Hot answers tagged

6

Selecting the option to "Block all incoming connections" prevents all sharing services, such as File Sharing and Screen Sharing from receiving incoming connections. Start with the firewall general help is my advice. https://support.apple.com/en-us/HT201642 Once you know how those controls work, a follow-on question might work on how to lock this ...


4

There's no similar network-wide opt-out canary domain feature for iOS and macOS in general. However, if you use for example Firefox on macOS, you can use that feature to disable it for that one browser in particular - unless the user opts-in to DoH/DoT in which case the feature does not do anything. You can usually block DoT in your OpenWrt router by ...


3

I prefer to do this with MDM supervision as that’s the easiest way. https://support.apple.com/guide/deployment-education/choose-a-mobile-device-management-solution-asm1c1be3511/web https://www.fleetsmith.com/ https://app.jamfnow.com/devices I would start with the free JAMF Now trial since I’ve used it but I hear great things about FleetSmith. Here is the ...


3

It's using a totally different averaging method. It's not examining the exact start & stop point that Speedtest is, it's just doing an average over the past 5 seconds. I got 217mbps Speedtest, 20MB/s Activity Monitor. It took it at least 2 updates to even reach that, by which time Speedtest had just about finished. Switching Activity Monitor from its ...


3

Rather than fight your security team or do their job I suggest you turn on your firewall and block all traffic, and ask them to rescan. That should fix their bad detection problem. Unless you’re running docker or another actual Linux VM, their fingerprint detection is incorrect or the scan isn’t of your machine. I would even offer to connect to their network ...


2

Just connect to the share that you want to connect to on startup. Then, add that to your Login Items under your account in User & Groups in your Systems Preferences. Make sure that you save the password to the volume when connecting, otherwise you'll have to enter on connecting.


2

You can simply use the route(8) command $ route get 8.8.8.8 route to: dns.google destination: default mask: default gateway: 192.168.0.1 interface: en0 flags: <UP,GATEWAY,DONE,STATIC,PRCLONING> recvpipe sendpipe ssthresh rtt,msec rttvar hopcount mtu expire 0 0 0 0 0 0 ...


1

I don't think there is a way to restart the TCP stack, but the question should be why TCP becomes unresponsive, it must be hitting some limits in the stack. If the service creates new connections to answer incoming requests, it is possible you're hitting the default 16K limit on ephemeral ports and the even more problematic 30s (MSL*2) timeout on TIME_WAIT ...


1

If all you need is a firewall, that is well documented how to turn it on and make exceptions to the default rules. https://support.apple.com/en-us/HT201642 In the advanced settings there is a “block all incoming connections” toggle for that specific simple configuration.


1

I analysed the traffic with tcpdump -k port 53 (suggested by this Reddit thread), and it turns out it was expressvpnd, part of Express VPN. That was surprising, because I didn't have Express VPN client running, but it appears to set up a demon that sends DNS queries to captive.apple.com and www.mb6gpu84.com even when the app is not running. I removed ...


1

As far as I know all Macs sold within the last many years support AP mode. I doubt that your problem is that your WiFi card does not support AP mode, rather it is the fact that you're operating on a virtual network interface inside VirtualBox or Docker - and that doesn't allow exposing such features to the guest OS. Instead remove the WiFi interface from the ...


1

You can avoid this pop-up when running local tests if you specify the host portion of the address that will be listened to to be "localhost" or "127.0.0.1". Many programs let you set the address through the command line or an environment variable and many of those programs will default to passing no host to the listen command. With no ...


1

Had this issue for a long time with our 500+ Macs. Our setup was the Meraki Wifi with about 60 AP's on 3 floors and all dhcp/routing handled by the Fortigate firewalls. Users were floating about the office plugging into both wifi and ethernet simultaneously. Tried pretty much everything from flattening the network, reducing VLANS, reducing the scope so ...


1

I had a similar problem noted herein. I had tried all above with no luck. It then occurred to me that sometimes the KeyChain for a given password (in this case to the SSID on my router) gets corrupted or some such problem. I went into KeyChain, deleted the entry for the SSID for my router, and then all was well; upon netr trying to login using that SSID, I ...


1

I was having the same issue on one of my machines running both macOS Catalina and Big Sur. Tried forgetting the network and joining again, doing an SMC reset, and a few other solutions with no luck. I was finally able to find a fix for it today (also posted it here https://alihaghani.me/blog/fix-mac-not-having-internet-access-on-wake): Go to System ...


Only top voted, non community-wiki answers of a minimum length are eligible