Leopard Firewall disabled by default?
Heya,
I upgraded from Tiger to Leopard this weekend. I noticed last night that even in an upgrade configuration, Leopard pretty much disabled its firewall. Or at least it reset it to accept all traffic, which is just as bad. To be fair, almost no externally addressable services are enabled, so it could be far worse.
So check your firewalls!
It might be just me, but better safe than sorry.
-- Tony
»
- Login to post comments
it looks like the default...
it looks like the default... but I can't say for sure since I've never had it enabled on either of my machines.. Seems like overkill with hw routers, and my on campus internet usage doesn't have me all that paranoid.
A window machine (with not quite up-to-date patches) on the network gets cannabilized in 15 minutes though.. (We had a lab machine that wasn't supposed to be connected to the internet, connected to the internet).
Is this the Leopard "firewall problem" everyone is crying about?
jc
==
John Douglas Carter, MSc
Dept. of Computing & Information Studies
PhD Student, University of Guelph
Apparently, it will also
Apparently, it will also allow signed applications to open external firewall ports. That's the more contentious point as far as the review websites are concerned.
It really doesn't matter how effective the firewall is if it isn't turned on in the first place. Remote exploits for OS X are rare, but I still don't expect it turn off my existing firewall.
-- Tony
I'm assuming applications
I'm assuming applications signed by a valid authority such as Verisign, etc? That seems a little much, considering anyone can buy a cert and sign their app.
Is there a way to disable this?
--
Andrew