Comments on: snow leopard firewall stealth connection attempts – SHIELDS UP! http://pjkix.com/journal/2009/09/14/snow-leopard-firewall-stealth-connection-attempts-shields-up/ As seen on WWW! Tue, 27 Apr 2010 07:53:51 -0700 http://wordpress.org/?v=2.9.2 hourly 1 By: carlo http://pjkix.com/journal/2009/09/14/snow-leopard-firewall-stealth-connection-attempts-shields-up/comment-page-1/#comment-1536 carlo Sun, 20 Dec 2009 13:51:15 +0000 http://pjkix.com/journal/?p=4631#comment-1536 For an attempt to answer these kind of issues see: "Am I being hacked?? HAVE I been hacked?", http://discussions.apple.com/thread.jspa?threadID=1481932 For an example ipfw ruleset you may want to check out and see if it helps try: http://codesnippets.joyent.com/posts/show/1267 For an attempt to answer these kind of issues see:

“Am I being hacked?? HAVE I been hacked?”,

http://discussions.apple.com/thread.jspa?threadID=1481932

For an example ipfw ruleset you may want to check out and see if it helps try:

http://codesnippets.joyent.com/posts/show/1267

]]> By: Claudio http://pjkix.com/journal/2009/09/14/snow-leopard-firewall-stealth-connection-attempts-shields-up/comment-page-1/#comment-1509 Claudio Sun, 11 Oct 2009 21:20:57 +0000 http://pjkix.com/journal/?p=4631#comment-1509 Ok, I can report this is happening to me too: running OS X 10.6 in a MacBook Pro (unibody). The hardware actually doesn't matter for this. I have noticed, however that seeing the logs at /var/log/appfirewall.log, I have incoming requests by UDP from my DNS servers, to me... by port 53 (DNS requests). I have anothers requests by TCP from not-known IPs ports 80 and 443 (HTTP, HTTPS). But you are right..... at first look, this seems like we are being hacked, but I don't think so..... Not sure what have changed in Snow Leopard's ipfw. Ok, I can report this is happening to me too: running OS X 10.6 in a MacBook Pro (unibody). The hardware actually doesn’t matter for this.

I have noticed, however that seeing the logs at /var/log/appfirewall.log, I have incoming requests by UDP from my DNS servers, to me… by port 53 (DNS requests). I have anothers requests by TCP from not-known IPs ports 80 and 443 (HTTP, HTTPS). But you are right….. at first look, this seems like we are being hacked, but I don’t think so….. Not sure what have changed in Snow Leopard’s ipfw.

]]> By: miles http://pjkix.com/journal/2009/09/14/snow-leopard-firewall-stealth-connection-attempts-shields-up/comment-page-1/#comment-1508 miles Fri, 09 Oct 2009 06:23:27 +0000 http://pjkix.com/journal/?p=4631#comment-1508 Hi, I hate to say this but MEE TOO. Only in my case those are random hits every once in a while. Im running 10.6.1 on a NEW MBP (as of this afternoon, fresh outta the box as it were). If you run across anything please post it here. Thanks. Miles. Hi,

I hate to say this but MEE TOO. Only in my case those are random hits every once in a while. Im running 10.6.1 on a NEW MBP (as of this afternoon, fresh outta the box as it were).

If you run across anything please post it here.

Thanks.

Miles.

]]>