Dark Atheist

Anyone here use this on their Mac? If so what default rules are ok to disable, as i have noticed there are a few on there that dont really need to be there as far as i am concerned.

I mean why do i need all the Me stuff if i never even use it

SPeedY_B

I guess in theory it's Ok to disable absolutely everything... then re-create the rules as you go along, deciding what you want to allow external access.

---

Dark Atheist

its knowing what to allow though

SPeedY_B

Depends on your uses. If you want your email, allow Mail... if you want to surf allow Safari, if you want to have your Mac set the time for you, allow NTPd, etc.

At the end of the day if you yank the network cable (or disable wifi) your Mac will continue to work, so it doesn't really *NEED* internet connectivity to function, obviously there's is just increased functionality to be gained by letting things access the net.

---

Dark Atheist

allow msdnresponder - block that and your fecked

X-Istence

Yeah, unfortunately Apple has decided to move the Unicast DNS resolver into mDNSResponder as well, which means disabling Bonjour is now almost impossible, on Leopard and below I would always issue the launchctl unload -w for mdnsresponder.

This knowledge base article may help though:

http://support.apple.com/kb/HT3789

---

Dark Atheist

thanks X