Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [ipfw]

IP packet filter (firewall) included in Mac OS X from 10.0-10.9.

0
votes
2answers
284 views

How to block everything except my connection to the VPN?

I'm trying to make Murus block everything, except my connection to the VPN server. I don't want my Mac to make any outbound calls to any ports unless via the VPN connection. I'm trying to add a rule ...
5
votes
1answer
249 views

sharing internet/vpn with ipfw, can't access google.com over https

I am sharing my internet connection / IKEv2 VPN connection over pf via Murus static NAT. My network architecture is as follows: internet modem -> wired router (serving 192.168.1.1/24) -> Mac ...
2
votes
0answers
80 views

How to install a DHCP server (wireless router or access point) downstream of Murus Static NAT internet sharing?

I am currently sharing my Mac's ethernet connection via Murus static NAT. Upstream I only have a cable modem, so the IP address of Mac #1 is my ISP-provided external IP. I am running an ethernet USB ...
0
votes
1answer
437 views

Automating pfctl to block incoming connections and IPs

I get a lot of unwanted traffic from Chinese IP addresses. I'm using an old Mac with OS X 10.7.5 (my Mac is ancient, so I cannot update further), so I imagine it's more vulnerable than a newer Mac ...
1
vote
2answers
160 views

ipfw ruleset limit

We are using ipfw in OSX 10.6 Server, 10.7 Server... all working fine until we add too many rules, I think. ipfw will still work, but only process up to certain number of rules. Currently wc -l /...
1
vote
1answer
592 views

Murus firewall - redirect an ip to localhost web server

Edited to simplify question: using host file, we can redirect a domain (example.com) to localhost: 127.0.0.1 example.com How can we redirect an ip (for example 35.166.133.11) to localhost (web ...
3
votes
1answer
2k views

Corresponding ipfw rules in MacOS for this Iptables rules

I need to give Internet access to a VM under Vmware fusion 7 in Host-Only mode. I know how to do it in Linux, with the following IPtables rules: sysctl -w net.ipv4.ip_forward=1 iptables -A FORWARD -...
2
votes
1answer
10k views

How can I open a port (not application) in the macOS Sierra firewall?

I am trying to follow up on this thread and to update it for macOS Sierra (and probably all versions since Yosemite). In that thread, a way to open a single port in the OS's firewall was suggested: ...
4
votes
1answer
2k views

how to throttle Internet bandwidth?

In previous releases of OS X, there was a command called ipfw, that permitted throttling of network bandwidth, which is useful for running some kinds of tests on software. It appears that as of ...
2
votes
1answer
2k views

Port forwarding Yosemite

I have a server running on my iMac (port 8000) and I want my iPad to be able to visit it through the local network so I set this rule using pf anchors (hence ipfw is gone). It doesn't work, what am I ...
0
votes
1answer
250 views

Is there a way to do per-application rules in pfctl/alf?

I'd like to implement a mitmproxy for a single application on my mac. Pfctl doesn't natively have (from what I can see) support to set rules based on the application source/dest of the packets, but ...
1
vote
1answer
521 views

Forwarding a single port from one network adapter to another?

I have a Parallels Desktop virtual machine with Host-Only networking. I want to set up Remote Desktop on Windows (port 3389) while not exposing any other part of Windows to the external network. ...
0
votes
1answer
3k views

How to block and unblock the media ports in MAC OSX 10.9? [duplicate]

I am working on a test project that requires me to block all media ports on my Mac OS X 10.9. The instructions I'be veen given are "Chinese" to me :-) I have no idea how and where to start, let ...
6
votes
3answers
13k views

Which setting in osx could block “ping localhost”?

How can I detect which setting in the OS X could block ping localhost? IPFW, LittleSnitch no such rules? Update 1: > cat /etc/hosts 127.0.0.1 localhost 255.255.255.255 broadcast
2
votes
3answers
4k views

Firewall on iPhone/iOS (ipfw or pf)

I want to run ipfw or pf on my iPhone -- or the equivalent. Seems simple, but I can't find anything that works. Device is jailbroken, looked very carefully through Cydia, and even through some of ...
7
votes
1answer
12k views

Mac os x ipfw forward from ip:port to ip:port

I want when on my local machine redirect from 192.168.64.88 port 80 to localhost port 9790. How can I do it with ipfw rule?
2
votes
1answer
695 views

Configure ipfw to filter by ip range

I am a Linux user and very new to OSX. I have an OSX 10.7.5 "Lion" server that I am configuring as a webserver. I only have shell access. I am tryin to configure the firewall, but ipfw is quite ...
5
votes
2answers
3k views

How does Application Level Firewall work?

I'm a bit confused about OS X Mountain Lion's Application Level Firewall. I have enabled ALF (Application Level Firewall) in Settings -> Secuity & Privacy -> Firewall and have some rules for some ...
1
vote
1answer
702 views

IPFW: IP blocked, but still can get in

I am using Fail2Ban to dynamically add rules to IPFW. The offending IP addresses are added into IPFW, but for some unknown reasons they can still get through to Apache and make requests. Is it ...
4
votes
1answer
6k views

Is ipfw available in Mountain Lion?

Is ipfw available in Mountain Lion? The reason for asking is that they introduced pf in Lion, but kept ipfw, however there is a chance that ipfw would eventually be removed. I found this: Can I use ...
0
votes
1answer
1k views

How to create OS X Server Admin firewall rules using ip address groups by command line?

The (Lion) Server Admin.app has a nice ability to apply firewall rules to ip address groups without having to edit ipfw config files. But having to enter large and long lists of IP addresses using ...
1
vote
0answers
736 views

How do i use ipfw to allow some sites and block all sites

I am new to ipfw, my requirement is like that, once application launches,i need to read the certain application parameter and depending upon them, i should be able to allow some site and block others, ...
3
votes
4answers
7k views

How do I use ipfw to allow LAN access but deny Internet access?

How can I use ipfw (or another tool, if one is available) to allow unlimited access between computers on my LAN, but not allow access to the Internet? (The IPs on my local LAN are 192.168.0.xxx)
2
votes
1answer
2k views

Is ipfw the same as pf in FreeBSD?

I'm wondering if references referring to pf in FreeBSD are applicable to ipfw in Mac OS X Snow Leopard? I'd like to know to see if it's worthwhile to consult books on pf for use with Mac OS.