Firewall settings for websites

Hello All:
Is there a way to set a Firewall setting/level for an individiual web site?
We have a DSL service and use a Verizon Westell 7500 modem/router with four ports. The Firewall setting had been on medium and the Firewall was turned off on the Mac Mini. With these settings we were unable to get into a web site.
I went into the Westell control panel and lowered the Firewall level to the low setting, I also turned on the Firewall on the Mac Mini and now we are able to get into the same web site.
The problem is - we are afraid that the low setting for the Firewall in the Westell might be dangerious to us for continous usage.
So, I wanted to know if there is a way to set a low Firewall setting just for the website we had trouble with and have a medium Firewall setting
for are regular usage.
Thanks for any input.

An NAT router is what enables you to share a single Internet connection among two or more devices. That's what you have.
It protects any network services you have running on your own network from being accessed from outside your network. You don't need a firewall for that, unless you have intentionally exposed services to the Internet.
A firewall does nothing to protect you from malware, if that's what you're worried about. I suggest you turn it off.

Similar Messages

Website data in advanced settings for websites never visited

How is it possible for website data to be recorded in advanced settings without visiting a website? Would other websites visited have to be related content popups? If the iphone 6 plus was used as a hot spot, can other users actions be recorded on the hot spot phone? Phone is automatically locked after short time. This user has visited sites previously on a previous iphone but not the phone in question

In addition to the server (site) that you navigate to, any inserted material on that site that is actually on another server would also be recorded, including images, embedded videos, ads, and other embedded content. Website data for another device using the phone as a hotspot will not be captured on the phone.

HT1810 firewall settings for apple tv

What firewall settings do I need for airplay for Mac OS Mavericks?

From the article linked below:
Firewall security settings
If you use the firewall, make sure the following firewall security options have been set to allow AirPlay Mirroring to work:
Choose Apple menu () > System Preferences.
Click Security & Privacy, and then click Firewall.
Click the lock icon to unlock it if it's locked, then type an administrator name and password.
Click Firewall Options.
Uncheck (deselect) “Block all incoming connections” checkbox.
Select (check) the “Automatically allow signed software to receive incoming connections” checkbox.
AirPlay Mirroring - About

LAN side firewall settings for Direct Access (Windows Server 2012 R2) in DMZ?

I am currently planning to set up our first Direct Access server (Windows Server 2012 R2). I will be in our firewall DMZ and we will be using the IP-HTTPS listener.
For the Internet facing rule only TCP 443 inbound/outbound is sufficient but for the LAN facing rules (not talking about the Windows server firewall) what would be the recommended firewall rules for a Direct Access server? Is there a best practice guideline
to follow for this? Appreciate any advice or comments. Thank you.

Hi Barkley
Please see this Technet Link which will backup your requirements - https://technet.microsoft.com/en-gb/library/jj574101.aspx
Section Reads -
When using additional firewalls, apply the following internal network firewall exceptions for Remote Access traffic:
ISATAP—Protocol 41 inbound and outbound
TCP/UDP for all IPv4/IPv6 traffic
Also another link from http://www.ironnetworks.com/blog/directaccess-network-deployment-scenarios#.VO3tfvmsVrU
"I have had a number of conversations with security administrators and network architects who have expressed a desire to place the DirectAccess server between two firewalls (firewall sandwich) in order to explicitly control access from the DirectAccess
server to the internal corporate network. While at first this may sound like a sensible solution, it is often quite problematic and, in my opinion, does little to improve the overall security of the solution. Restricting network access from the DirectAccess
server to the internal LAN requires so many ports to be opened on the inside firewall that the benefit of having the firewall is greatly diminished. Placing the DirectAccess server’s internal network interface on the LAN unrestricted is the best configuration
in terms of supportability and provides the best user experience."
Kindest Regards
John Davies
Thank for your reply and information John. I find it somewhat disappointing that Microsoft does not provide much more in the way of documentation and information regarding this topic. I required more information to show to our security team so they will allow
us to have the internal facing NIC not have more restrictive rules in place as it is a security concern.

Firewall Settings for Crystal Reports

In the SAP Solutions Installation and Administration Guide the fire wall settings which are described are based on the SAP Gateway service listening port and the SAP Dispatcher service listening port.
Both the port are opened but there is still the database popup asking for the username/password when the report is refreshed used with a SAP account within Infoview.
If this report is tested on an environment without a firewall there is no database popup.
So my question is if it is enough to only open both the SAP ports in the firewall or do we also need additional ports for different BO services like the Crystal Report processing services.
Thanks,
Jan

Hello Keith,
You are asking an Enterprise configuration issue, not a data connectivity issue. You really should post your question to the Business Objects forums.
Enterprise can be configured to work with firewalls. Ports can be set on the various servers using command line switches, etc. I believe firewall configuration is covered in the BOE XIR2 Admin guide, or possibly one of the appendicies. Here's a link to the BOE XIR2 Admin guide:
[BusinessObjects Enterprise XI Release 2 Administrator's Guide|http://help.sap.com/businessobject/product_guides/boexir2/en/xir2_bip_Admin_en.pdf]
If you need additional assistance you should consider opening a support case.
I hope this helps!
Sincerely,
Dan Kelleher

Firewall settings for Authenticated SMTP over SSL?

I'm trying to set up mail servives on a server hosted at a host company with a firewall. I think I need to open ports 587 and 465 but the hosting company says I should only open port 465 for this SMTP over SSL. When I try to send email locally thru an account on the server using the server's SMTP server, Apple Mail says it can't. I think part of the problem is the firewall at my end hosted by my ISP might be interacting with everything else.
Should i have both ports open? Thanks!

You will need to open the ports that you have added/enabled in Postfix. By default, Postfix only listens to port 25.
Typically, port 587 should be used. Often you will also need port 465 for backwards compatibility with some Microsoft mail clients.
To enable those ports in Postfix, see this:
http://mac007.com/?Tips:AlternateSMTPPorts
HTH,
Alex

Firewall settings for Crystal Enterprise

I have recently started working from home and have found that I cannot access the Enterprise report repository via my locally installed version of Crystal Reports XI r2. The application starts up fine but when I try to open a report from the Enterprise location I put in my logon details but after a few minutes I get an error 'Transport error: comunication failure'.
My network team have looked into it and say that this is happening because the ports that Crystal is trying to use are seemingly randomly assigned and they cannot define a rule for me to allow access.
Is there any way for me to define which port(s) Crystal will connect via so that networks can open a hole in the firewall for me?

Hello Keith,
You are asking an Enterprise configuration issue, not a data connectivity issue. You really should post your question to the Business Objects forums.
Enterprise can be configured to work with firewalls. Ports can be set on the various servers using command line switches, etc. I believe firewall configuration is covered in the BOE XIR2 Admin guide, or possibly one of the appendicies. Here's a link to the BOE XIR2 Admin guide:
[BusinessObjects Enterprise XI Release 2 Administrator's Guide|http://help.sap.com/businessobject/product_guides/boexir2/en/xir2_bip_Admin_en.pdf]
If you need additional assistance you should consider opening a support case.
I hope this helps!
Sincerely,
Dan Kelleher

Minimum NAT/firewall settings for iChat audio/video to work?

I've read the docs on teh ports and firewall issues but it is still unclear to me.
I have
1. An OS X Server 10.5.2 connected to the internet behind a router with NAT and running a firewall. NAT and of course the firewall are under my control. I've opened up the iChat Server SSL port (5223) on the OS X Server's firewall. I've put a 5223 redirect on the router to my OS X Server system. iChat is configured on this system and several users have permission to use iChat. The NAT table on the router is restricted, only ports I want to serve (e.g. 25, 22, 5223) are redirected to my server, the rest of incoming connections are blocked at the NAT (safer that way).
2. An OS X 10.5.2 client behind a NAT setup in another part of the world.
3. An OS X 10.5.2 client behind a NAT setup in another part of the world.
Both clients I can manage the firewall of the client, but I cannot manage anything on the router.
WIth this set up on both systems users have successfully connected to my OS X Server's iChat server using SSL. Text chat works. So I can assume that iChat Server works, that the permissions and login is OK, that SSL is OK.
But neither audio not video works. I cannot establish an audio or video connection because the connection fails. The iChat connection log says
2008-02-21 20:49:53 +0100: user@fqdn2: Error -8 (Did not receive a response from 0x18c09b30.)
there is nothing in appfirewall.log on the client.
The clients should work OK behind NAT. But my guess is that the server needs more than what I am giving it. However, I have been unable to find out what a minimum set of NAT redirects and firewall ports open is that would enable me to let these two clients do voice chat via my OS X Server at that other location.
Any tip for information on how to set up the server side minimally and safely would be welcome.
Thanks,
G

Hi,
Several things.
1) iChat server does in fact use an SSL Login on port 5223 (Tiger does not do the SSL but is still on the same port.
This does not allow the other data on port 5220 that the Jabber side of iChat needs.
Apple Doc http://docs.info.apple.com/article.html?artnum=93208 see item 6
2) It also ignores the fact iChat uses a completely different set of ports to the A/V Chat
So an AIM Login is port 5190 in those mentioned in item 6
port 5297, 5298 and 5353 are the Bonjour ones.
That leaves 5060, 5678, 16384-16403 for A/V chats in Tiger
5678, 16393-16402 in Leopard
The pics and Table are for Panther and Tiger. See the Table at the bottom http://www.ralphjohns.co.uk/pantherports.html
The changes from Tiger to Leopard in the port Usage for A/V chats is documented here http://docs.info.apple.com/article.html?artnum=306688 (Hence the none use of port 5060 and the smaller groupfor the actual A/V Chats)
3) Check out the two server forums for Leopard > iChat Server http://discussions.apple.com/forum.jspa?forumID=1235
And Tiger/OS X Server 10.4 > Collaboration Services http://discussions.apple.com/forum.jspa?forumID=700 as they maybe other issues that I am not aware of on the Server side.
So Leopard Jabber/iChat Server needs 14 ports
5220, 5222, 5223 on TCP and
5678, 16393-16402 on UDP
Tiger needs the A/V ports to include 5060 and extend the group to 20 ports (16384-16403)
I hope this helps.
8:44 PM Sunday; February 24, 2008

How do I remove "Allow all connections" for Pando in my firewall settings?

In System Information under Firewall Settings - Applications, I see the following: com.pando.pando: Allow all connections. However, when I go to System Preferences and look at the firewall options, this is not listed, nor can I find any trace of Pando anywhere else on my computer. Is this hidden somewhere, and how can I get rid of it?

pirihi,
open Safari’s Preferences, and select its Privacy tab. For the “Block cookies and other website data” set of radio buttons, select “Never”.

Fix for "your computer's system firewall settings will prevent you...?"

I finally did the dreaded feat and performed an update - had all kinds of problems afterwards (repeating Network settings message error, unknown error -3256 error, etc.) that I have (I think) successfully fixed thanks to these fabulous forums. After getting the -3256 error I updated the firmware and software for my AE and applied the Apple support fix for -3256. Then I started getting a new issue - being the following message after opening my new i-tunes version 8.0.2 "your computer's system firewall settings will prevent you from using Airtunes". After going into the firewall settings and trying to modify the port number (which I found suggested here) that i-tunes would use to stream to my airport express in the edit pane for 'i-tunes music sharing'. I ended up creating a new port specification, which I called i-tunes 1 with ports 5000 - 6000 specified. Tried opening i-tunes again - but no luck, same error. Thinking that I'd done nothing to improve the situation, I deleted my new port specification in the allow pane under firewall - I noticed that the original spec was gone (because I had edited it?). Anyway, as soon as I deleted the spec that I had edited, airtunes started working beautifully! To check things - I closed i-tunes and re-started, then, got the same message ""your computer's system firewall settings will prevent you from using Airtunes" with the option to check my firewall settings - which I did. This time, I noticed that 'i-tunes music streaming' was again listed as an option under allow in my firewall. I selected and deleted it - then again, my Airtunes works perfectly.
I really have no idea what exactly occurs 'behind the scenes' so to speak when you delete this from the list - but - it seems to have fixed my problem. I'm guessing that I'll have to do that each time I open i-tunes. At least I got my airtunes back. I guess I'm a little worried that deleting this item presents some sort of risk or could lead to another problem and so if anyone can comment on this I would really appreciate it. Alternatively, if anyone has a solution that won't require me deleting this item each time I open i-tunes, I'd be glad to hear it.
Thanks!
Leigh-Ann

Leigh-Ann, you didn't say that Airtunes didn't work, only that you got that error. I, too, am getting the "Your computer's system firewall settings will prevent you from using Airtunes" message, but when I click "Ignore" I find that Airtunes works just fine.

Hello MacHeads: I downloaded Handbrake 0.9.1 for Tiger, so I can upload a homemade DVD for editing in imovie. Problem is I can't even access Handbrake Help book, because I think my firewall settings are preventing me. I tried turning off all my firewall

Hello MacHeads: I downloaded Handbrake 0.9.1 for Tiger, so I can upload a homemade DVD for editing in imovie. Problem is I can't even access Handbrake Help book, because I think my firewall settings are preventing me. I tried turning off all my firewall settings.? IDK if I'm even doing that right. Can anyone help out here?

You don't need Handbrake for that if it is your own DVD.
You need to convert the VOB files in the TS-Folder of the DVD back to DV which iMovie is designed to handle.
a DVD is in a compresed format called mpeg2, which is standard across all DVDs. This is what is known as a 'final delivery format' and is not suitable for editing. Because is is compressed, a 4.7GB DVD can hold a two hour movie (dual layer DVDs twice that), whereas the DV stream from a video camera, which runs at about 13GB per hour, is not compressed and IS intended for editing.
In other words you have to 'reverse engineer' the DVD back to an uncompressed format in ordfer to edit it. There is a penalty for doing this in terms of slight quality loss, but it is one you can live with.
When you have your DVD as an icon on your desktop, double-click it, and it will open to reveal a TS-Folder containing a number of various files, some called VOB. These are the constituent parts of any video DVD.
When you have downloaded and installed mpegStreamclip, and purchased and installed the Apple mpeg2 plugin, open mpegStreamclip and drag the entire TS Folder into its window. Then using the various menus available to you (just explore them and you will get the hang of it) ask it to convert to DV.
That DV file, which will be many times larger than the original TS Folder, and which can a while to create (be patient - make coffee or prune the roses!) is what you can now import into iMovie for editing etc.
When you have finished doing that, you then have to turn the project back into a DVD.
mpegStreamclip can be downloaded from here:
http://www.apple.com/downloads/macosx/video/mpegstreamclip.html
which is free, but you must also have the Apple mpeg2 plugin :
http://www.apple.com/quicktime/mpeg2/
which is a mere $20.
Another possibility is to use DVDxDV:
http://www.dvdxdv.com/NewFolderLookSite/Products/DVDxDV.overview.htm
which costs $25.
For the benefit of others who may read this thread:
Obviously the foregoing only applies to DVDs you have made yourself, or other home-made DVDs that have been given to you. It will NOT work on copy-protected commercial DVDs, which in any case would be illegal.

Best settings for Flash playback on Website

Hello,
1. Whats the Best Settings for Quality and Fast loading for Video playback of Flash Video??
Website features a :30 Second TV Commercial, takes too long for website to load. any Tips to get it to load FAST but have GREAT Looking Video
Quality.
Thanks a lot
Joe

Best thing is to use the Adobe Media Encoder bundled with Flash CS4. Play with the settings until you get the optimum settings and the import the .flv to the stage. Then publish the movie "best".
James.
http://www.toshiedo.com.au

Configuring firewall on macbook for website

I'm using OS 6.8 with a MacBook. Hostgator says my firewall needs to allow Port 2078 (SSL) and Port 2077 (Clear Text/Not Encrypted) I so the Web Disc will work. I find firewall settings at System Preferences>Security>Advanced and see that by clicking + I can to allow ports by adding them. Elsewhere I had read to go to System Preferences>Sharing and click on Advanced tab. However, on my Mac, Advanced tab only happens on SP>Security not Sharing. Do just follow Hostgator instructions and click on WebDisc icon to put it on my desktop and by default the 2078 and 2077 ports will be allowed or do I have to be pepared to configure the firewall manually and how do I do that?

http://www.cisco.com/c/en/us/td/docs/app_ntwk_services/waas/waas/v413/configuration/guide/cnfg/traffic.html

How do I set my firewall settings in Avasti to allow communications between my HP 8600 and my comput

How do I set my firewall settings in Avasti to allow communications between my HP 8600 and my computer

Something to Consider:
If you are talking about "Avast!" Security Software, either the free or the paid version, the following may apply to you:
There are three main levels of Security in the Avast! software: Home, Work, and Public
Home is the setting many people use when "at home", that is, connected to the home network. The home network is sometimes defined as the "192.168" network: these are the computers and printers that you have and use in your home environment. The network is (most usually) private and (should be) secured with with a passphrase at your router. The Avast! Software sees the "Home" network as a "safe" environment: devices connected within the "Home" network are allowed to "talk" (communicate) with one another without undue restrictions.
Work is the next setting. The software places some restrictions on this level of communication. Home users can certainly use this setting -- in many (most) cases, the "Work" setting is a solution that provides for communication and a bit more security for the home network and its devices.
Public is the strictest setting and is meant to keep your computer safe in a public place: the library, coffee shop, on a street corner. Outside "prying eyes" are prevented from peeping and outside communications are restricted.
If you have set (or left) your Avast! software set to Public, or even Work (and you do not know how to handle the restrictions), then you may have simply locked out the communication between the printer and the computer(s) on your home network.
Open your Avast! Software and set the security level to either "Home" or "Work".
You can find out more about how to use the software settings at the Avast! website.
Advanced Users Only - You will know if you changed the Rules... this is not something one does by accident.
If you have changed the rules within the settings, you may have locked yourself out. Make sure you have both "in" and "out" traffic settings adjusted correctly for each rule you change / adapt / add.
Kind Regards,
Dragon-Fur

Setting Firewall settings

This topic originally started in another thread, but I thought it would be a good idea to make it its own topic (just in case anyone else is wondering how to do this).
So I went to System Preferences> Sharing> Firewall. It says that it's currently turned off. Then below that there's a list of ports to allow access through the firewall. My question is: what the heck are all of those default ports listed there?? I don't know which one's to allow and which one's to block. Any ideas?
Also in the Advanced settings, what is UDP traffic? Should I block it? Also, when I turn on the firewall, will that block my internet access? Will I have to enter proxy settings for my internet connection?

UDP is a type of IP (Internet Protocol) port. Many Apple services use UDP. See this article for more on this subject.
Which, if any, ports you allow open depends upon how you use your Mac. You can chose to allow access to none of the ports listed, if you wish. If you hold the cursor over each port selection, a text box will open explaining the purpose of each. Enabling the Firewall does not, generally speaking, disable Internet access. It may prevent access to certain websites, and require that you confirgure your firewall to allow access to the website. In most cases, you need not enter proxy settings for your Internet connection, but this can depend upon your ISP.
Joe

Firewall settings for websites

Similar Messages

Maybe you are looking for