Firewall prompt everytime i open certian Programs

[green1165]

Hi guys,

I get this incoming connections prompt every time I open certian progrmas, for example when I open iTunes it pops up every time. I have the allow connection in the firewall pane set, yet it still does it. here are some pics.

(outdated link removed)

Here is a pic of the Firewall Settings:

How do I fix this problem????


Thank you

 

[chas_m]

Turn off the firewall. Why do you think you need it? You are already behind a firewall -- a superior hardware firewall -- courtesy of your router. There's a reason why Apple ships these machines with the software firewall off, and you've just discovered it. Just turn it off.

 

[Dysfunction]

Most iTunes connections are outbound. At least, according to Little Snitch

 

[MacInWin]

I'll disagree with chas_m a bit on this. If your Mac is a MacbookPro and you take your MBP out to use public networks, leave the firewall on. If it's an iMac and never leaves your house, then what chas_m said is ok but in my setup, I have my firewall ON on the iMac and see no problems with it.

 

[chscag]

I'll also disagree with chas on this. It does no harm to leave your firewall on even though your router is providing the service. Yes, it's off by default because Apple has assumed that in today's modern internet connections that a router or router - modem setup is between your Mac and the net. But like Jake stated, when you go somewhere to use free internet like at Starbucks or Panera, you want that firewall on. And if you're forgetful (like me) it's best to leave it on at all times.

 

[harryb2448]

Meet halfway fellahs eh? When at home behind your router, turn the firweall off, when you go to Starbucks etc, by all means turn it on in a WiFi hotspot. I am sure this is what chas m meant without ever, ever trying to put words in his mouth!

 

[MacInWin]

That would work, except that I forget every time I go out with the MBP to turn the firewall on. So now I just leave it on all the time. If it's set up correctly, it's invisible to me so there is no downside to leaving it on, IMHO. But if it conflicts with your router and you cannot solve it, then turn it off at home, on when out. My caution is that the ONE time you forget and are sitting in Starbucks and just HAVE to check your bank balance, is the one time the blackhat will be there with a sniffer. That's how the world works.

 

[harryb2448]

Buy some hot pink ribbon Jake and tie it around the handle so when you sit at Starbacks a 'seniors' flash will hit you "Now what the heck did I tie that on there for?"

 

[chscag]

I am sure this is what chas m meant without ever, ever trying to put words in his mouth!

LOL Harry, I would "never" presume anyone would or could do that. (Sorry chas, just joshing you a bit.)

 

[MacInWin]

Buy some hot pink ribbon Jake and tie it around the handle so when you sit at Starbacks a 'seniors' flash will hit you "Now what the heck did I tie that on there for?"

Heh, and I will still not remember to turn on the firewall!

 

[chas_m]

I'm unclear on why you guys think the router in the Starbucks is magically different than the one in your home. Maybe go ask to see where its located and you'll discover it's probably not a commercial-grade router, just a common home-use one nine times out of 10 (I'm talking about neighbourhood coffee shops, not like at the airport here).

But even if it isn't, do you seriously believe that the router at Starbucks doesn't have a firewall? Really? Do you know of ANY commercial-grade routers that don't come with a firewall on by default??

Short of someone running truly ancient (like 20-year-old) router hardware, the odds of you running into a hotspot -- public or private -- that doesn't have a hardware firewall on in the civilized world is nil. And if you ever do, you'll know it IMMEDIATELY. How? Because their Internet won't work, since they're being attacked by a DDoS attack.

People have a really weird and largely inaccurate impression of what a firewall does in the first place, but the issue of whether there's a hardware firewall on the network you're connected to has been the same for at least the last 10 years: yes it does. Regardless of what network you're connected to.

Feel free not to take my word for it. Here's some supporting documentation:

tps://social.microsoft.om/Forums/en-US/8e07d11f-dbc4-4eda-bef6-dc1307f39e40/turning-off-the-firewall-with-hardware-firewall-device?forum=onecarefirewall (outdated link removed)

How to Turn Off Netgear Firewall - Troubleshooting Netgear Router Connection Problems

https://answers.yahoo.com/question/index?qid=20101024110228AAlayQ2

https://answers.yahoo.com/question/index?qid=20081124094307AAfZ0hP

 

[chscag]

It doesn't matter. The whole point here is that it does no harm to keep your software firewall on even if you're behind a router. The Starbucks and Panera were just examples and again, whether or not they have a direct connection or using a router, leaving your software firewall on does not interfere in any way.

Quit being an Apple "purist".

 

[MacforumMac]

I noticed that on my Mac if I block incoming for a particular application it does not work. Incoming information still is allowed. Have you tried testing the behavior say on a known application like Safari?

Hi guys,

I get this incoming connections prompt every time I open certian progrmas, for example when I open iTunes it pops up every time. I have the allow connection in the firewall pane set, yet it still does it. here are some pics.

Here is a pic of the Firewall Settings:

How do I fix this problem????


Thank you

 

[chas_m]

It doesn't matter. The whole point here is that it does no harm to keep your software firewall on even if you're behind a router.

I refer you to the first post in this thread (and hundreds of other threads on this very forum) that would suggest that the typical "merkin" thinking that if one firewall is good, two is twice is good ... is wrong.

 

[cradom]

I was under the impression that the reason for running a firewall at the local Starbucks or any other hotspot was to kill any "man in the middle" type attacks from others using the same router/hotspot.
With that many people on the same router I'd want more protection.

 

[dtravis7]

Agreed with having the firewall on especially at remote locations.

Also Chas, not all Firewalls are equal. SOME routers still do not have a true SPI or better hardware firewall. If you feel that makes no difference, come here and I will show you the Log from a Good Hardware firewall using SPI or SPI2. Shocking all it's protecting me from!