Firewall in Tiger

[carfac]

I know there is a firewall somewhere in Tiger. I know it is based on IPFW (which I use on my servers), so I can write files for it. But where is it, and how do I get it going- anyone know????

 

[swiftaw]

System Preferences->Sharing

 

[carfac]

Thanks- OK, I found that. That is a port blocker- not exactly I was looking for. I need something more configurable, so I can block a few specific web sites directly. in IPFW you can block an IP, or a range of IPs- I want to block a range of IPs (MySpace anyone?)

Thanks!

Dave

 

[speakerwizard]

so ya know, system prefs has its own spotlight in the top right corner of the window, if you type something in there, it will take you / show you where that setting is, for example type ip to be taken to the ip address.

 

[mkrishnan]

The Preference Pane for Security component that deals with port access (it also has options for things like Stealth mode and UTP) is essentially just a front-end for the Unix ipfw, which is more or less configured just like it is in any other version of Unix.

Start with this guide...

http://www.oreillynet.com/pub/a/mac/2005/03/15/firewall.html?page=last

It should walk you through whatever subtleties exist with the OS X implementation vs. ipfw in Linux or BSD. It's a bit old, but it should give you what you need (ipfw has been in OS X since long before Tiger).

P.S. He/she made it quite clear from the beginning that what is being sought is not the kind of modifications that can be made from System Preferences. Why do you need to lecture her/him on how to find the firewall settings in System Preferences?

 

[carfac]

so ya know, system prefs has its own spotlight in the top right corner of the window, if you type something in there, it will take you / show you where that setting is, for example type ip to be taken to the ip address.

Actually, I did NOT know the Prefs Spotlight was any different. I DID spotlight on the Desktop for "IPFW" before posting, though....

 

[carfac]

The Preference Pane for Security component that deals with port access (it also has options for things like Stealth mode and UTP) is essentially just a front-end for the Unix ipfw, which is more or less configured just like it is in any other version of Unix.

Start with this guide...

http://www.oreillynet.com/pub/a/mac/2005/03/15/firewall.html?page=last

It should walk you through whatever subtleties exist with the OS X implementation vs. ipfw in Linux or BSD. It's a bit old, but it should give you what you need (ipfw has been in OS X since long before Tiger).

P.S. He/she made it quite clear from the beginning that what is being sought is not the kind of modifications that can be made from System Preferences. Why do you need to lecture her/him on how to find the firewall settings in System Preferences?

Perfect, exactly what I was looking for.... sudo ipfw deny all from x.x.x.x to any was what I needed run. That blocks whole IP ranges, just like on my servers!

I have no problem with doing this in Terminal (essentially how I do it on FreeBSD), but I was just thinking Tiger might have an easier/better/GUI way to do it. Thank you!

 

[mkrishnan]

If you're comfortable hitting ipfw by terminal, that's probably best for you, as any new GUI will have a learning curve...nonetheless, I forgot about it, but there are a few advanced configurators:

http://www.versiontracker.com/php/qs.php?mode=basic&action=search&str=ipfw&srchArea=macosx&submit=Go

That first one on the list, Firewall Builder, looks promising....