open port on *?

With any luck, there's an easy work-around for this: curl ifconfig.me to find your external IP address sudo lsof -i4 -n | grep LISTEN | grep \* to find processes listening for connections from other ...
1
vote
0answers
64 views

How can I allow a “development” program through the firewall?

I have an application (java) that I compile/run through netbeans, I want to access it from a different computer. Opening a port might be the best solution, though if so I'd like to be a little more ...
1
vote
0answers
4k views

FTP: active vs. passive, command line vs. browser

Here's a weird one for everyone. I'll use AskDifferent because my test bed is on a Mac, but I don't know that the underlying issue is specifically Mac. My Mac is behind a NAT wall. Let's call my ...
1
vote
0answers
1k views

How to open port 8080 on external interface?

I am running a server on port 8080, which I can access fine as localhost:8080 or 127.0.0.1:8080. However, assuming my IP address is 192.168.1.15, how can I access the port using 192.168.1.15:8080? ...
0
votes
0answers
16 views

Program mouse and keyboard movements to be run with input on Mac

This is a very specific question. I'm running a gaming server for my friends and I to play on (on my old iMac that I just use as an external monitor for my MacBook Pro now), and I have a firewall in ...
0
votes
0answers
53 views

Mac OS X firewall rules to block UDP connection to an external server

Can anybody help to recommand a firewall app for Mac OS X? I'm going to block UDP connection to an external server, and then I need to check whether it switch to TCP connection to the server ...
0
votes
0answers
17 views

Any way to block a specific HTTPS request from a specific application?

There's an app running on my mac (macOS 10.12.6) that occasionally makes an HTTPS request to a resource at a specific URL. I'd like to block this request, but allow all other requests from this ...
0
votes
0answers
15 views

Firewall off by default, and when I turn it on it doesn't block connections

Yesterday, I had to get a PHP app running locally on my brand new, plain-vanilla Mac Mini. I was disturbed (to put it mildly) to discover that Apache was already installed, and running, and serving ...
0
votes
0answers
181 views

`pf` - No ALTQ support in kernel - ALTQ related functions disabled

I'm using pf on my server, and it's working great. So much easier to use than ipfw (after some initial config confusion). But there is one thing that is driving me nuts.... I'm sure you probably ...
0
votes
0answers
783 views

PF Firewall on macOS Mojave - Block outbound rule not working (blocking Plex SSDP/UDP broadcast)

All, I'm new to pf please forgive my ignorance in advance. I'm attempting to block an SSDP/UDP Broadcast from my Plex Server on a Mac Mini to the LAN. The Mac Mini is on internal IP address 192.168.2....
0
votes
0answers
86 views

Passing L2TP over IPSec VPN through a `pf` Firewall

I am trying to set up some custom firewall rules in the pf firewall in macOS (10.11 in this case). These are traditional network-based rules, not application-specific rules. I'm having some issues: ...
0
votes
0answers
102 views

Is it possible for someone to initiate a screen sharing session while my Mac is asleep?

Today when I got home and awoke my MacBook Air (running OS X 10.11.6) from sleep by lifting up the lid to login into it, I noticed the little Screen Sharing icon in the top-right corner (to the left ...
0
votes
0answers
492 views

Bandwidth throttling with onboard tools in Yosemite?

Is there any way with Mac OS Yosemite's built-in firewall to throttle or queue connections from a single application, on a single port or to a certain hostname? The App in question would be the ...
0
votes
0answers
170 views

SelfControl not blocking anything

I have used SelfControl to block the internet for some time, but now it won't block anything anymore. (Edit: Well, acutally one moment SelfControl blocks some sites, then allows them again, apparently ...