You can use both ipfw an Apples new Application Firewall:
http://docs.info.apple.com/article.html?artnum=306938
"Earlier ipfw technology is still accessible from the command line (in Terminal) and the Application Firewall does not overrule rules set with ipfw; if ipfw blocks an incoming packet, the Application Firewall will not process it."

So just configure re-use your Tiger ipfw rules, or set new ones (Consider using the WaterRoof gui)



[ Reply to This | # ]

What I suggest is also suggested on Waterroof's website, but in case someone might miss it there: Noobproof provides a very simple ipfw GUI that provides a list of common services for which you can set allow/deny. It also lets you add stuff. I'm comfortable with ipfw and the old firewall, and I still chose Noobproof for a quick and easy tool.

One other note: if you're behind your own router, you can probably choose Allow All in the Leopard firewall. On the road you can go for the Allow selected or whatever the 3rd option is called. It's annoying that 3rd option, asking you for permission each time you launch something.

But then again, I've sat and watched the logs on my server as someone from Russia knocked on my door #22 all morning. So it never hurts to be safe.

[ Reply to This | # ]