Questions tagged [firewall]

Typically software that runs to prevent network traffic from reaching a computer. Also a hardware device that works on a network level rather than running on a single computer.

Filter by
Sorted by
Tagged with
106
votes
10answers
99k views

How to get rid of firewall “accept incoming connections” dialog?

I've accepted this so many times that firewall should already remember it. For example, I get it for Eclipse when starting my java programs in debugging mode ... sometimes this dialog is displayed ...
61
votes
3answers
73k views

What is the modern way to do port-forwarding on El Capitan? (forward port 80 to 8080)

The old utility ipfw was discouraged in recent versions of Mac OS X and is now gone from El Capitan. What is the modern way to do port forwarding in El Capitan? I simply want port 80 to forward to ...
30
votes
1answer
147k views

Should I block incoming connections from “netbiosd”?

My (application) firewall settings are configured to block incoming connections from netbiosd. I don't recall setting this myself, and wonder what the consequences are. What are the consequences of ...
26
votes
5answers
38k views

How can I get the exact URLs/requests that a program is trying to connect to?

I currently use Little Snitch to control network traffic on my Macbook Pro, and see what my apps are connecting to. Unfortunately, Little Snitch only shows you the hostname that an app is connecting ...
26
votes
2answers
15k views

Xcode.app gets scanned by socketfilterfw (OS X Firewall) at every launch

Situation: When I launch Xcode, socketfilterfw, OS X's application based firewall, starts using a lot of CPU. After some research I narrowed it down to this: socketfilterfw reads all the files in ...
21
votes
4answers
15k views

Enable ssh-key-only login to my Mac for 1 user

I have a Macbook Air that I would like to allow remote SSH access to without a password. I have created a user called remotepair that I have logged into and verified I can used the Mac with. I have ...
21
votes
3answers
67k views

How to restrict “Remote Login” (ssh) access to only certain IP ranges?

Can someone please tell me how to restrict SSH access only to certain IP ranges (e.g. local network) and not the whole Internet? I guess this has to be done via firewall.
20
votes
7answers
57k views

How to disable Apple Push Notification Service (apsd) which is trying to bypass firewalls

I am using an iMac at work, and the IT security guys are raising issue with the Apple Push Notification Service (apsd) trying to bypass the proxy continually. I would like to know how I can disable ...
19
votes
2answers
16k views

Reasons to prefer Little Snitch over the built-in firewall

Every now and then I browse through software you must have on your mac type lists and more often than not somebody mentions Little Snitch as a must-have application. Now what I think that many people ...
18
votes
3answers
46k views

How can I open a port (not application) in the OS X 10.6 firewall?

Let me preface this by saying: I do not want to drop my firewall completely Yes, I really do need particular ports rather than an application. So I see that there is the option to allow particular ...
18
votes
3answers
4k views

Do pre-built Little Snitch configurations exist and are they shared?

Is it possible to import configurations that have been created elsewhere into Little Snitch? For example, a ready to go basic ruleset for someone who wants to block iCloud's more intrusive features. ...
17
votes
4answers
32k views

What is the “akd” process, and do I need to allow it to connect to the internet?

I use Little Snitch as a Mac OS firewall. Usually, it's fairly clear to me what needs to connect to the internet and what doesn't. However, I can't figure out what akd is or does, and why it needs to ...
16
votes
4answers
57k views

How to open a specific port in Firewall OS X 10.9.4

How do I open a specific port in the firewall? I can not use the "allow connections from application" as I want to open the port for Jenkins, that is not on the list...
15
votes
1answer
12k views

How stealthy is the stealth mode of the firewall? Does it increase security?

In the System Preferences there is the option: `Security & Privacy -> Firewall -> Advanced... -> Enable Stealth Mode Does this options significantly increase the security when ...
14
votes
2answers
5k views

Disable Little Snitch in guest account?

It's annoying as hell to let others use your computer on a guest account with Little Snitch installed, all the consecutive popups one after another...it's really ridiculous. Also in the event my ...
13
votes
4answers
17k views

Why does Microsoft Word need to allow incoming network connections?

When I turn on the Mac firewall I get prompted to allow the MS office apps (Word, Excel, Powerpoint) to accept incoming connections. Why is this, and is it safe to allow it ? I'm running Mac OS 10.7....
13
votes
1answer
30k views

Firewall for outgoing connections

Is there a firewall for OSX Lion, that allows controlling of outgoing connections? The built in firewall handles only incoming connections, apparently.
12
votes
1answer
33k views

MacOS X - iptables?

Where is iptables in MacOS X? I'm running Yosemite 10.10.5 (14F27) and it seems to be missing. If it's not actually native to OS X, what's the best way to install it for this operating system? If for ...
11
votes
2answers
28k views

Does iOS have a firewall?

Does iOS support a built-in firewall like macOS does? I don't see anything about it in Settings.
8
votes
2answers
9k views

How do I drop outgoing packets to specific host/port?

I want to test something locally. For that, I'd like to be able to drop outgoing packets sent to a specific host/port. I tried messing around with pf rules using Murus (the non-free version), but have ...
8
votes
3answers
7k views

Blocking incoming hostile traffic dynamically with PF and fail2ban on OS X

The bigger picture is that I am trying to dynamically block/unblock IPs using fail2ban 0.8.14. I have been following an old guide for OS 10.5 with doesn’t include PF. I think I’ve configured ...
8
votes
2answers
4k views

Can I block ports and network traffic when using Personal Hotspot?

I would like to block ports and network traffic when using my jailbroken iOS device as a Personal Hotspot. The reason is I don't want my backup program, computer updates, or any high bandwidth usage ...
8
votes
2answers
70k views

How to open a port in macOS Sierra 10.12.4

I'm running macOS Sierra 10.12.4 and am trying to open a port (12345). I can't use the GUI firewall tool as it's app specific, not port specific. I have tried the following this article, but it did ...
7
votes
4answers
2k views

How to launch pf at startup?

I am looking for a pretty elegant way to launch the pf - a.k.a. Packet Filtering - process at startup. Using the launchctl or the pfctl commands, root privileges are required and so it is useless to ...
7
votes
4answers
17k views

Little Snitch reports outgoing connections for AirPlayXPCHelper for wrong subnets?

After upgrading to El Capitan, I've started noticing annoying connections from the AirPlayXPCHelper to 192.168.1.0/24 subnet (my home network isn't in 192.168.1.0/24 subnet, it's in 172.16.0.0/12 ...
7
votes
1answer
3k views

Dropbox109 process asking to access firewall on Yosemite

As the title says, I have a process called Dropbox109 asking to access the internet. I have denied it. I have Dropbox installed since Mavericks, and its been working fine (uploads/downloads/sync). ...
7
votes
1answer
550 views

Always Asked to Configure Firewall for iTunes

Whenever I open iTunes, I get the standard OS X dialog, Do you want the application "iTunes.app" to accept incoming network connections? Every time I click allow, but I am asked the same thing without ...
6
votes
4answers
1k views

Open ports. Safe?

My friend is currently running the default firewall with "Block all incoming connection" (except the basic ones like 80). I just scanned his mac for open ports and I found the following: Open TCP ...
6
votes
3answers
35k views

How can I setup my mac (OS X Yosemite) as an internet gateway

It should be possible, but I searched for a day and cannot get a decent HowTo. There seemed to be a Gateway Setup Assistant, but the Wikipedia link only goes to the server app now. Maybe it is easier ...
6
votes
3answers
12k views

Blocking internet access for a specific application on Mac OS X

How can I block internet access to a specific application in Mac OS X? I need this to be done from the command line and hopefully use the ipfw terminal command. Specifically I am looking to toggle ...
6
votes
1answer
765 views

How to open port 9150 on a Mac so external devices can connect to it?

On Localhost I can access and connect to port 9150, but on another devices on the network it cannot see the port and cannot connect to it. I've checked and there is no firewall on the network ...
6
votes
5answers
4k views

Is there a way to use different network connections for different apps

At work we have a firewall that prevents certain outbound connections. But I also have a Clear wireless personal hotspot. I would like to use the work connection for normal requests but for certain ...
6
votes
1answer
5k views

pfctl - howto add an anchor and make it active / load it

So i can add an anchor to the already enabled firewall by doing something like this: $ pfctl -a anchor_name -f /etc/anchor_rules.txt the file "anchor_rules.txt" might contain something like this: ...
6
votes
2answers
11k views

Mac OS X Server ignores remote HTTP connections, but accepts local ones

I cannot get Mac OS X Server's web server to accept connections from other machines on the same LAN. This is on OS X 10.8.2, running on a Mac mini which originally shipped with Lion Server. I can ...
6
votes
2answers
41k views

Apple USB Ethernet Adapter has a self-assigned IP address and will not be able to connect to the Internet

Cannot connect MacBook Pro (Retina, 15-inch, Mid 2015) (10.13.3) to the internet through my Apple USB Ethernet Adapter. I am receiving this error under System Preferences/Network: "Apple USB Ethernet ...
6
votes
3answers
6k views

Questions about how Internet Sharing works

A simple checkbox and a menu allow you to share your internet connection (no matter which interface you get it on) with any other interface (theoretically). But, the guts of this is a little confusing....
6
votes
2answers
11k views

Migration Assistant fails on Ethernet Mavericks-to-Mavericks migration

I have the following setup and am attempting the use Migration Assistant over Ethernet: Source machine: Early 2009 24-inch iMac running OS X 10.9 Destination machine: Latest MacBook Pro Retina ...
6
votes
2answers
3k views

“Accept incoming network connections” issue

Due to some graphic and/or code based changes, within programs like Dropbox, iTunes, jDownloader etc. (but mostly Java-based applications), the built-in firewall keeps asking for verification. ...
5
votes
4answers
24k views

Firewall settings with “imagent”

Among others that I recognize, I have the "imagent" been allowed to pass true my firewall (allow incoming connection). What/who is it, and do I must have it or can I just block it. I do not ...
5
votes
1answer
2k views

How to Use Terminal for “Little Snitch” Functionality without Little Snitch

I'm a Terminal newb, and trying to wrap my head around manual "Little Snitch" functionality without using Little Snitch. From the research I've been doing, I've landed on the fact that I need to ...
5
votes
2answers
3k views

How does Application Level Firewall work?

I'm a bit confused about OS X Mountain Lion's Application Level Firewall. I have enabled ALF (Application Level Firewall) in Settings -> Secuity & Privacy -> Firewall and have some rules for some ...
5
votes
2answers
2k views

I've got an error “This site is blocked due to content filtering.”

The first question is: How it works? And the main question is how to remove spying and traffic sniffing things from the Mac. I've uninstalled Microsoft Corporate Portal, restarted, but it didn't ...
5
votes
1answer
12k views

How to stop Windows firewall from blocking Bonjour hostname resolution

I have Bonjour installed on my Windows 7 PC, and the installer appears to have poked all the necessary holes in the Windows firewall. However, I can't ping windows-pc.local from my Mac. If I ...
5
votes
1answer
172 views

SSH daemon listens on both IPv4 and IPv6, but I can connect only over v6

Ok, maybe I'm weird or something, but I can't figure this one out. MacOS Mojave, native IPv6 from my ISP. As you can see, sshd is listening on both v4 and v6: alluminium:~ root# netstat -an | grep ...
5
votes
1answer
980 views

Which built-in tools do Little Snitch-like applications rely on?

Little Snitch is a well-known piece of software that allows Mac users to block outgoing connexions from a specific app. Now, whenever I ask how to do the same with built-in OS X tools, I get an ...
5
votes
2answers
6k views

How can I tell Firewall to allow incoming connections for Python.app running Django

Each time I run my Django development server, I get a dialog to allow incoming connections. No matter what I do : Click Allow in the dialog box Add to the Firewall via the OS X GUI (both real and ...
5
votes
2answers
4k views

What are the numerous incoming connections I see on public wifi for?

In general I have incoming connections disabled by my security software (Little Snitch). But even when I do this, on public wifi, I see numerous incoming connections for netbios and mDNSResponder ...
5
votes
1answer
792 views

socketfilterfw and repeating error messages

Every two seconds I get the following messages via Console: Standard 13:47:41.404793 +0100 socketfilterfw MacOS error: -67065 Standard 13:47:41.405321 +0100 socketfilterfw UNIX error ...
5
votes
1answer
388 views

Mountain Lion firewall is randomly delaying DNS requests

I recently experienced some delays during DNS host resolution on OS X 10.8. To test it I started a simple script which tries to repeatedly resolve the same hostname 20 times: #!/bin/sh for i in `seq ...
5
votes
2answers
7k views

Fixing “a sealed resource is missing or invalid” warning

I've changed the application icon of my Eclipse editor, and this causes a confirm dialog to pop up asking me if I allow the program to accept incoming network connections. I faced this before, but ...

1
2 3 4 5 6