[kevs]

In using Apple’s Firewall, does anyone know the precise terminal command to allow to and from access from a specific ip address? Thanks!

[Pierre B.]

It is ipfw.

[pat++]

sudo ipfw add allow ip from x.x.x.x to any
sudo ipfw add allow ip from any to x.x.x.x

where x.x.x.x is an ip address.

[kevs]

Thanks Pat!

Is there an official place I can see that command listed. Someone else said it was:

udo /sbin/ipfw add 3000 allow tcp from 1.2.3.4 20-21 to any via any in
sudo /sbin/ipfw add 3010 allow tcp from 1.2.3.4 1024-65535 to any via any in


I'd really like to see this command listed somewhere definitively.

Further, I have a firewall on to make sure no one gets into my computer -- whatever that means... If I were to check the "allow ftp access" and leave that on permanently to allow, would I be comprising my computer in any way? The guy at my ftp host does not think I would.

Lastly, it seems the Apple FW goes off once in awhile, says, "firewall unavailable, there is a firewall alreay installed on your machine", do you know what causes that?

[RevEvs]

just check the ipfw man page, that'll have it listed definitively.

'man ipfw'


revs

[kevs]

thanks!
Is there a url for that? I've never heard of it yet.

[Dex13]

Originally posted by kevs:
thanks!
Is there a url for that? I've never heard of it yet.

In the terminal type ipfw man

[King Bob On The Cob]

Originally posted by Dex13:
In the terminal type ipfw man

Other way around me-thinks

Open up the Application "Terminal" In the Utilities folder in Applications

wait for it to finish starting up, then type

Code:
man ipfw

There will be a technical manual on how to use the ipfw firewall.

[kevs]

thanks King bob:
not eveyone know what man means. I thoght he was saying man, like bro. It's a manual.

Unfortunately, not much or easy, but I don't speak Greek or latin either.

Let me try this question again:

In just opening the firewall port to ftp, and leaving it open all the time, would you be comprimising your security?

[Don Pickett]

Originally posted by kevs:
thanks King bob:
not eveyone know what man means. I thoght he was saying man, like bro. It's a manual.

Unfortunately, not much or easy, but I don't speak Greek or latin either.

Let me try this question again:

In just opening the firewall port to ftp, and leaving it open all the time, would you be comprimising your security?

Depends if that port is tied to a service which can be exploited. Opening ports 21 and 22, for instance, and having FTP running on your machine, could lead to an exploit of some sort.

[Some Guy []]

Originally posted by kevs:
Lastly, it seems the Apple FW goes off once in awhile, says, "firewall unavailable, there is a firewall alreay installed on your machine", do you know what causes that? [/B]

this only happens when you've manually entered some ipfw settings in the terminal or if some other app has.


-justin