FYI to all, ipfw (ipfw and ip6fw) is disabled by default on OS X Snow Leopard and only one firewall should be running at any given time. I recommend disabling it until we can confirm it doesn’t have issues. It was also deprecated post-10.6.8.
ipfw configuration files (at least on server) should be located at /etc/ipfilter/
Code:
ip6fw.conf.apple
ip6fwstate-on
ip_ address_groups.plist
ip_address_groups.plist.default
ipfw.conf
ipfw.conf.apple
ipfw.conf.default
ipfwstate-on
Use the sysctl tool to enable/disable the firewall:
Code:
$ sysctl -w net.inet.ip.fw.enable=1
You can disable the firewall by changing the setting to 0.
OS X has its own Apple Application Firewall which is the one that should be controlled by system preferences, and i’m not convinced that it’s behaving as it should be.
There is no GUI for ipfw (only on server) and both can be configured via command line or by editing their various preference and configuration files.
To enable or disable the apple application firewall from the command line, use the following:
Code:
defaults write /System/Library/Preferences/com.apple.alf globalstate -int 1
0 - for off
1 - for only specific services
2 - for essential services only
The main preference file for the Application Firewall is located in /Library/Preferences/com.apple.alf.plist
The executable files for the Application Firewall are located in /usr/libexec/ApplicationFirewall