Welcome to the MacNN Forums.

MacNNUK · 05:12 AM

Simple question really, in Sys Prefs Security, which of the following three alternatives turns the OSX Firewall on ?

Is the first one default OFF ?

What's the difference between two and three ?

I've read ( and re-read) various articles and other posts, and I'm not really any the wiser.

Do I need to add anything in the access box for two and three ?

My internet connection is Broadband, using OS 10.5.6

Simon · 02:42 AM

1 is off.
2 is nobody really knows.
3 is on and on a per-app basis.

Chose 3. When for the first time an app requests an incoming connection you will be asked if you want to grant access. Consider if that app needs access (ssh for example) or if it's just phoning home.

BTW, here's a good article on Leopard's Firewall. And here's the follow-up.

MacNNUK · 05:13 AM

Originally Posted by Simon

1 is off.
2 is nobody really knows.
3 is on and on a per-app basis.

Choose 3. When for the first time an app requests an incoming connection you will be asked if you want to grant access. Consider if that app needs access (ssh for example) or if it's just phoning home.

BTW, here's a good article on Leopard's Firewall. And here's the follow-up.

Thanks, I've now selected option three.

And thanks for the links.

Do I need to add or remove anything from the access selection box ?

Gavin · Mar 14, 2009, 04:45 AM

The little question mark at the bottom of the window will fire up the help browser/manual.

Interestingly the help does not quite match the control. it says:

To have your firewall prevent connection of all services and applications, select “Block all incoming connections.”

which is not actually one of the options

MacNNUK · Mar 14, 2009, 05:07 AM

Originally Posted by Gavin

The little question mark at the bottom of the window will fire up the help browser/manual.

Interestingly the help does not quite match the control. it says:

To have your firewall prevent connection of all services and applications, select “Block all incoming connections.”

which is not actually one of the options

That was one of the things that confused me !

Having selected option three, when I opened Excel, after rebooting, it asked me if I wanted to accept external connections, so I said yes.

Now this appears in the access box, so presumably these will be added to as I accept or deny external connections.

Interesting though, Mail, Camino, NetNewsWire (RSS) and Firefox did not ask me, I would have expected they would being specific Internet apps.

MacNNUK · Mar 14, 2009, 05:26 AM

Originally Posted by Simon

1 is off.
2 is nobody really knows.
3 is on and on a per-app basis.

Choose 3. When for the first time an app requests an incoming connection you will be asked if you want to grant access. Consider if that app needs access (ssh for example) or if it's just phoning home.

BTW, here's a good article on Leopard's Firewall. And here's the follow-up.

Reading the second link, it suggested Waterroof,
http://www.hanynet.com/waterroof/

Do I need this, will it work in conjunction with Mac Firewall, it does look a little hard to set up for myself ?

OreoCookie · 08:24 AM

MacOS X has two built-in firewalls: a new application-based firewall (the one you can configure in the System Prefs) and ipfw, the one Apple used till Tiger. There are several graphical configuration utilities for ipfw, I recommend Flying Buttress instead of Waterroof.

Switch off the application-based firewall before configuring ipfw, though.

MacNNUK · 08:24 AM

Originally Posted by OreoCookie

MacOS X has two built-in firewalls: a new application-based firewall (the one you can configure in the System Prefs) and ipfw, the one Apple used till Tiger. There are several graphical configuration utilities for ipfw, I recommend Flying Buttress instead of Waterroof.

Switch off the application-based firewall before configuring ipfw, though.

Excellent tip, thanks

Can both Firewalls be used at the same time, if not, which one is recommended.

dimmer · Mar 14, 2009, 08:53 PM

Mail, Camino etc. don't require/allow inbound connections: they open the connection, and data is returned along (basically) the same path they've opened. I'm not at all sure why the Office '08 products need to allow inbound connections -- anyone have an answer to that?

MacNNUK · Mar 14, 2009, 09:12 PM

Originally Posted by dimmer

Mail, Camino etc. don't require/allow inbound connections: they open the connection, and data is returned along (basically) the same path they've opened. I'm not at all sure why the Office '08 products need to allow inbound connections -- anyone have an answer to that?

To check for / allow updates ?