Submit Hint Search The Forums LinksStatsPollsHeadlinesRSS
14,000 hints and counting!

Click here to return to the '10.5: Use a custom firewall in 10.5 with ipfw' hint
The following comments are owned by whoever posted them. This site is not responsible for what they say.
10.5: Use a custom firewall in 10.5 with ipfw
Authored by: Brathahn on Nov 16, '07 03:48:27AM

A couple of things:

- One thing is layered defenses. Two firewalls are better than one.

- The IPFW firewall does exactly what I tell it to do, not more, not less. Since I submitted this hint I learnt a lot more about the Application Firewall that is build in n Leopard. As seen in numerous reviews it leaves services open that it deems necessary for running the system / run as root.

Therefore it overrules my decisions. Something that reminds me on Windows. I don't like to be overruled by my own computer....

- Also it looks like the Application Firewall seems to be more like a proxy firewall. This maybe means that it's more vulnerable to attack since the packet has to travel up the TCP/IP stack before it gets processed by the Application Firewall. IPFW is a simple packet filter that sits on Layer 3 and therefore doesn't interfere with the Application Firewall.

[ Reply to This | # ]
10.5: Use a custom firewall in 10.5 with ipfw
Authored by: Axlin on Nov 16, '07 07:22:40PM

Okay, thanks!

[ Reply to This | # ]