Linked by Thom Holwerda on Wed 19th Dec 2007 21:46 UTC, submitted by Scott
Permalink for comment 292342
To read all comments associated with this story, please click here.
To read all comments associated with this story, please click here.





Member since:
2007-01-22
Doc Pain,
So IPFW and AFW do not really overlap. I use my own ipfw.sh script Its not managed by launchd . NetBSD's RCng its not used by apple so no I could not use /etc/rc.d/BLAH . It should not be that hard to my script be managed by launchd or make a launchd script to kick off a custom RCng setup but it would be icky.
Application firewalls are interesting, however Networking firewalls work better in say 90% of the cases where you want to limit traffic over the network. The one thing the application firewall can do is say setup a rule to say "jim can not use safari to make files in /home/jim/Desktop but can create files in /home/jim/Downloads " Also it can make rules to say "Jim can not use text edit when jane is logged in"
So you could say make an app that does something like this . "If jim opens safari and goes to badsite and bad site connects scans me run ipfw to block all ip from badhost. " If apple were to make this it would be earth shattering . I do not know of anyting that currently does this on the Mac .
Apple does a good job at making UNIX gui things. But the firewall tool seams like an afterthought.