Leopard Firewall...

[hp660c]

I've been trying to find out what Leopard is using for its firewall. Tiger used ipfw, eg: you could drop into a term and type 'ipfw -a list' and it would show you the rules. In leopard the rule never changes (there's only 1 rule all the time), it's always 'allow all from any to any' even when i change the firewall settings to block all connections.

So I'm curious as to what Leopard is using. I also know Leopard is doing per-application filtering, so it must be using some other app to do this. Does anyone have any info on this?

 

[Smilin]

A bad one?

http://www.news.com/8301-10784_3-9807471-7.html

...haven't seen or tested myself. Might be FUD.

 

[chcarnage]

The Heise research is linked in the news.com article and pretty detailed, it should be a good start to form an opinion. I'm not that surprised there are a few teething troubles below the GUI.

Like hp660c said, ipfw is still around and functional. I assume that the new Leopard firewall engine is Apple's own creation.

 

[Goosemaster]

wow..after reading that Heise article I am really disappointed.