OS X firewall - how to make it actually work
in [UK Mac]
|
From: David Empson on 21 Jan 2010 21:06 Tim McNamara <timmcn(a)bitstream.net> wrote: > In article <hja4fl$1puu$1(a)pc-news.cogsci.ed.ac.uk>, > richard(a)cogsci.ed.ac.uk (Richard Tobin) wrote: > > > In article <7rraacFi2vU1(a)mid.individual.net>, > > James Taylor <usenet(a)oakseed.demon.co.uk.invalid> wrote: > > > > >>> Apparently, Apple have pre-signed many of the standard OS components to > > >>> allow them access through the firewall without needing explicit rules in > > >>> the firewall or asking for user permission. > > > > >> Is netcat such a component? > > > > >Yes. > > > > As far as I (and spotlight) can see, netcat doesn't even exist on > > a vanilla Snow Leopard system. Where is it on your system? It is called 'nc', not 'netcat'. % which nc /usr/bin/nc % man nc describes it as "The nc (or netcat) utility is used for just about anything under the sun involving TCP or UDP." -- David Empson dempson(a)actrix.gen.nz
From: Richard Tobin on 22 Jan 2010 07:10 In article <7rsf5fFe1U1(a)mid.individual.net>, James Taylor <usenet(a)oakseed.demon.co.uk.invalid> wrote: >> [tim ~]$ find netcat >> find: netcat: No such file or directory >That's not how you use find. That used to work on some unixes. It used a database similar to locate(1). See for example http://www.freebsd.org/cgi/man.cgi?query=find&apropos=0&sektion=1&manpath=SunOS+4.1.3&format=html -- Richard -- Please remember to mention me / in tapes you leave behind.
From: Daniel Cohen on 22 Jan 2010 12:21 James Taylor <usenet(a)oakseed.demon.co.uk.invalid> wrote: > David Empson wrote: > > > If you are in a context where it can't display a dialog box (e.g. a > > full-screen game) then it automatically denies the connection and uses > > text-to-speech to tell you that "Little Snitch has automatically blocked > > an outgoing connection [with a description]". You can then edit the > > temporary rule after you get back to the normal user interface. > > Wow, I didn't know it did that too. Wow! > > You don't hapen to know whether it can be made to block incoming > connections too do you? I don't think so. Might be worth looking at Intego NetBarrier to block incoming connections. I think both NetBarrier and Little Snitch default to accepting all local connections, but can be configured not to do that. -- <http://www.decohen.com> Send e-mail to the Reply-To address. Mail to the From address is never read.
From: Barry Margolin on 22 Jan 2010 19:47
In article <hja4fl$1puu$1(a)pc-news.cogsci.ed.ac.uk>, richard(a)cogsci.ed.ac.uk (Richard Tobin) wrote: > In article <7rraacFi2vU1(a)mid.individual.net>, > James Taylor <usenet(a)oakseed.demon.co.uk.invalid> wrote: > > >>> Apparently, Apple have pre-signed many of the standard OS components to > >>> allow them access through the firewall without needing explicit rules in > >>> the firewall or asking for user permission. > > >> Is netcat such a component? > > >Yes. > > As far as I (and spotlight) can see, netcat doesn't even exist on > a vanilla Snow Leopard system. Where is it on your system? It tends to go by the abbreviated name "nc": /usr/bin/nc -- Barry Margolin, barmar(a)alum.mit.edu Arlington, MA *** PLEASE post questions in newsgroups, not directly to me *** *** PLEASE don't copy me on replies, I'll read them in the group *** |