10.5: Use a custom firewall in 10.5 with ipfw

Search

From our Sponsor...

User Functions

Don't have an account yet? Sign up as a New User
Lost your password?

What's New:

Hints

No new hints

Comments last 2 days

Links last 2 weeks

No recent new links

What's New in the Forums?

The Editor's Corner...

Here are some of my (robg) other projects...

•	The Robservatory My blog - Macs, tech, etc.
•	Mac OS X Power Hound The best of Hints in print
•	Inside iWork An iWork training DVD
•	Macworld Column, features, online...

Hints by Topic

News from Macworld

The macosxhints Poll

What version of OS X are you running as your main OS?

Other polls | 11,528 votes | 42 comments

10.5: Use a custom firewall in 10.5 with ipfw | 19 comments | Create New Account

Click here to return to the '10.5: Use a custom firewall in 10.5 with ipfw' hint

The following comments are owned by whomever posted them. This site is not responsible for what they say.

10.5: Use a custom firewall in 10.5 with ipfw
Authored by: Brathahn on Fri, Nov 16 2007 at 3:48AM PST

A couple of things:

- One thing is layered defenses. Two firewalls are better than one.

- The IPFW firewall does exactly what I tell it to do, not more, not less. Since I submitted this hint I learnt a lot more about the Application Firewall that is build in n Leopard. As seen in numerous reviews it leaves services open that it deems necessary for running the system / run as root.

Therefore it overrules my decisions. Something that reminds me on Windows. I don't like to be overruled by my own computer....

- Also it looks like the Application Firewall seems to be more like a proxy firewall. This maybe means that it's more vulnerable to attack since the packet has to travel up the TCP/IP stack before it gets processed by the Application Firewall. IPFW is a simple packet filter that sits on Layer 3 and therefore doesn't interfere with the Application Firewall.

10.5: Use a custom firewall in 10.5 with ipfw
Authored by: Axlin on Fri, Nov 16 2007 at 7:22PM PST

Okay, thanks!