[Bluebomber21XX]

I know someone here posted a message that told how to block the Office v. X apps from sending data about their registration.

Problem is, I can't find it. The command was something like:

"block out from any to any on any"

Can anyone find this thread, or do they know the commands for this? I'm really paranoid about apps sending out info about me, so...

[Scrod]

Office X doesn't send out information about you. In fact, it doesn't send any information out on the internet at all. It only looks for other copies of itself on your local network.

[aenemated]

but for some of us <ahem> poorer users ... a firewall does wonders.

[jguidroz]

I don't know the port number to block but you would type....

sudo ipfw add 10000 deny udp from <youripaddress portnumber> to any

sudo ipfw add 10001 deny udp from any to <youripaddress portnumber> via en0

There are two port numbers needed. Office v.X sends out on one and receives in on the other. The first statement blocks any udp sends from your computer, and the second blocks any udp requests to your computer. You don't need the <> but you do need a space between ip address and port number.

I put the 10000, 10001 as a number for the rules. This is how it would be on my computer since I set up a firewall already. If you don't add the 10000, 10001, it will set the rules up as 100 and 200.

[dtriska]

http://forums.macnn.com/cgi-bin/ulti...&f=46&t=000734

[BTP]

(using the terminal):

sudo ipfw add 0 deny udp from any to any 2222
sudo ipfw add 0 deny tcp from any to any 3464

do those 2 commands and office will still work fine.

[godzookie2k]

<BLOCKQUOTE><font size="1"face="Geneva, Verdana, Arial">code:</font><HR><pre><font size=1 face=courier> The only way to go through this, is to set up the OS X firewall on each computer of the LAN. The easiest way to do this is to use a font end, FireWalk X.

You just need to deny acces , via TCP, of any incomming IP to the following ranges of ports :
- <font color = blue>3000</font> to <font color = blue>4000</font>
- <font color = blue>5000</font> to <font color = blue>65535</font>

So you just need two rules:
- deny IP [your entire subnet, for exemple <font color = blue>10.0</font>.<font color = blue>1.</font>x or, <font color = blue>192.168</font>.<font color = blue>0.</font>x] coming from all ports to access ports <font color = blue>3000</font> to <font color = blue>4000</font>
- deny IP [your entire subnet, for exemple <font color = blue>10.0</font>.<font color = blue>1.</font>x or, <font color = blue>192.168</font>.<font color = blue>0.</font>x] coming from all ports to access ports <font color = blue>50000</font> to <font color = blue>65535</font>

Set up firewall on each computer of your LAN, and that's it : you can use Office v.X at the same time on every computer of your LAN. </font>[/code]

[ 11-18-2001: Message edited by: godzookie2k ]

[Vader's Robotic Stump]

Originally posted by BTP:
<STRONG>(using the terminal):

sudo ipfw add 0 deny udp from any to any 2222
sudo ipfw add 0 deny tcp from any to any 3464

do those 2 commands and office will still work fine.</STRONG>

I did those hacks but it seems that it didn't work. I think office is using more ports then that. How exactly can I watch what ports it is using?

[RoofusPennymore]

I only use this:

sudo ipfw add 0 deny udp from any to any 2222

And it works just fine.

[jguidroz]

Originally posted by RoofusPennymore:
<STRONG>I only use this:

sudo ipfw add 0 deny udp from any to any 2222

And it works just fine.</STRONG>

You have to remember to do that after every restart because the firewall does not remember it after a shutdown.

[RoofusPennymore]

Originally posted by jguidroz:
<STRONG>

You have to remember to do that after every restart because the firewall does not remember it after a shutdown.</STRONG>

Yup, but rarely are both computers using a MS app so I don't usally have to. Wonder if it's possible to make an applescript that does this and set it as a logon item?

[Severed Hand of Skywalker]

Since I have a router I think I can also do it that way. Problem is I have no clue how to do it on my LinkSys.

[Eug]

<STRONG>sudo ipfw add 0 deny udp from any to any 2222</STRONG>

I am a Unix newbie and don't quite understand the explanation given higher up. Oh well.

I loaded up Office beta a few times and then used the Network Utility to scan the ports. The ports are random, but it seems they were all in the 3000-4000 range somewhere, as someone suggested.

<STRONG>Since I have a router I think I can also do it that way. Problem is I have no clue how to do it on my LinkSys.</STRONG>

Am I right to think that one can do the blocking on the Linky @ 192.168.1.1--&gt;Advanced--&gt;Filters--&gt;Filters Private Port Range?

[ 11-30-2001: Message edited by: Eug ]

[mr_sonicblue]

I've been using the following command for a while, and it DOES WORK PAST REBOOTS...

sudo ipfw add deny udp from any to any 2222

EDIT: Remember, you have to enter it on each computer with Office...

[ 11-30-2001: Message edited by: mr_sonicblue ]

[RoofusPennymore]

Originally posted by mr_sonicblue:
<STRONG>I've been using the following command for a while, and it DOES WORK PAST REBOOTS...

sudo ipfw add deny udp from any to any 2222

EDIT: Remember, you have to enter it on each computer with Office...
</STRONG>

That's the same exact command I use but I have to type it into the terminal each time I reboot. How does yours remember?

[malvolio]

Mine remembers too. I know this from using the monitoring function of FireWalk, which shows me repeated blocking of poor Office's attempts to connect through port 2222.

[Immortal K-Mart Employee]

Originally posted by mr_sonicblue:
<STRONG>I've been using the following command for a while, and it DOES WORK PAST REBOOTS...

sudo ipfw add deny udp from any to any 2222

EDIT: Remember, you have to enter it on each computer with Office...
</STRONG>

Strange, I did just that one each computer and it forgets after a restart.

[jguidroz]

Either need to use a graphical UI to manage the firewall, or manually create the necessary files for placement in the StartupItems for it to load the firewall rules each time. Then there is also editing /etc/hostconfig so you can manually turn on and off the firewall. Choose which method you want.

If anyone wants help on how to set up the firewall manually, email me at [email protected]. I'll also help if you want a firewall that does more than just block out Office v.X transmissions.

Yes can do all this with a graphical UI, but some of us prefer the other way.

[ 11-30-2001: Message edited by: jguidroz ]