Firewall in set access mode let "allow incoming connections" without me

I have set up my firewall to allow incoming connections for a file sharing client under "Set Access for specific services and applications", and I noticed that Skype, iChatagent, and Safari all included themselves to be set under allow as well a week later. I did not enter this in manually. How did this occur?

I am quite befuddled by the 10.5 firewall. Maybe I'm thinking too much, but I've read all the documents I could get a hold of, and I still find it confusing and often conflicting in the specifics.
For starters, there is the cryptic remark of ""Mac OS X normally determines which programs are allowed incoming connections. Select this option if you want to allow or block incoming connections for specific program." Presumedly the "option" it is referring to is the "Set access for specific services..." option, which implies that the "normally determines" circumstance refers to the first two options. But, "Allow all incoming connections" supposedly allows everything, and "Allow only essential services" supposedly blocks everything (except for two or three things). Where in either of these cases would OS X be "determining" anything, and if it does, what criteria is it using?
The next thing I don't understand: when the option is set to "Set access for specific services", which applications does OS X explicitly ask permissions for? It seems that it since the firewall is only blocking incoming connections, it should only ask for applications that look like they want to accept incoming connections (i.e., server applications). But for me, it asks for permission for applications like Cyberduck (ftp app), and Microsoft Word 2004. In addition, the poster above mentioned Safari made it onto the list. To me, neither Cyberduck nor Safari should matter, since they are both purely client applications that only receive incoming data when it is requested by them, no? And what business does Word have in wanting to accept incoming connections? (maybe this is a question for Microsoft, not Apple).
Well, I have a list of other questions about half a page long, but if anyone can help with those two, it would be a big help.

Similar Messages

  • Firewall issue -- allow incoming connections?

    I have my computer set to allow incoming connections for various programs. (Almost) every time I run the programs, however, I'm asked if I want to allow the connections. Am I missing something, or is it supposed to keep asking me about that?

    Hello rokapoke:
    I have my firewall set to +"allow only essential services"+ - the highest level, I believe. I do not get those messages.
    Barry

  • Firewall keeps prompting to allow incoming connections

    Hi,
    This is, by far, Lion's most annoying new feature. Every time I open iTunes after startup, I get asked to allow incoming connections through the firewall. This behavior started happening after I made the mistake of upgrading to Lion. Removing itunes from the listed of allowed software does absolutely nothing, almost as if the program is just a blank field with no actual code running behind it. The excepetion gets added back to the firewall every time the Mac is restarted along with the prompt. iTunes' startup often hangs upon waiting for this prompt to appear and be answered.
    Disabling the firewall is not an option, nor is reinstalling iTunes as it is the firewall which seems to be the problem. Rolling-back to 10.6.8 is also not a possibility at this time. I can't be the only one with this problem. Anyone else?

    Hi!
    I re-enabled firewall just to see if it was solved on 10.7.3 and, as you said, no way. Everytime I startup my iMac, Firewall is prompting me to allow incoming connections for iTunes, but not for the rest of the other software I'm using, which I was asked for just once.
    Could you solve it?

  • Canon MP560 Scanner Problems - Allow Incoming Connections and Sharing

    Though I have allowed incoming connections for my scanner, I'm prompted every time I want to scan. In addition, I've also selected so share my scanner in the Print and Fax window. However, it automatically deselects.
    Help!
    Oh, and I've also allowed incoming connections for the DVD/CD sharing but according to the Sharing menu, it's blocked by the firewall. I don't understand. =S

    I'm not sure what you mean by prompted every time you want to scan, but if you have the scanner driver and not the Canon Scan utility in the permitted list, then this could be the issue.
    To add the Canon IJ Network Scan Utility to the list of allowed programs.
    1. Open System Preferences > Security and select the Firewall tab.
    2. Enable “Set access for specific services and applications
    3. Click the + icon
    4. Browse to Mac HD > Library > Printers > Canon > BJPrinter > Utilities and select Canon IJ Network Scan Utility. Click Add
    5. Ensure the Canon IJ Network Scan Utility is set to ‘Allow incoming connections’.

  • ITunes always asks to allow incoming connections

    I have the apple firewall turned on. iTunes is set in the firewall to allow incoming connections.
    With iTunes Home Sharing turned on every time I start iTunes I am asked to allow incoming connections. I reply yes and the next time I restart iTunes I am asked the same question again.
    If I turn iTunes Home Sharing off I am never asked about allowing incoming connections when I use iTunes.
    Is there something else I should be doing? ( other than turning the firewall off )
    Any help would be appreciated.

    If you are experiencing this problem on your Mac, follow these simple steps to get rid of the Allow or Deny popups:
    1. Go to the Applications folder and drag iTunes to the Trash. Don’t worry, your music, videos, and entire media library are not affected and will still be there. Only the iTunes software will be uninstalled (though it's always wise to have a backup, particularly of your iTunes Store purchases or anything else that would be difficult/expensive to replace).
    2. Reboot or log out of your Mac. This step may or may not be necessary, but it certainly doesn’t hurt.
    3. When you are logged back in, go to Apple’s website to download the latest version of iTunes if you haven't already..
    4. Install iTunes. Do not import any songs or videos if it prompts you to do so.
    All of your media should be right where you left it the first time your fresh installation of iTunes is opened. If you get another firewall popup asking to Allow or Deny incoming network connections, make your choice and that should be the last time you see it. Future iTunes launches shouldn't pester you anymore.
    From: MacYourself
    http://www.macyourself.com/2009/08/19/itunes-keeps-asking-to-allow-or-deny-incom ing-connections/
    Hope this helps.

  • Allow incoming connections

    All of a sudden iChat asks it is should allow incoming connections. I have it set in my firewall to allow. Why does it ask every time I open the program? Is there a way for it to remember yes?

    jflnyc:
    I can get iTunes to stop this behavior by turning off "Share my iTunes Library" in the preferences of iTunes.
    -A

  • When using Microsoft office programs it alwasy asks if i want to "Allow incoming connection"

    Ok guys i have check my firewall and I have it set to allow incoming connections yet it still always asks. How do I fix this?

    Any Front Row, Apple TV, or iDevices around?
    See 2nd to last post here...
    http://rafsoftware.com/rafsoftware/forums/viewtopic.php?f=5&t=17&start=10
    Little Snitch, stops/alerts outgoing stuff, I wonder if you tried that & set it to allways allow whatever VNC or port 5900 wants...
    http://www.obdev.at/products/littlesnitch/index.html

  • Allow Incoming Connection

    Every time I open iTunes, it asks me if I want to allow iTunes.app to allow incoming connections. Is there a way to make it always allow connections without asking me every time?

    Agreed - delete the app and reinstall worked for me too.
    NOTE: In the following process, *do not* touch the iTunes folder inside your user Home directory's Music folder. You need to keep this as it contains all your media and settings. Likewise, there is no need to delete any iTunes preference files. We simply need to remove and reinstall the iTunes application itself:
    1. Download the latest version of iTunes from http://www.apple.com/itunes/. Do not install it yet though - first we need to delete the existing iTunes app.
    2. Open a finder window, click on "Applications" in the side bar and find the "iTunes" app within the applications folder.
    3. Drag the "iTunes" app to the Trash
    4. Click and hold the Trash until the "Empty Trash" option appears, then click on "Empty Trash"
    5. IF you get an error message saying that the Trash cannot be emptied because "iTunesHelper" is in use, do the following steps. Otherwise, proceed to step 6.
    5a. Open a finder window, click on "Applications" in the side bar and find the "Utilities" folder within the applications folder. Open the "Utilities" folder, locate the "Activity Monitor" app and launch it.
    5b. Under the "Process Name" column in "Activity Monitor", find the "iTunesHelper" process, click on it to highlight, then click the red "Quit Process" button at the top. (hint: you can sort the processes alphabetically by clicking on the "Process Name" column heading itself)
    5c. Repeat step 4 to empty the Trash
    6. Install the latest version of iTunes that you downloaded in step 1.
    After doing this, I no longer get the annoying "allow incoming connections" popup every time I launch iTunes and it means I can now leave my FireWall enabled - do not listen to those that suggest disabling your FireWall is a way to fix this.
    C.
    Message was edited by: Ceres1
    Message was edited by: Ceres1

  • ARDAgent - Application Firewall: allow incoming connections alert won't stop

    Hello,
    after having updated Remote Desktop Client from 3.8 to 3.8.2, users have to allow (or deny) incoming connections within the Firewall settings
    WHENEVER starting the /System/Library/CoreServices/RemoteManagement/ARDAgent.app, especially when logging in or starting the /Applications/Remote\ Desktop.app (Admin)
    ALTHOUGH
    /System/Library/CoreServices/RemoteManagement/ARDAgent.app is locked in the Firewall Settings AND/or
    "Automatically allow signed Software to receive incoming connections" is checked (enabled)
    When switching to a standard user (not an admin), he also can/must allow or deny - and the Firewall Settings are modified correspondingly.
    My questions are so far:
    Why the existing Firewall Setting does not affect when (re-)starting the ARDagent.app-deamon?
    Is the ARDagent.app (since Version 3.8.2) not a signed software?
    This kind of attitude occurs for OS X 10.10.1 _and_ OS X 10.10.2.
    Many thanks for any approach to overcome the problem and kind regards from Munich (GER).

    I was fighting with this 'till now.
    This is what I did:
    Remove ARDagent.app from /System/Library/CoreServices/RemoteManagement
    Remove it from the list in Firewall preferences.
    Disable Firewall.
    Reboot.
    Install OSX 10.10.2 combo-update.
    Reboot.
    Add manually the ARDagent.app to the Allowed Rules in Firewall from /System/Library/CoreServices/RemoteManagement
    Enable Firewall.
    Update to ARD Client v3.8.2 v1.1 from the App Store.
    Reboot.
    Here, the annoying firewall message has gone. I hope it will work for you too.
    I know it's a bit raw and it can be done in a more sophisticated way... But I have no time to deal with this kind of sh*t!
    Cheers.

  • 11i does not allow incoming connections (sqlplus)

    I just installed Oracle EBS 11i on RHEL AS4. I have a laptop(windows running oracle client tools) that I use to connect all my oracle-db instances. However, my newly installed apps 11i won't let me connect using sqlplus or any other client from my laptop (or any other client machine for that matter). Again, I am trying to access the tables not the forms interface using jinitiator. Here is the error message I keep getting: "TNS 12537 Connection closed"
    I see that discoverer related processes started when I started the apps. Is there a discoverer admin console that I can use? Also can I install discoverer plus or discoverer desktop to connect to the descoverer running on the apps server? Can I view the existing Discoverer reports using a browser?

    Thanks for your reply. My SQLnet access option is set to "ALLOW_ALL" and I was still not able to connect. That is why I manually added a line to "sqlnet.ora" file. I bounced the listner and now it is allowing the connections from client machines.
    I am able to see the discoverer reports using the "Discoverer Viewer 4i" that comes with the EBS. I want to set up new reports or edit the existing ones. Do I do this using any interface provided by EBS or do I have to use the discoverer desctop or discoverer plus on a seperate client machine? Also, how do I access the discoverer admin that comes with EBS?
    Thanks!

  • Why do apps need *repeatedly* need permission to allow incoming connections

    Even though I have added them to the list of allowed programs in the Security preference pane, many apps still ask me to “Allow” or “Block” access to incoming connections for my firewall. In the same dialog it recommends that I can avoid seeing this in the future by adding this app to my list of allowed programs—but I've already done so! And it's still asking me for permission.
    Why?

    Two things come to mind: (a) your ALF is borked and (b) the apps keep changing (for example, you add an app and then update it with a new version).
    Try removing the file called com.apple.alf.plist in *Macintosh HD/Library/Preferences/* and rebooting. Then just add the "offending" applications as they request that they should.
    <Edited by Moderator>

  • Allow incoming connections? in Security prefs

    Could someone explain what is a normal incoming connection to (say) Microsoft Excel? If my Excel app wants to check with Microsoft about whether an update is available, or something else, wouldn't it initiate an outgoing connection?
    I have the 'set access for specific...' option set in the Security prefs, and not only does it ask me about MS Excel and others, it repeatedly asks about the same application! Why is that?

    bobgoldstein wrote:
    Could someone explain what is a normal incoming connection to (say) Microsoft Excel? If my Excel app wants to check with Microsoft about whether an update is available, or something else, wouldn't it initiate an outgoing connection?
    I believe, yes Excel would do that.
    I have the 'set access for specific...' option set in the Security prefs, and not only does it ask me about MS Excel and others, it repeatedly asks about the same application! Why is that?
    See here:
    http://discussions.apple.com/thread.jspa?threadID=1647506
    Basically for not-digitally-signed applications the firewall will ask each time.
    /p

  • FIREWALL / EXPLORER ISSUES (No prompt on blocked incoming connections)

    I've spent a week trying to identify the cause of this, and I've just cleared (deleted) several machines (VHDs), thinking they were exhibiting the symptoms, only to find my clean VHD installs are also ... infected?
    My firewall appears correctly configured (default settings, nothing's changed)
    but it's blocking programs (I think), and not asking me to set rules. I've searched the reg, no references of the exe, I've checked the firewall rules, nothing there. In my configured systems (I've just deleted) I even reverted to factory service settings,
    in case I'd stopped/manualised something that needed to be automated....
    I'd compared registry shots. Nada. And now I can't use my iPhone as a mouse, and god knows what other problems are in there.
    Is this a malware issue? How can I test to see what's blocking 'networked' programs (incoming connections / interactive services)?

    Maybe it's an issue with the setup. rebooted into bad build that doesn't have this issue.. worked
    when it works
    About to retry newly extracted files.. thought I'd try them on this machine.. FAIL. Which means there's an issue with the path (?), or some info is written somewhere about the program when it's  extracted (again, ?).
    when it doesn't work, then does work...
    Ok, my money's on path, and my question is this: if you run an .exe off a usb, for example, will windows firewall prompt and manage that program?
    I'm wondering if the OS (f/w mgr) is not seeing the app, and therefore not prompting for mgmt...
    Moment of truth: rebooting to new build to test (more) 'local' execution of program!

  • Netsession_mac allow incoming connections?

    when I start up my computer I get this notification:   "Do you want to allow netsession_mac_b94eec3 to accept incoming connections?"   what does this mean?  I recently had my facebook account hacked.  wondering if there might be a connection...

    I followed the link to HT3923 and it was not displayed properly on my mac running Lion, using Safari.  It displayed and immediately was overlaid with blank whitespace.  Anyway, I then followed that link on another non-mac device and found it to be "Requirements for Software Update Service, modified 3 days after the post above.
    It does not talk about Akamai's download manager, so time to keep searching.
    ...Yes, I did download a new thing from Adobe - a copy of FlashBuilder 4.5, which I believe does use Akamai's services to accelerate downloads.  Akamai provides Content Delivery devices, software, service... pushing certain content to multiple places around the internet so that a download does not always come from company xyz (Adobe in my case) servers directly.  Instead there might be cached copies in Comcast's local servers/devices as well as in 100 other vendors' equipment around the internet...FYI.

  • Firewall keeps asking for permission to allow incoming...

    Help! I have a simple Intel MacMini system running OS X 10.5.5 (Client) with a few web services running on it. It has run for years without problem (mostly Tiger, more recently Leopard). Recently have been having problems with the Leopard Firewall asking permission for 'incoming' every time I start the machine. This is a real pain - in particular because it seems if you don't get to the dialog asking permission in reasonable time, OS X Firewall assumes an answer 'No' and short of rebooting there doesn't appear to be any way of telling it you want access allowed.
    Just for clarity - all the apps in question are in the 'Allowed Apps' list already, and set to "Allow Access". Also, I recently moved the server from an old CoreDuo Mac Mini to a new Core2Duo Mac Mini - using Migration Assistant. The server is running the following useful apps:
    CommunigatePro mail server
    Parallels Desktop running Win2K server
    PureFTPd Manager
    Apart from Activity Monitor, nothing else runs on the machine.
    The problem applications are CommunigatePro, Some 'Helper' applications for CommunigatePro, and PureFTP (installed / run via PureFTPd Manager).
    I am guessing that this is either a permissions thing (perhaps OS X Firewall can't 'mark' the app as having permission - if that is what it does), or an app signing thing - the apps that are causing problems are third party sourced. But all have worked reliably under Leopard and Tiger for ages - so I don't think it is necessarily someone else's (i.e. not Firewall's) fault. Also I have run Disk Utility to check permissions - and it has found nothing to fix.
    Anyone got any ideas?

    I hit the same problem. In my case the problem was related to a downloaded JDK that included source code for Java development. This new JDK was installed at the default location /Library/Java/JavaVirtualMachines/1.6.0_26-b03-383.jdk/. Some of my scripts use this version of Java and those are the ones that were giving the warning. I was not able to add this Java to firewall settings because the stupid UI would not allow me to navigate to that directory. I am not sure what prevented it from going past /Library/Java/JavaVirtualMachines/1.6.0_26-b03-383.jdk/ directory but that was the reason why I could not add an allow rule for that java executable. Anyways, the command line solution to this was to run -
    sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add /Library/Java/JavaVirtualMachines/1.6.0_26-b03-383.jdk/Contents/Home/bin/java
    This added the second java into firewall rules. In your case I would suspect there is another version of java executable that is run to the one that you have already allowed. If you right click and the java rule and do show in finder you will probably be able to figure out if you are indeed using the allowed java.

Maybe you are looking for