Firewall repeatedly asking to allow or deny?

Hi
My firewall is set on app-specific permissions.
I've been getting a dialog asking to allow or deny "incoming connections" for a certain app. Every time I click "Deny" and next time I launch the app I get the dialog again. There's no "always deny" option that I can find.
My questions:
1. how do I deny it once and for all?
2. what about "outgoing connections"? are they blocked too if I choose "deny"?
Thanks!

I don't consider myself to be a firewall expert, but the System Preferences/Security/Firewall option of "Allow all incoming connections" seems to fit the bill. I do work with a lot of PC's and I've become familiar with many of the firewall programs available for them. PC's really need this badly:)
Leopard doesn't provide you with the ability to block outgoing connections any better than WindowsXP does. In the event that a user actually gets a Trojan Horse or other Spyware, these "incoming only" firewalls are completely useless.
We don't have to worry too much about Malwares yet with Leopard, but if we did, the Leopard firewall would automatically allow an outgoing connection as it would appear to be initiated by the user. - This becomes a worthless "feel good" security, especially when you are at your own home with a hardware firewall available in every NAT router that is already blocking so many ports that you have to punch holes with port forwarding to get many programs to work. Almost all of these routers make a provision for a "Stealth" mode where the router will not answer a ping or respond on the ID port scan. They also have a method of creating a "DMZ" wide open - forward every unsolicited incoming connection - to a specific IP number on the LAN so that you can run a server (I'm running Leopard server using DHCP with Manual Address to match the DMZ IP number) without having to forward all the ports for iChat, iCal, FTP, email, web server or any other service you want to run.
In the coffee house scenario, you wouldn't have the hardware firewall to protect you, but you also will not be able to block outgoing connections either. Still worthless.
If the Leopard firewall is told to just go away, you can use a real firewall program for much finer, enduring control. Little Snitch, and other programs will pop up with a warning, and offer to deny, allow once, or allow always every outgoing connection. The firewall comes with many presets that take into account normal activity like email, web surfing programs and some system initiated connections, but questions just about every other type of connection.
Sorry for the length of this reply, but the comparisons to the worthless WinXP firewall just took over:)

Similar Messages

  • Firewall keeps asking to allow or deny

    I already marked an incoming connection (a DIRECTV plug-in) as "always allow" under Firewall preferences. And also in Safari under security preferences. Still, every time the computer wakes it asks me again...

    Please open the Security & Privacy preference pane and select the Firewall tab. Click the lock icon to unlock the settings, if necessary. Click the button marked
              Firewall Options...
    In the sheet that opens, the box marked
              Automatically allow signed software to receive incoming connections
    should be checked.
    If the applications that you're having trouble with is on the list above that checkbox and is blocked, change the setting to
              Allow incoming connections
    If the application is not on the list, add it with the same setting.
    If it's already on the list and already allowed, delete the entry, then add it back.
    Click OK. Test. If there's no change, ask for further instructions.

  • FREEZES WHEN FLASH ASKS FOR ALLOW OR DENY

    INTEL mac freezes when flash player ask for allow or deny on all browsers, safarrie, chrome , and foxfire?  Hellp!

    Firefox uses a loop back connection to communicate with the Software Security Device (passwords and secure connections).
    Some firewalls interpret that as Firefox being as server.
    See also [[Firefox makes unrequested connections]]

  • ITunes 9 asking to Allow or Deny every time at launch?

    Why is iTunes 9 asking to allow or deny incoming connections every time I launch iTunes? Is there a simple way to correct this or a known bug. I have enabled that Home Sharing feature so I think it is that probably.

    Hi everyone. I did not have the same problem when I just upgraded to 10.6.1. But I started to have it when I added new iTunes genres artworks. So may be it's something related to changing the original content of the iTunes resources folder like permissions, etc. Did someone make the same change?.
    Message was edited by: ulYses
    Message was edited by: ulYses
    Message was edited by: ulYses
    Message was edited by: ulYses
    Message was edited by: ulYses
    Message was edited by: ulYses
    Message was edited by: ulYses

  • Firewall always asks to allow the same incoming network connections

    I recently changed my firewall setting from "Allow all incoming connections" to "Set access for specific services and applications" in order to better protect my computer. After making this change, my computer will ask me to either allow or deny incoming network connections for any application that requests that type of connection. Once I make a decision to allow or deny access, my choice is saved in System Preferences>Security>Firewall. Thus, I do not have to keep making the decision each time access is requested - OSX remembers my decision.
    Currently, in addition to the OSX services that I have turned on and are listed in the Firewall access screen - File Sharing, Remote Login & Screen Sharing; I have the following applications listed for allowing incoming connections: Adium, Skype, TiVoDesktop, BOINC, GrowlHelperApp & Cyberduck.
    Unfortunately, for two programs - Adium and BOINC, the firewall setup asks me every time I boot, or start either application whether I want to allow incoming connections. When this request occurs, I click on the allow button. The first time I did that, an entry was made in the System Preferences>Security>Firewall settings page that shows the application and that I allowed incoming connections. But, I still get asked every time.
    During troubleshooting, I discovered that if I disabled my Bonjour account in Adium, I stopped receiving the continuous requests for Adium. In fact, when I started Adium, with the Bonjour account disabled, I received no request. However, as soon as I enabled the Bonjour account in Adium, I immediately received the request. Interestingly, the request indicated Adium, not Bonjour as making the request. And, when I clicked allow, no new entry was added to the Firewall list for Bonjour (The Adium one was already there).
    For BOINC, there is no setting related to Bonjour, so I am unable to make a clear connection there. However, even with no Projects attached to BOINC, I still get the incoming connections request every time I boot. So, the problem is related to the BOINC application itself, and not any particular project attached to it.
    The evidence suggests that the problem is associated with the OSX firewall and Bonjour, not with Adium & BOINC. Any suggestions on how to resolve this problem would be appreciated.

    Thank you for your suggestions. They were helpful. I went to System Preferences>Security>Firewall and removed all of the applications there, so that the only items left were the services I had turned on (File Sharing, Remote Login & Screen Sharing). I then restarted the computer.
    After the restart, BOINC requested the incoming connection and I clicked allow. Adium did not ask, since I had my Bonjour account within Adium disabled. I then restarted the computer again. When it came up, BOINC did not display the request window for incoming connections. So, the problem was fixed for BOINC by following your recommendations. Unfortunately, this was not the case with Adium.
    I next enabled the Bonjour account within Adium and I immediately received the request window for incoming connections. I clicked allow, and Adium.app then appeared in the System Preferences>Security>Firewall list indicating that it was allowing incoming connections. I restarted the computer and as soon as Adium restarted, the requested window returned. I immediately restarted the computer again, and got the same thing upon starting up. I then disabled the Bonjour account in Adium, restarted the computer and the request window did not come up. So, there appears to still be a problem when having an enabled Bonjour account within Adium.
    Message was edited by: paddster7

  • Firewall keeps asking to allow network connection

    I have a couple of apps that require network connections and the firewall keeps aking to allow the connection. i have gone into the firewall settings and the box is checked to allow these apps to connect, but a dialog box still pops up every time asking me to allow it. this is new sinse 10.9, maybe even 10.8, i don't remember.

    You can read through
    https://discussions.apple.com/message/11857089#11857089

  • IPhone apps repeatedly asking to allow notifications, even after saying ok.

    I have the 4s. Constantly apps are asking to allow notifications, even after allowing them. It seems to not remember my choices. I have restarted the phone and restored it twice. Same problem. Also, all of the newstand app subscriptions have to be restored constantly almost daily to download my issues.  The Zinio app does the same thing. This is why I suspect it's not just an issue with individual apps, but a deeper issue within the phone or it's systems. It's kinda frustrating to redownload subscription content over and over again. I checked account settings and passwords, etc. nothing seems to fix it. Anyone else having these issues?  I am on AT&T,64gb iPhone 4s. if anyone knows of a fix, please let me know.
    Thanks for everyone's help.
    Powers

    If no change after restoring your iPhone with iTunes as a new iPhone or not from your iPhone's backup, more than likely your iPhone has a major hardware problem.
    If your iPhone remains under warranty, you can call AppleCare or make an appointment at an Apple store if there is one nearby. You can make an appointment at an Apple store if there is one nearby regardless if your iPhone remains under warranty for a diagnostic check to be run on your iPhone to determine where the problem lies. There will be no charge for this.

  • Boxes popping up asking to allow or deny

    Every time I login to the computer I get these boxes pop up. I am not sure what they mean and if I should allow or not or how to make them stop. This just started after the Mavericks download. Any help would be greatly appreciated. Thanks

    Update: I selected block all incoming connections block on the firewall tab of security and privacy settings and these three messages appear to have stopped popping up. As far as I can gather I do not believe I do any file sharing so that should not be an issue I suppose.

  • ITunes always asks to allow incoming connections

    I have the apple firewall turned on. iTunes is set in the firewall to allow incoming connections.
    With iTunes Home Sharing turned on every time I start iTunes I am asked to allow incoming connections. I reply yes and the next time I restart iTunes I am asked the same question again.
    If I turn iTunes Home Sharing off I am never asked about allowing incoming connections when I use iTunes.
    Is there something else I should be doing? ( other than turning the firewall off )
    Any help would be appreciated.

    If you are experiencing this problem on your Mac, follow these simple steps to get rid of the Allow or Deny popups:
    1. Go to the Applications folder and drag iTunes to the Trash. Don’t worry, your music, videos, and entire media library are not affected and will still be there. Only the iTunes software will be uninstalled (though it's always wise to have a backup, particularly of your iTunes Store purchases or anything else that would be difficult/expensive to replace).
    2. Reboot or log out of your Mac. This step may or may not be necessary, but it certainly doesn’t hurt.
    3. When you are logged back in, go to Apple’s website to download the latest version of iTunes if you haven't already..
    4. Install iTunes. Do not import any songs or videos if it prompts you to do so.
    All of your media should be right where you left it the first time your fresh installation of iTunes is opened. If you get another firewall popup asking to Allow or Deny incoming network connections, make your choice and that should be the last time you see it. Future iTunes launches shouldn't pester you anymore.
    From: MacYourself
    http://www.macyourself.com/2009/08/19/itunes-keeps-asking-to-allow-or-deny-incom ing-connections/
    Hope this helps.

  • Firewall keeps asking if incoming connections are allowed

    Hi all,
    Why does the Leopard firewall keep asking me if a application should allow or deny incoming connections for every application that I run? It doesn't happen everytime I ran an application but it happens quite often even for apps that I've already clicked on [Deny]. This is getting really, really annoying. First, why do all apps seem to want to allow incoming connections?
    Is there a list of essential Mac OS apps that really need to allow incoming connections? I am not doing and file/printer/connection sharing. And I don't use iChat or any other IM software.
    Is there a better software firewall to use with Leopard on my Mac Pro? I have a hardware firewall, a D-Link DIR-655 router, which seems to do quite well. BTW, I have the Mac firewall set to allow specific apps.
    Thanks,
    Steven

    I found the answer in another thread:
    http://discussions.apple.com/thread.jspa?messageID=6748694
    Basically all you have to do is delete iTunes and iPhoto from your firewall access list. OSX already knows how to selectively open the ports for these bundled apps. When you put them onto the firewall access list, something goes wrong and it has to ask for permission every time.
    Jason

  • Why does firewall constantly ask me to allow iTunes to receive incoming connections?

    I enabled Firewall for my MacBook Pro 2012, running OS X 10.8.2 Mountain Lion, about two months ago.
    Everything was working fine, until a few weeks ago, when I was experiencing problems with logging in to my Mac.
    I tried booting up my Mac but it wouldn't boot.
    Then, I tried Recovery mode and restored my Mac from a time machine back-up.
    Everything worked fine, but since then my Mac has constantly asked me "allow incoming connection for iTunes".
    How can I solve this prolem?
    I've never had to allow connections for iTunes until after restoring my Mac from that Time Machine back-up.

    Also, I recently installed Alfred, and purchased a power-pack license.
    It installed an iTunes mini-player for me to have quick access to my songs.
    It was only after installing Alfred that I started to have to allow connections for iTunes.

  • AFP won't allow me to "allow" or "deny" webcam

    Hi,
    I have the following issue and was wondering whether I could receive some help. I have read through quite a few threads on this forum and tried a solution but it hasn't worked. The problem is that I whenever I try to use my webcam on a website, the AFP dialog box pops up asking me to "allow" or "deny" access to that particular website. However I can't click on yes or no because the dialog box itself freezes. The browser does not freeze as I can navigate to other parts of the website (for example, "Home"). I have tried going on to the website using different browsers but it hasn't helped.
    I have tried to uninstall and re-install AFP. I have used the following procedure to uninstall and re-install  AFP:
    1) Download the uninstaller to desktop
    2) Close all programs (including any programs in the system tray - such yahoo/msn messenger)
    3) Run the uninstaller program
    4) re-boot the computer
    5) checked on the following page to see if the AFP had uninstalled; http://www.adobe.com/software/flash/about/
    6) Downloaded and installed the latest version of AFP (version 10.1.82.76)
    7) Restarted my computer
    The above hasn't worked for me. I have checked that all my drivers are up to date for my webcam and all other hardware.
    I have turned off my firewall and anti-virus but this hasn't worked. I have tried to access the hardware accelerator settings for AFP but the box keeps freezing so I can't do it. The only way I am able to get around the box is if I go to the global settings manager for AFP and click on the website and state "always allow". 
    System information:
    Operating system - Windows Vista Home Premium 32 Bit
    Web browser - Firefox 3.6.8, Internet Explorer 8, Google Chrome 5.0.375.127
    Adobe Flash Player - version 10.1.82.76
    Firewall/Anti-virus: Zone Alarm Extreme Security Version 9.3.014.000
    Webcam: Vimicro USB 2.0 UVC PC Camera
    The same problem occurs for me on all three web browsers.
    Any help would be much appreciated. I hope I have given enough information.

    Hi, Troubleshooting is like trying to find a needle in a haystack, right? LOL  I'm always amazed computers work at all:-)
    Hats off to the Microsofts, the Apples, the Adobes and all of the others that do all they do, so I don't mind a glitch here and there.
    You are probably correct about the allow/deny selection for Zone Alarm. I used it at one time and I had a hard time with it due to not understanding what an allow or deny would do:-) Glad you were able to see that.
    The FF vs 3.6.9 from what I have read was all about Security. I was over there late last night reading. Link here:
    http://www.mozilla.org/security/known-vulnerabilities/firefox36.html#firefox3.6.9
    Also, here is some additional info and it covers the DLL preloading attack that is going on:
    http://www.informationweek.com/news/smb/security/showArticle.jhtml?articleID=227400031&cid =nl_IW_SMB_2010-09-09_h
    Microsoft came out on 8/23 on the latter link.
    Thanks for the appreciation:-)  There are many other volunteers on the other Adobe Forums as well and I'm sure they are all appreciated. Many have been on the other Forums for a very long time. I'm always amazed at the number of posts they have accumulated over the years! Very Hi-Tech people over there!
    Regards,
    eidnolb

  • What is the fix for some applications repeatedly asking permission to accept incoming connections?

    What is the fix for some applications repeatedly asking permission to accept incoming connections?
    On every restart, AutoPairs and Epson Event Manager asks me to reject or agree to allow incoming connections. It is very aggravating and time-wasting. I know other Mac users who have the identical problem with other applications on their Macs.
    Isn't there some way to make my Mac understand that "Yes" means "Yes" once and for all?
    I am presently running Yosemite, but this was a problem with prior OS X versions too.
    Respectfully,
    Nate

    This is a comment on why you might, or might not, want to use the built-in Application Firewall.
    The firewall blocks incoming network traffic, regardless of origin, on a per-application basis. By default it's off, and when turned on, it allows applications digitally signed by Apple, and only those applications, to listen on the network. It does not block outgoing traffic, nor can it distinguish between different sources of incoming traffic, nor does it filter traffic by content.
    No matter how it's configured, the firewall is not, as some imagine, a malware filter. If that's what you expect it to do, forget it. All it will do is bombard you with pointless alerts.
    Consider some scenarios in which you may expect the firewall to be useful.
    1. You enable file sharing, and you allow guest access to certain folders. That means you want people on your local network, but not outsiders, to be able to access those shared folders without having to enter a password. In the default configuration, the firewall will allow that to happen. The router prevents outsiders from accessing the shares, whether the application firewall is on or off. But if your computer is portable and you connect it to an untrusted network such as a public hotspot, the firewall will still allow access to anyone, which is not what you want. It does not protect you in this scenario.
    2. You unknowingly install a trojan that steals your data and uploads it to a remote server. The firewall, no matter how it's configured, will not block that outgoing traffic. It does nothing to protect you from that threat.
    3. A more likely scenario: The web browser or the router is compromised by an attacker. The attack redirects all web traffic to a bogus server. The firewall does not protect you from this threat.
    4. You're running a public web server. Your router forwards TCP connection requests on port 80 to your Mac, and the connections are accepted by the built-in web server, which is codesigned by Apple. The application firewall, still configured as above, allows this to happen. An attacker hacks into the system and tries to hijack port 80 and replace the built-in web server with one that he controls. The good news here is that the firewall does protect you; it blocks incoming connections to the malicious server and alerts you. But the bad news is that you've been rooted. The attacker who can do all this can just as easily turn off the firewall, in which case it doesn't protect you after all.
    5. You're running a Minecraft server on the local network. It listens on a high-numbered port. You, as administrator, have reconfigured the firewall to pass this traffic. An attacker is able to log in to a standard account on the server. He figures out how to crash Minecraft, or he just waits for you to quit it, and then he binds his own, malicious, Minecraft server to the same port. The firewall blocks his server, and because he's not an administrator, he can't do anything about it. In this scenario, the security is genuine.
    6. Here is a more realistic scenario in which you might have reason to enable the firewall. Your MacBook has sharing services enabled. You want those services to be available to others on a home or office network. When you're on those networks, the firewall should be off. When you move to an untrusted network, you can either turn off all the services, or enable the firewall with a non-default configuration to block them. Blocking is easier: one click instead of several.

  • Why do I have to allow or deny iTunes or any other software, access to the internet?

    Why do I have to allow or deny iTunes or any other software, access to the internet?
    I've had my MBP with Leopard since the summer of 2010. From then till this past spring, I have had my firewall on and when opening a program that needs internet access, such as: iTunes, Vuze, various office products, without a problem.
    Since this spring, each time I open the above software, I have give permission (allow/deny) internet access. So, this isn't a prolem really, I'm just curious why this is happening.
    Processor: 2.66 GHz Intel Core I7
    Memory: 4 GB 1067 MHz DDR3
    OS X 10.6.8

    Did you install Little Snitch (or Hands Off)?  It will post a dialog to allow/deny apps calling out if you don't allow it to record what it is to permanently do if it sees the same call again from the same app.
    Little Snitch will post a dialog with allow/deny buttons.  But there is also three tab buttons; once, until quit, forever. "Until quit" is the default.  So it won't nag about the same call again until that app quits but it will if you relaunch that app and the app makes the same call out.  Choose "once" will allow that one call to be placed but will cause LS to nag the next time that app tries to call even if you haven't quit.  Choose Forever and it will never nag again about that specific all attempt.
    You need to train LS which apps you want to permit calling out and which ones you never want to allow calling out.  You will of course initially be nagged quite often as you are seeing.  But if you train LS to always allow the ones you want to allow eventually there will be fewer and fewer dialogs since your habits don't change that radically in the way you use your own machine.

  • Firewall keeps prompting to allow incoming connections

    Hi,
    This is, by far, Lion's most annoying new feature. Every time I open iTunes after startup, I get asked to allow incoming connections through the firewall. This behavior started happening after I made the mistake of upgrading to Lion. Removing itunes from the listed of allowed software does absolutely nothing, almost as if the program is just a blank field with no actual code running behind it. The excepetion gets added back to the firewall every time the Mac is restarted along with the prompt. iTunes' startup often hangs upon waiting for this prompt to appear and be answered.
    Disabling the firewall is not an option, nor is reinstalling iTunes as it is the firewall which seems to be the problem. Rolling-back to 10.6.8 is also not a possibility at this time. I can't be the only one with this problem. Anyone else?

    Hi!
    I re-enabled firewall just to see if it was solved on 10.7.3 and, as you said, no way. Everytime I startup my iMac, Firewall is prompting me to allow incoming connections for iTunes, but not for the rest of the other software I'm using, which I was asked for just once.
    Could you solve it?

Maybe you are looking for

  • Can't burn a disc w new iTunes - help

    Hi - trying to burn a cd-r w music (open source) using new iTunes. Can't get cd to register in iTunes. What am I missing? Thanks for all help - Lillian

  • How to create a "Command Line"/"Text Validation"

    I want to create a command line like the picture. I'm using "Input Text" method for text. Variable name is "myText", Instance Name is "line". How can I use "if" in input text like this: Command name is: exit, if user wrote "exit" command, exit the fl

  • GREP code for changing $150.00 to $150.  ?

    I am trying to save space in a multi-column catalog.  Many prices are whole dollar amounts.  What would be the GREP code for finding and replacing?

  • Error registering the Plugin in OIm 11g

    HI All, I am receiving the following error while registering the plugin in OIM11g [oracle@orclfmw plugin_utility]$ ant -f pluginregistration.xml register Buildfile: pluginregistration.xml register: [echo] [echo] **************************************

  • New Macbook Pro Retina Display Issue

    Hi, I just purchased a new Macbook Pro, 15" Retina Display, 16Gb Ram, 2.3Ghz and finally got my hands on it last week after more than 5 weeks of waiting. I have a issue for which I wasnt able to find anything on either Google, or this or any other fo