Boston Linux & Unix (BLU) Home | Calendar | Mail Lists | List Archives | Desktop SIG | Hardware Hacking SIG
Wiki | Flickr | PicasaWeb | Video | Maps & Directions | Installfests | Keysignings
Linux Cafe | Meeting Notes | Blog | Linux Links | Bling | About BLU

BLU Discuss list archive


[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

[Discuss] OSX 10.8 Mountain Lion firewall (Re: OSX Lion firewall)



Thanks. I ended up using IceFloor to generate a persistent pf configuration.  ipfw has been deprecated for pf.  

Sent from my iPad Mini

On Apr 29, 2013, at 7:55 PM, Jared Carlson <jcarlson23 at yahoo.com> wrote:

> Hi Robert,
> 
> For #1 I believe it's:
> 
> sudo ipfw add fwd localhost:8080 tcp from any to any 80 in
> 
> for #2 I think it's:
> 
> sudo ipfw add allow tcp from any to any dst-port 22
> 
> It's best practice to give a rule number though, so..
> 
> sudo ipfw add 1000 allow tcp from any to any dst-port 22
> 
> and so for #3 we adapt #2?
> 
> sudo ipfw add 1100 allow tcp from xxx.xxx.xxx.xxx to any dst-port 8888
> 
> FreeBSD looks like they have the best resources, as I'm not an expert but usually playing around gets me where I want to go..
> 
> Hope that helps,
> 
> - Jared
> 
> 
> 
> On Apr 29, 2013, at 7:29 PM, Robert La Ferla <robert at laferla.net> wrote:
> 
>> Correction:  I meant OSX 10.8 Mountain Lion and not 10.7 Lion.
>> 
>> On Apr 29, 2013, at 4:33 PM, Robert La Ferla <robert at laferla.net> wrote:
>> 
>>> I need some help configuring some basic firewall rules for OSX Lion.  It's my understanding that OS X Lion uses "pf" but that "ipfw" is available but deprecated.
>>> 
>>> Using either of these, how can I:
>>> 
>>> Deny all traffic except:
>>> 
>>> 1. Allow TCP port 80 BUT forward it to localhost:8080
>>> 2. Allow TCP port 22 from any IP address
>>> 3. Allow TCP port 8888 from specific IP addresses
>>> 
>>> Lastly, I want to make these rules persistent so that they are reapplied on reboot.
>>> 
>>> Thanks in advance,
>>> Robert
>> 
>> _______________________________________________
>> Discuss mailing list
>> Discuss at blu.org
>> http://lists.blu.org/mailman/listinfo/discuss
> 



BLU is a member of BostonUserGroups
BLU is a member of BostonUserGroups
We also thank MIT for the use of their facilities.

Valid HTML 4.01! Valid CSS!



Boston Linux & Unix / webmaster@blu.org