Skip to Content
Mac® Security Bible
book

Mac® Security Bible

by Joe Kissell
January 2010
Beginner to intermediate
936 pages
27h 45m
English
Wiley
Content preview from Mac® Security Bible

17.2. Using Mac OS X's Application Firewall

Mac OS X has had some kind of built-in firewall for a number of years. Up until Mac OS X 10.4 Tiger, the sole firewall included was IPFW (IP Firewall), a popular Unix firewall. System Preferences provided a graphical interface for setting up IPFW, but it was quite limited in the range of settings you could change; and despite offering only a simplified glimpse into IPFW, the preference pane was confusing for inexperienced users. Those who wanted more control over IPFW could use any of several third-party configuration tools or, if they were of a suitably geeky disposition, manually edit the text file that contained all the rules IPFW uses.

Leopard and Snow Leopard contain two firewalls. IPFW is still there, but it's turned off by default and accessible only from the command line or by using a specialized tool. I discuss both approaches later in this chapter. The new default firewall — and the one you can now configure in System Preferences — is an application firewall. That is, instead of allowing or blocking network access to individual packets based on the IP address or port of the incoming data, it allows or blocks incoming access to particular applications on your Mac.

NOTE

The very first release of Mac OS X 10.5 had significant problems with its application firewall; these were corrected in version 10.5.1 and later releases.

The big advantage of Mac OS X's application firewall is that it's far simpler to understand and use than ...

Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.

Read now

Unlock full access

More than 5,000 organizations count on O’Reilly

AirBnbBlueOriginElectronic ArtsHomeDepotNasdaqRakutenTata Consultancy Services

QuotationMarkO’Reilly covers everything we've got, with content to help us build a world-class technology community, upgrade the capabilities and competencies of our teams, and improve overall team performance as well as their engagement.
Julian F.
Head of Cybersecurity
QuotationMarkI wanted to learn C and C++, but it didn't click for me until I picked up an O'Reilly book. When I went on the O’Reilly platform, I was astonished to find all the books there, plus live events and sandboxes so you could play around with the technology.
Addison B.
Field Engineer
QuotationMarkI’ve been on the O’Reilly platform for more than eight years. I use a couple of learning platforms, but I'm on O'Reilly more than anybody else. When you're there, you start learning. I'm never disappointed.
Amir M.
Data Platform Tech Lead
QuotationMarkI'm always learning. So when I got on to O'Reilly, I was like a kid in a candy store. There are playlists. There are answers. There's on-demand training. It's worth its weight in gold, in terms of what it allows me to do.
Mark W.
Embedded Software Engineer

You might also like

Access Control, Authentication, and Public Key Infrastructure, 2nd Edition

Access Control, Authentication, and Public Key Infrastructure, 2nd Edition

Mike Chapple, Bill Ballad, Tricia Ballad, Erin Banks
What Successful Project Managers Do

What Successful Project Managers Do

W. Scott Cameron, Jeffrey S. Russell, Edward J. Hoffman, Alexander Laufer
How to Overcome a Power Deficit

How to Overcome a Power Deficit

Cyril Bouquet, Jean-Louis Barsoux

Publisher Resources

ISBN: 9780470474198Purchase book