06-18-2011, 02:34 PM

Hi, just purchased imac 21.5, as a previous windows user for around 10years i was wanting to know if the whole not needing an antivirus with mac is true.
I will say sorry in advance if this is an over talked about topic but coming from windows where i had kaspersky pure internet security running constant i find it hard to just switch on imac and surf net, log on to my digital banking etc without the added backup..makes me really nervous
i have switched firewall to stealth mode and my wireless router is fire-walled as well.
Plus any advice for downloading etc, i was using winmx on my pc but i take it this will not work on imac.
Thanks in advance for any help and sorry if this sounds totally dumb!!!!

06-18-2011, 02:35 PM

Read this:

Official antivirus, malware, and firewall FAQ

06-18-2011, 02:37 PM

Thanks, will read it asap

06-18-2011, 05:32 PM

I run sophos on my mac, and I also have iantivirus on the other. Sophos is for mac and pc threats, and Iantivirus is for mac threats only.

06-18-2011, 06:41 PM

If you feel you must run AV software, look at ClamXAV which is freeware. That company also released ClamWin for Windows, and if you are going to run Windows on your Mac, make sure you use AV software on that partition.

Having said that you will find most long term Mac users do not run any AV as it tends to bloat and slow your computer.

06-18-2011, 07:46 PM

Also, you should keep your software firewall off. The router firewall is enough.
The reason the software firewall is off by default is because any modern modem/router has a firewall.
Having the software firewall on can interfere with the functioning of the other firewall.
You can go to https://www.grc.com/x/ne.dll?bh0bkyd2 to test your firewall.

06-18-2011, 08:00 PM

Having the software firewall on can interfere with the functioning of the other firewall.

Couldn't have said it better myself, and this bit bears repeating.

Congrats to the OP for finally getting out of the fear and paranoia trap that is Windows.

06-19-2011, 08:58 AM

Originally Posted by rabbitjetta

I run sophos on my mac...

I switched in September. I run Sophos as well. I see no significant changes in how the computer runs. Having something is better than nothing and you won't notice its there.

06-19-2011, 09:04 AM

Originally Posted by Booch_21

I switched in September. I run Sophos as well. I see no significant changes in how the computer runs. Having something is better than nothing and you won't notice its there.

Yeah, a lot of switchers seem to like continuing to give their money to those AV companies.

06-19-2011, 09:18 AM

Originally Posted by 6string

Also, you should keep your software firewall off. The router firewall is enough.
The reason the software firewall is off by default is because any modern modem/router has a firewall.
Having the software firewall on can interfere with the functioning of the other firewall.
You can go to https://www.grc.com/x/ne.dll?bh0bkyd2 to test your firewall.

Okay, I ran the tests and it showed that ports 139, 445 and 548 were open. Everything else looked good.
What, if anything, should I do next?

06-19-2011, 09:37 AM

Need to check your router's firewall settings to start with.

Then if still not fixed the port forwarding sections.

There are other places where you can manually punch a hole in the firewall to enable certain functions also.
But I'd say port 139 at least should not be open at all.

If you're running any of the modern D-Link it would be under the Advanced tab.
If you're as unsure about most router settings as I am, I'd probably just do a reset to factory on the router and then reset up my wifi network again.

And of course, how old is the router and it does have a firewall?
Default settings on any modern router firewall should come back in complete stealth on those tests.

06-19-2011, 09:40 AM

Originally Posted by bobtomay

Need to check your router's firewall settings to start with.

Then if still not fixed the port forwarding sections.

There are other places where you can punch a hole in the firewall to enable certain functions also.
But I'd say port 139 at least should not be open at all.

If you're running any of the modern D-Link it would be under the Advanced tab.
If you're as unsure about most router settings as I am, I'd probably just do a reset to factory on the router and then reset up my wifi network again.

And of course, how old is the router and it does have a firewall?

Running a Time Capsule about 3 years old.

06-19-2011, 09:46 AM

Same age as my TC.
Have never used the firewall in my TC, nor have I ever allowed it as the DHCP server here.


After looking - Don't even see any firewall settings at all in the Airport Utility.

06-19-2011, 09:50 AM

Originally Posted by bobtomay

Same age as my TC.
Have never used the firewall in my TC, nor have I ever allowed it as the DHCP server here.


After looking - Don't even see any firewall settings at all in the Airport Utility.

Same thing for me. Went looking for settings and have no idea how to close the ports I listed.

06-19-2011, 09:55 AM

Razor: You may want to have a read of this thread at Apple's support forums. There is a link there to an alternative opinion. They can say what they want, but if it were me and I didn't already have one, I'd be getting a router with a real firewall.

And yes I know, as one that is still pretty vehemently against installing AV software on my own personal Macs, this may sound like just the opposite. And although the average home user is probably pretty safe as they say, I'll take a NAT firewall tyvm. I think this is the main reason dtravis does not like the AEs.

We do have several members here with a whale of a lot more knowledge about this stuff than I have. Perhaps one of them will pop in on this.