IPFW (IPFIREWALL) is a FreeBSD sponsored firewall software application authored and maintained by FreeBSD volunteer staff members.

learn more… | top users | synonyms

0
votes
1answer
53 views

Getting lots of pings between two routers on shared Wi-Fi. Why is it happening, and can I prevent it?

My apartment complex has a shared Wi-Fi network. There are two Cisco Meraki MR62 access points on each building, and my MacBook periodically switches between them; which is annoying because it drops ...
1
vote
0answers
255 views

Mac OS X Yosemite limiting upload bandwidth

I have ADSL internet, and when there is an application uploading to the internet at full speed (e.g. Skype or Chrome during file uploads), the download bandwidth becomes very very slow. I.e. I cannot ...
0
votes
0answers
37 views

Open firewall port on Mac OS X

I need to open port 8181 on my Mac OS X. On Linux, I would do: iptables -t filter -A INPUT -p tcp --dport 1664 -j ACCEPT iptables -t filter -A OUTPUT -p tcp --dport 1664 -j ACCEPT How do I do this ...
1
vote
1answer
127 views

How to elegantly selectively exclude FreeBSD network traffic from OpenVPN interface by port

inexperienced sysadmin here. I'm planning on running a net daemon inside a FreeBSD jail through OpenVPN, but want to be able to SSH directly into the jail and use the daemon's web interface daemon ...
0
votes
0answers
37 views

How to stop sending RST to specific IP

I want to stop sending RST to specific IP(192.168.56.101) on Mac OS X. I enter this command. But it still send RST. sudo ipfw add drop tcp from 192.168.56.1 to 192.168.56.101 in tcpflags rst What ...
2
votes
1answer
28 views

How to apply ipfw rules to domains that resolves to multiple IPs?

Suppose I wanted to use ipfw to throttle uploads to youtube. The uploads are made to upload.youtube.com but this domain resolves into multiple different IPs (which also appear to change over time). ...
0
votes
0answers
40 views

OS X limiting bandwith

I'm doing some test with bandwidth limiting on my Mac (OS X 10.9.3), and I have this unexpected behavior if I use the loopback interface. I create a limited pipe ipfw pipe 1 config bw 10KByte and ...
1
vote
0answers
31 views

Send HTTP traffic to VPN

I want to encrypt my unencrypted HTTP traffic by sending them to VPN. I tried to use this IPFW rule, but it is not seem working (I dont see traffic on VPN connection). allow ip from any to any ...
0
votes
0answers
113 views

How to block a tcp port using pfctl (instead of ipfw)

ipfw is deprecated and disabled under Mavericks and replaced by pfctl. I have an ipfw-based script that disables IMAP ports (but leaves open SMTP) so that I can send messages at will without being ...
0
votes
1answer
438 views

Redirect/Block outgoing HTTP traffic for a specific URL on Mac

I want to know if it's possible to redirect or block HTTP traffic with a string like this command on linux : iptables -A OUTPUT -p tcp -m string --string "STRING" -j REJECT
-5
votes
2answers
145 views

Is there a way to pause/resume particular TCP connection?

I'm playing online game that matches me against random players. I found out that when I unplug my Ethernet cable, I have a minute to decide do I want this match to count. If things go wrong, I just ...
1
vote
2answers
1k views

Simulating network latency for localhost connection on Windows 7

I need to simulate network latency to a program running on the local computer, connecting to a local service. Thus far I have tried dummynet (a windows build of ipfw) which I got working after some ...
4
votes
0answers
368 views

OS X: From ipfw to pfctl - Forward port 80 and 443

I found a way to forward ports 80 and 443 to other arbitrary ports (3000 and 3001 in my case) using ipfw. But ipfw is deprecated and replaced by pfctl. Here are my ipfw declarations: sudo ipfw flush ...
4
votes
1answer
953 views

How to set up a static route to allow PS Vita remote play to PS3 through a second router?

I'm trying to get my PS Vita to connect to my PS3 through my home network rather than the PS3's wireless access point (mainly because of the PS3's weak signal). My Mac (OS X 10.8.2) is sharing its ...
2
votes
2answers
2k views

OSX: Mimic Ubuntu IP Masquerading via iptables with ipfw

Good day, I am attempting to replicate a setup I have between a router and an Ubuntu PC, and have the same setup working on my MacBook (10.6, Snow Leopard). First, I have a router that has a USB ...
5
votes
2answers
4k views

Port Redirection on Mac OS X Lion

I have tried to solve this issue using pf but with no luck. Basically, I am trying to redirect incoming port 443 traffic to port 22. I have tried to set up a rule in a file and load it in pf but I get ...
4
votes
3answers
5k views

How to route traffic from VM (Parallels) over an Open VPN connection on the host (OS X)

Scenario: I have a Mac running Lion that is connected to an OpenVPN server I have a Windows XP VM (running on parallels, but I don't think this is important) I want to be able to route traffic from ...
1
vote
1answer
391 views

ipfw logs on Snow Leopard

where can I find the ipfw logs on Snow Leopard? it is not in /var/log/system.log and this file is completely empty /var/log/ipfw.log
0
votes
3answers
7k views

Block all outgoing connection attempts as per application via ipfw

I need to block all outgoing connection attempts made by a particular app in order to prevent it from downloading updates automatically via ipfw?
1
vote
1answer
561 views

How can I use ipfw to duplicate the effects of OS X's Little Snitch

I'd like to know exactly what is leaving my laptop and going on the wire. I used to use Little Snitch for this, but apparently it's possible to do the same thing with ipfw. How would I go about ...
0
votes
1answer
347 views

FreeBSD ipfw tablearg

I'm configuring the FreeBSD firewall and have such situation: 51000 pipe tablearg ip from not table(17) to table(20) out xmit ng* 51010 pipe tablearg ip from table(21) to not table(17) in recv ng* ...
3
votes
1answer
869 views

Can I use TCP as DNS query protocol on Mac OS?

I'm using Mac OS, Snow Leopard 10.6.2, and I'm suffering from UDP packet loss during DNS query. So my web browser is too slow to surf internet nicely. But it worked very well when I tried a DNS query ...
1
vote
2answers
2k views

Mac OS X: How do you set ipfw rules on startup?

How do you apply a list of ipfw rules at startup on Mac OS X? i.e. I have a list of rules like these that I'm applying manually. sudo ipfw add 00100 ... sudo ipfw add 00101 ... sudo ipfw add 00102 ...