Linked by Thom Holwerda on Wed 19th Dec 2007 21:46 UTC, submitted by Scott
Mac OS X "Mac OS X 10.5.2 Update, the next in a year-long series of planned updates to Apple's new Leopard operating system, promises to be one of the most hefty maintenance releases put out by the company for its operating system software in recent years. According to people familiar with the matter, Tuesday evening gave way to the first test builds of the software update for developers, including a 354MB bare-bones delta build and a 362MB combo updater- both of which were labeled OS X 10.5.2 build 9C7."
Thread beginning with comment 292289
To read all comments associated with this story, please click here.
Firewall
by Marquis on Thu 20th Dec 2007 00:23 UTC
Marquis
Member since:
2007-01-22

I hope they get rid of that crappy application firewall and go back to using IPFW2 . Arghhh!

RE: Firewall
by Doc Pain on Thu 20th Dec 2007 04:55 in reply to "Firewall"
Doc Pain Member since:
2006-10-08

"I hope they get rid of that crappy application firewall and go back to using IPFW2 . Arghhh!"

I'm not a regular Mac OS X user, but didn't it use the packet filter (pf) instead of the IP firewall (ipfw2), or am I mixing up things here?

From my experience, ipfw2 (used on FreeBSD machines) does a great job. along with its ability to be configured very easily. You can setup a well configured firewall mechanism with very few rules and still have intended things working.

Reply Parent Bookmark Score: 2

RE[2]: Firewall
by Marquis on Thu 20th Dec 2007 05:12 in reply to "RE: Firewall"
Marquis Member since:
2007-01-22

Well OSX never had PF as in OpenBSD's pf see link http://www.netbsd.org/docs/network/pf.html . The firewall that was in 10.4 and is still in 10.5 is IPFW from FreeBSD see link http://www.freebsd.org/cgi/man.cgi?query=ipfw&apropos=0&sektion=0&m...

The current thing apple is calling the firewall, is the Apple Application Firewall. This does not work the same way say PF or IPFW would. Rather then work by hooking into the kernel and filtering networking data at a low level; where you can see if the data is tcp or udp, the application firewall is allowing or denying applications ability to talk to the network. I.E. should safari.app be able to send and receive data. Now this is not a bad idea but the issue I have is that the front end program apple made for OS 10.5 is does not let you setup IPFW rules saying block all TCP traffic from IP BLAH. or Deny all IP in and then setup explicit allow rules. Apple IMHO needs to add and advanced firewall editing in the system prefs gizmo for the firewall to allow you to add ipfw rules . The application firewall's default setup does not address a number of firewall issues that ipfw + the application firewall could.

Reply Parent Bookmark Score: 1