New To Mac-Forums?

Welcome to our community! Join the discussion today by registering your FREE account. If you have any problems with the registration process, please contact us!

Get your questions answered by community gurus Advice and insight from world-class Apple enthusiasts Exclusive access to members-only contests, giveaways and deals

Join today!

 
Start a Discussion
 

Mac-Forums Brief

Subscribe to Mac-Forums Brief to receive special offers from Mac-Forums partners and sponsors

Join the conversation RSS
Switcher Hangout The place for switchers to discuss their new machines, and how to work with OS X. General support can be had here for newbie stuff, like "How do I restart my new iMac?" :)

Firewall on Mac


Post Reply New Thread Subscribe

 
Thread Tools
newby

 
newby's Avatar
 
Member Since: Jan 18, 2011
Posts: 134
newby is on a distinguished road
Mac Specs: MPB 2.2 Intel Core Duo 2gb Ram - G5 Tower PPC - iPhone 4 - 2x3GHZ 12gb Ram MacPro Tower, ATV2

newby is offline
Hi

I know Mac's are largely safe from virus's but do I need to get a firewall? Does my Mac come with one?

If I do need one, what is recommended? Any free apps for it? :-)

I am running Lion on an early 2009 Mac Mini and also have Lion on a 2007 MBP

MacBookPro - 2.2 15" - Mac Mini - 2.5 2009 -MacPro Tower 2 x 3 Quad Core (Work) - iPhone 4 - iPad2, 2x Apple TV
QUOTE Thanks
aoifeee

 
Member Since: Aug 05, 2011
Posts: 118
aoifeee is on a distinguished road

aoifeee is offline
Comes with one. Go to system prefs -> security and you can turn it on.
QUOTE Thanks
bobtomay

 
bobtomay's Avatar
 
Member Since: Dec 22, 2006
Location: Texas, where else?
Posts: 24,993
bobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond reputebobtomay has a reputation beyond repute
Mac Specs: 15" MBP 2.33 C2D 256 4GB, MBA 13" i7 1.8, MB 2.0 2GB, Nano 4th, 3GS, iPad 1

bobtomay is offline
Top 3 hits from a search for "firewall".


Official antivirus, malware, and firewall FAQ

Does Lion come with Firewall?

firewall question

I cannot be held responsible for the things that come out of my mouth.
In the Windows world, most everything folks don't understand is called a virus.
QUOTE Thanks
newby

 
newby's Avatar
 
Member Since: Jan 18, 2011
Posts: 134
newby is on a distinguished road
Mac Specs: MPB 2.2 Intel Core Duo 2gb Ram - G5 Tower PPC - iPhone 4 - 2x3GHZ 12gb Ram MacPro Tower, ATV2

newby is offline
Thank AOIFEEE and BOBTOMAY very help thank you! :-)

MacBookPro - 2.2 15" - Mac Mini - 2.5 2009 -MacPro Tower 2 x 3 Quad Core (Work) - iPhone 4 - iPad2, 2x Apple TV
QUOTE Thanks
chas_m

 
chas_m's Avatar
 
Member Since: Jan 22, 2010
Location: Victoria, BC
Posts: 16,257
chas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond repute
Mac Specs: 2009 MBP, Black speakers, Black Benq second monitor, black(ish) iPhone 5s, Black 2012 iPad, etc.

chas_m is offline
Bottom line: it's turned off by default for a reason, and that reason is that your router (if you have one) almost certainly has a far superior hardware firewall already active. Two firewalls do not make double protection, they make double the chance of conflicts. Unless you have a specific reason to turn the Mac firewall ON, leave it OFF.
QUOTE Thanks
newby

 
newby's Avatar
 
Member Since: Jan 18, 2011
Posts: 134
newby is on a distinguished road
Mac Specs: MPB 2.2 Intel Core Duo 2gb Ram - G5 Tower PPC - iPhone 4 - 2x3GHZ 12gb Ram MacPro Tower, ATV2

newby is offline
Chas - thank you! Very helpful!

MacBookPro - 2.2 15" - Mac Mini - 2.5 2009 -MacPro Tower 2 x 3 Quad Core (Work) - iPhone 4 - iPad2, 2x Apple TV
QUOTE Thanks
technologist

 
Member Since: Mar 30, 2004
Location: USA
Posts: 4,744
technologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond repute
Mac Specs: 12" Apple PowerBook G4 (1.5GHz)

technologist is offline
Quote:
Originally Posted by chas_m View Post
Bottom line: it's turned off by default for a reason, and that reason is that your router (if you have one) almost certainly has
Bottom line, it's included for a reason, and that reason is that laptop owners (especially) often use public wi-fi networks.

Quote:
a far superior hardware firewall already active.
For most things, the OS X application-based firewall is superior to the NAT function of a router.

Quote:
Two firewalls do not make double protection, they make double the chance of conflicts. Unless you have a specific reason to turn the Mac firewall ON, leave it OFF.
The default configuration is pretty well thought out and won't cause any problems with common Mac software, including Apple's included services. (If you're running a server or a third-party remote access service, you might need to do some work to get it set up, but if so, you're probably up to the challenge.)

Unless you have a problem with it, leave it ON. You probably won't ever notice it's there.
QUOTE Thanks
chscag

 
chscag's Avatar
 
Member Since: Jan 23, 2008
Location: Fort Worth, Texas
Posts: 38,497
chscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond reputechscag has a reputation beyond repute
Mac Specs: 27" iMac i5, 3.2 GHz, iPad 3, iPhone 5c, 3 iPods, OS X Mavericks

chscag is offline
+1. As technologist states - it's there for a reason. I don't agree with the mindset of "turn it off, you don't need it". And, I don't believe it's prudent to advise new users to do so.
QUOTE Thanks
chas_m

 
chas_m's Avatar
 
Member Since: Jan 22, 2010
Location: Victoria, BC
Posts: 16,257
chas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond reputechas_m has a reputation beyond repute
Mac Specs: 2009 MBP, Black speakers, Black Benq second monitor, black(ish) iPhone 5s, Black 2012 iPad, etc.

chas_m is offline
Quote:
Originally Posted by technologist View Post
Bottom line, it's included for a reason, and that reason is that laptop owners (especially) often use public wi-fi networks.
This is, I admit, purely anecdotal ... but I checked with all 17 of the public places I use Wi-Fi (asked politely to see their router) and guess what -- every single one of them has a hardware firewall already. Unsurprising these days, really.

There's a LOT of misunderstanding of what a firewall does and does NOT do. It does NOT magically protect you from ... well, much of anything more than a DDOS attack, which would also affect every other user of the Wi-Fi network. Thus, most places that offer it already have a firewall in place.

Quote:
(If you're running a server or a third-party remote access service, you might need to do some work to get it set up, but if so, you're probably up to the challenge.)
This part I agree with.
QUOTE Thanks
technologist

 
Member Since: Mar 30, 2004
Location: USA
Posts: 4,744
technologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond reputetechnologist has a reputation beyond repute
Mac Specs: 12" Apple PowerBook G4 (1.5GHz)

technologist is offline
Quote:
Originally Posted by chas_m View Post
This is, I admit, purely anecdotal ... but I checked with all 17 of the public places I use Wi-Fi (asked politely to see their router) and guess what -- every single one of them has a hardware firewall already.
Of course they do. But everyone else on that network is behind the firewall, and you're exposed to all of them.

The sweet looking girl at the next table over in your local Starbucks may not be out to get you, but her zombified Dell may well be.

And yes, there is a lot of misunderstanding about what a firewall does. And DDoS attacks are not what a firewall protects you against (some do, but that's not what the OS X firewall does.) Firewalls prevent outsiders from connecting to services on your computer. Not planning to run any network services? Great! Using the firewall won't affect you at all; you'll never even know it's there. Set it and forget it.
QUOTE Thanks
osxx

 
osxx's Avatar
 
Member Since: Jan 19, 2008
Location: houston texas
Posts: 4,638
osxx is a name known to allosxx is a name known to allosxx is a name known to allosxx is a name known to allosxx is a name known to allosxx is a name known to allosxx is a name known to all
Mac Specs: 09 MBP 8GB ram 500GB HD OS 10.9 32B iPad 4 32GB iPhone 5 iOs7 2TB TC Apple TV3

osxx is offline
i have been using both and noticed no difference in what I do but gives me piece of mind when I am away from home also the fact last week forgot to turn in back off when I got home so I left it on still did not notice any difference. So for me on it is.
QUOTE Thanks
McBie

 
McBie's Avatar
 
Member Since: Apr 26, 2008
Location: Belgium
Posts: 2,290
McBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to allMcBie is a name known to all
Mac Specs: 2013 MBA 13" - 10.9.3 & iPad - iOS 5.1

McBie is offline
Technologist is spot on !
Turn the OS X firewall on and forget about it.... roam the internet with peace of mind.

Cheers ... McBie

A computer lets you make more mistakes faster than any invention in human history - with the possible exceptions of handguns and tequila.
The problem is not the problem. The problem is your attitude towards the problem. You understand ?
QUOTE Thanks
EvenStranger

 
EvenStranger's Avatar
 
Member Since: Dec 09, 2010
Location: Virginia
Posts: 845
EvenStranger is just really niceEvenStranger is just really niceEvenStranger is just really niceEvenStranger is just really niceEvenStranger is just really nice
Mac Specs: Currently 13" Late 2010 MBA, 4GB/128GB; Early 2011 13" MBP, dual core i7 2.7ghz, 4gb ram, 500gb hd

EvenStranger is offline
Just for clarification, a firewall doesn't protect you from the most common form of data piracy - namely packet sniffing. A firewall is comparable to locking the doors and windows on your home, to prevent unauthorized entry. However, if you stand at your front door and yell to your neighbor across the street, there's nothing to prevent your next door neighbor from hearing the conversation. Same with the coffee shop - your wireless signal, if not encrypted, is being "shouted" across the room, and anyone with a mind to can capture that information in plain text. That's why firewalls are good, but they're only one piece of the security puzzle. Ideally, every coffee shop would have a password protected network, with suitable encryption. More and more are moving that way, but it's by no means universal. Be careful with passwords, only access sites with sensitive information on networks you know to be secure, and consider setting up a VPN with your office or home for better security.
QUOTE Thanks
dtravis7

 
dtravis7's Avatar
 
Member Since: Jan 04, 2005
Location: Modesto, Ca.
Posts: 27,492
dtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond reputedtravis7 has a reputation beyond repute
Mac Specs: iMac 2.4 C2D 10.9.4, iMac 2.16 C2d 10.6.8, Macbook2007 10.8.4, Mac Mini 10.8.4, iPhone 3GS Note 8!!

dtravis7 is offline
Technologist is DEAD on. It does not hurt at all to run the OSX firewall, especially if you are out and about. I don't care if the Hot Spot's router uses even SPI, that is only for the WAN, not the LAN. Anyone in the area on the LAN is still open to every other system on that LAN.

People can argue this all they want, but I have seen it proven over and over. Some routers only have NAT. A true HardWare firewall uses at least SPI (Stateful Packet Inspection) or even better Deep Packet Inspection (DPI). Any decent Firewall that does not at least have SPI, I will not even bother with. So far only very expensive Firewall appliances have DPI though.

Any doubters out there come here and check my SPI Firewall logs and see exactly what it's blocking. And yes, I have a Firewall appliance. Works great! Picked it up at a Thrift Store for $5. It's worth close to $1000!
QUOTE Thanks
newby

 
newby's Avatar
 
Member Since: Jan 18, 2011
Posts: 134
newby is on a distinguished road
Mac Specs: MPB 2.2 Intel Core Duo 2gb Ram - G5 Tower PPC - iPhone 4 - 2x3GHZ 12gb Ram MacPro Tower, ATV2

newby is offline
Wow! This got a lot more exciting since I came on last!

Bit confused now but I think best practice is leaving it on! Thanks all! :-)

MacBookPro - 2.2 15" - Mac Mini - 2.5 2009 -MacPro Tower 2 x 3 Quad Core (Work) - iPhone 4 - iPad2, 2x Apple TV
QUOTE Thanks

Post Reply New Thread Subscribe


« Newbie x2 | One big Question need help!! »
Thread Tools

Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts
BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are On
Pingbacks are On
Refbacks are Off
Forum Jump

Similar Threads
Thread
Thread Starter
Forum
Replies
Last Post
A Switchers guide to recommended free Apps to download to your new Mac the8thark Switcher Hangout 67 03-19-2013 10:48 AM
OS 10.7 Lion feature/rumour roundup the8thark Apple Rumors and Reports 44 08-17-2011 02:03 PM
Disillusioned Mac desigener switches to Windows mogwai Schweb's Lounge 21 05-11-2006 02:05 PM

All times are GMT -4. The time now is 05:53 AM.

Powered by vBulletin
Copyright ©2000 - 2014, Jelsoft Enterprises Ltd.
X

Welcome to Mac-Forums.com

Create your username to jump into the discussion!

New members like you have made this community the ultimate source for your Mac since 2003!


(4 digit year)

Already a member?