Configuring the firewall for Leopard

[Christopher Hunt]

Hi Dan,

Thanks for your response. Mine below:

On 27/10/2007, at 6:17 AM, Dan Shoop wrote:

> On Oct 26, 2007, at 10:27 AM, Christopher Hunt wrote:
>> I've just installed Leopard and I'm having a little difficulty  
>> with the firewall. :-P
>>
>> I have the uw imapd configured via launchd to listen on port 993.  
>> If I turn the firewall off then all is well and mail can connect.  
>> If I turn it on then I'm unable to get the firewall to recognise  
>> that traffic for imapd is acceptable.
>>
>> What I've tried is to add my imapd executable (/usr/local/bin/ 
>> imapd) as an app in the "Set access for specific services and  
>> applications" pane but all I get is:
>>
>> Firewall[51]: Deny imapd connecting from xxx.xxx.xxx.xxx:xxxxx uid  
>> = 0 proto=6
>>
>> (the xxx being the source ip/port)
>>
>> Any idea on how to configure the firewall to allow my imapd traffic?
>>
>
> Perhaps post how you configured ipfw???
ipfw does not appear to be used in Leopard. For example, if I perform  
a "sudo ipfw list" then it outputs:

65535 allow ip from any to any

I also note that there are some new processes:

/usr/libexec/ApplicationFirewall/socketfilterfw
/usr/libexec/ApplicationFirewall/Firewall

Looks as though the whole firewall situation has changed.

Interestingly there's a "com.apple.alf.plist" file in the  
ApplicationFirewall directory. I'll bet this has something to do with  
its config tho I'm not game to mess with it at this point. I did have  
a look inside the plist but I was confident about its mappings to the  
firewall's GUI.

Any further pointers out there?

Cheers,
-C