Firewall tab greyed out in System Preferences - have I been hacked?

Hi,
I am running 10.4.11. In System Preferences, under Sharing, the Firewall tab is greyed out, suggesting my firewall is not running or has been tampered with.
So I did some poking:
brendan% sudo ipfw show
02000 844220 100107534 allow ip from any to any via lo*
02010 0 0 deny ip from 127.0.0.0/8 to any in
02020 0 0 deny ip from any to 127.0.0.0/8 in
02030 0 0 deny ip from 224.0.0.0/3 to any in
02040 0 0 deny tcp from any to 224.0.0.0/3 in
02050 388115 29754604 allow tcp from any to any out
02060 690200 900600320 allow tcp from any to any established
02065 0 0 allow tcp from any to any frag
02070 0 0 allow tcp from any to any dst-port 123 in
02080 0 0 allow tcp from any to any dst-port 135 in
02090 0 0 allow tcp from any to any dst-port 8135-8137 in
02100 0 0 allow tcp from any to any dst-port 21 in
02110 0 0 allow tcp from any to any dst-port 500 in
12190 0 0 deny log tcp from any to any
20000 0 0 deny log icmp from any to me in icmptypes 8
65535 92033 23684897 allow ip from any to any
Does this look suspicious? I also tried:
brendan% /usr/libexec/FirewallTool
Firewall Tool: Error, sysctlbyname(net.inet.tcp.blackhole): 1
Firewall Tool: Error, sysctlbyname(net.inet.tcp.loginvain): 1
Firewall Tool: Error, sysctlbyname(net.inet.udp.blackhole): 1
Firewall Tool: Error, sysctlbyname(net.inet.udp.loginvain): 1
Firewall Tool: Error, sysctlbyname returned: -1
Firewall Tool: Error opening socket
Firewall Tool: Error 1, Error setting up V4 Firewall!
Firewall Tool: Error opening socket for V6!
Firewall Tool: Error 1, Error setting up V6 Firewall!
Should I be concerned? Am I being paranoid?
If I want to reset and restart my Firewall, how do I do that, if the tab is greyed out in System Preferences?
If I want to load a backup copy of my firewall configuration, what file do I need to copy from my backup disk? There is no /etc/firewall.conf on my system.
Thanks.

As I recall, if you do any sort ipfw stuff in command line under Tiger, that that made Sharing > Firewall gray out. Try doing a sudo ipfw flush then see if that lets you reconfigure from Sys Prefs.
This article discusses Tiger's default firewall settings with web sharing turned on. That will give you a start in seeing what you should have on. This article may help a little, too, if you are running services or have certain softwares doing different things (gaming, etc.)
Hope this helps some; sorry I can't help you more.

Similar Messages

HT1507 I do not see a firewall tab when going to System Preferences Sharing?

I do not see a firewall tab when going to System Preferences>Sharing.
I am unable to make or receive iChat video calls.
Trying to figure out what is going on with my router.

Hi,
For others.
The Firewall is in System Preferences > Security > Firewall
There are then slight variances in Leopard and Snow Leopard/Lion about when you turn it ON and when you can access the Advanced Button
If it is set to ON then you need to go to the Advanced Button and Enable Allow Signed software
You may also need to add iChat (Or message beta) to the List.
NOTE
Enabling Stealth will stop iChat/Messages from working.
8:28 PM Wednesday; March 28, 2012
Please, if posting Logs, do not post any Log info after the line "Binary Images for iChat"
 iMac 2.5Ghz 5i 2011 (Lion 10.7.3)
 G4/1GhzDual MDD (Leopard 10.5.8)
 MacBookPro 2Gb (Snow Leopard 10.6.8)
 Mac OS X (10.6.8),
"Limit the Logs to the Bits above Binary Images."  No, Seriously

Have Lion, but just can't sign out in System Preferences iCloud.The application freezes

Have Lion, but just can’t sign out in System Preferences>iCloud.The application freezes

Nevermind. Reinstalled Leopard. Must have not installed Printing setup utilities properly upon first install.

Using Yosemite My incoming mail server changes by itself and means I can't access my email. When I go to preferences the new incoming mail server is greyed out. I then have to remove the accounts and get new ones.

Using Mail with Yosemite 10.10.2.The incoming mail server keeps changing by itself and means I can't access my mail. I go to preferences and find that the new incoming server is greyed out . I then have to remove the accounts and then add them again with the correct server. The incoming server which is greyed out is imap.gmail.com

Try Mail/Preferences/Accounts - select the account, then go to Advanced and deselect "Automatically detect and maintain account settings".

Deleting files out of system preferences desktop background.

Does anyone know how to delete files out of system preferences>desktop & screen saver?
Some how when adding one photo to the file for the desktop background it took the entire photo file. So that instead of one photo for the file it has over 200 now. Read everything and tried everything. Still can't figure out how to delete that file from the list.
I know how to add photos or whatever to use as desktop background just no idea how to remove them from the list.
Any ideas?

Doug,
When you go to system preferences>desktop & screen savers>desktop. On the left is a window with the names of the images listed. Apple Images, Nature file, Plants file, Picture Folder, Choose Folder and so forth. The ones that come with Apple products. Not sure what all else is native to Apple.
Iv been using my own desktop background since the day I got the iBook. Normally I just get one photo or image and more it there to use. But, last week I did something different or wrong. Maybe holding a button to long, not sure. Instead of moving the one photo it moved the entire photo file. That file had over 200 (2,500x1,800 in size & over 550KB for each) and probably closer to 250 photos in it.
Way to many to be there. And I simply can't find a way to remove that file from the desktop list. I can high light it, but it doesn't delete with the delete button. I can high light it, but it doesn't change anything in system preferences banner to edit, view, etc....to remove it either. It won't click & drag to trash.
Being very careful because I don't want to delete the file and by error delete it totally off the computer. I could creat a new file with only 1 photo in it for use as the desktop background. Then try to choose that file. However, since the last big OS-X update it's been doing this. Everytime I choose a file or photo it's adding the entire file not just the 1 photo. And Iv managed to add 3 files so far to that list.
Any ideas? Thx, Mike

ICloud and Twitter are greyed out in Systems. Can't access them.

iPod Touch Model PC544LL Version 5.1 30GB
Why are my iCloud and Twitter icons greyed out in Systems?
Found the answer.

A little more info is needed. How are you trying to access iCloud (via contacts, calendar, mail app)? Also check Settings>Restrictions. Not sure if turning it on would cause this, but check to be sure its not turned on.

Why is the mail, calendar, and contacts grayed out in system preferences

why is the mail, calendar, and contacts grayed out in system preferences?

Your card isn't a CUDA card.
Read this in detail:
http://blogs.adobe.com/aftereffects/2012/05/gpu-cuda-opengl-features-in-after-effects-cs6. html

Have I been hacked??? "Stealth Mode connection attempt to UDP"

My Mac Mini has been running very slowly lately. Sometimes it takes half a minute to switch between apps, and I mean simple apps like Mail and Safari and Appleworks, not Photoshop. Photoshop is a joke it runs so slow. So I've run Onyx SEVERAL times, restarted and cleared my PRam, and nothing is helping. I also noticed it seemed like my Mini was "running" a lot (the hard drive making a noise like it was up to something when I'm not doing anything). So I looked at the cable box and the Ethernet light was flashing softly, going along with the hard drive noise. Then I downloaded something called MenuMeters and it is showing that I'm receiving data constantly - it goes between about 300B/s to 1500B/s, and sometimes it shows I'm sending too. So I opened up the System Preferences and found out that "Network Time" was enabled in the Firewall preference pane. I unchecked that but my Mini is still receiving. (I'm not on any Ethernet network or anything either.) So I opened Advanced and found that the "Block UDP Traffic" box is not checked, though the other two "Enable Firewall Logging" and "Enable Stealth Mode" are checked. THEN I opened the log file and was shocked to see 1048 lines, mostly reading ""Stealth Mode connection attempt to UDP," although once in a while I saw a few that said "12190 Deny TCP." And that 1048 is just for yesterday and today. Is that normal??? Sometimes the "Stealth Mode connection" lines are single (I mean, not to a repeating number), but sometimes they repeat two, three, even five times to the same number.
Have I been hacked? Is someone stealing our small business data? Sounds kind of ridiculous, but can't help and worry some. Or do I have a virus? I tried to google whether or not there are any Mac viruses out there, that might pertain to this, but couldn't figure out anything. What do I do? I'm not very computer savvy, other than running my apps, and don't anything about Terminal or things like that. Even as I type this MenuMeters is showing me I'm receiving SOMETHING. Yikes!
Mini Mac OS X (10.4.8)

You mention one of the applications you have been using is Appleworks - which is not supplied with Intel systems, only PPC Macs. This would tend to suggest that your mini is a G4 model. It would be helpful to know which model the system is, what software you have on it, how much free space you have on your hard drive, and what you typically use the system for.
It's interesting that you note the system seems generally busy, which would go some way to explain why it may also seem rather slow, but you haven't mentioned whether you've run Activity Monitor to see what processes are active when the system seems to be active with some task that is not of your doing. If you haven't tried this yet, do so now - and let us know what processes the system shows as active when otherwise the system ought to be idle.
To answer a few of your broad questions: When the system is connected to the internet, it's not unusual to see a certain amount of data through-putting the network connection, but in most instances this would be in the region of 100-200B/s, with occasional, brief, spikes upwards of that. In the absence of a local router that level of data is likely to be higher, since basically your Mac is managing your internet connection and maintaining a public IP address assigned by your service provider. In a system with a router, the router handles this traffic so the resultant volume of data the Mac sees would be less.
The fact you see entries in the log of the sort you describe is not necessarily an indicator of a problem. It may suggest that the system is being probed, which as Boece has said is not at all uncommon for a system with a public IP number - and is indeed why it's most common to find systems being used 'behind' a router. The router takes the public IP number, and so systems behind it are given internal addresses by the router which are not visible to the outside world. The Router then performs something called Network Address Translation (NAT) which converts internal and public addresses as needed to ensure the computer can communicate with the internet while still staying 'invisible'.
In your position, I would look to add a basic router between your Mac and your cable/DSL modem because a hardware firewall is generally more effective than a software firewall, and NAT will keep your system clear of most potential hacking risks.
As for the potential for a virus - this is a bit of a thorny subject because most will (rightly) say that MacOS is not the target of any known virus that exists in the wild. Unfortunately, that doesn't mean that it will remain that way, or that it's impossible to create malware that can infect or impact Mac systems. A good line of defense can be obtained by downloading and installing ClamXav (http://www.clamxav.com/) and setting it to examine vulnerable spots such as the desktop where files are typically downloaded or your mail folders, and using it to scan the system. Generally speaking, unlike antivirus products for Windows, this software does not consume copious amounts of CPU time (it grabs between 1 and 5% on my 1.25 G4 mini while in the background) so it's worth having around.
You also mention running OnyX several times - this is not a good thing. OnyX, like the other utilities of this type, is a useful tool in resolving performance issues, but if you find that it doesn't work when you use it once, it indicates the problem is not something that OnyX can resolve. Running it multiple times doesn't necessarily do any harm, but it does mean that macOS is continually having to build new cache files etc, which makes the system run very badly!
So....
(1) tell us about your system, the software on it and what you use it for.
(2) how much free space is on your hard drive.
(3) run Activity Monitor and tell us what it shows when the system seems to be busy doing it's own thing.
(4) download ClamXav and run it as described.
(5) get an inexpensive router and insert that into your system as described (we can help explain how to set everything up once you've got it if you need assistance).

Unknown Pictures Add To My Media I Didn't Take Nor Receive Have I Been Hacked Or Spamed

A Week Ago Ive Recieved a BBM Msg To Add You Pin To A Broadcasted Train To Get More BBM Contact And Broadcast It, I Did So And Recieved a Vast Amount Of Requests. I Accepted Them And Around The 3rd Day When I Opened My Media Pictures Ive Seen A Few Explicit Photos I Havent Taken Nor Recieved. Males And Females Of Theres There Private Area Or In A Sexual Position. Have I Been Hacked By A BBM Memeber Or Spamed On A Social Network For Posting Your Pin ?? Help ! Its Distuburing And Getting Me In Trouble

Relax, it was nothing you did. These are music libraries that other users on your network have decided to share over the network. These libraries are not on your computer and if you decide to, you can play the music from their computer.
But if you do not want to see these shared libraries, then go to the iTunes menu, Preferences and the Sharing tab. Uncheck the box that says "Look for shared libraries."

I have something attached to firefox called vostaren search. is that you? or have i been hacked?

I downloaded firefox. Later I tried to download open office, using firefox, then found something called vostaren search when I opened the firefox icon, so I removed firefox entirely from my computer, then waited a few days then re-downloaded firefox. Still have the vostaren attached to firefox. Iis that a legitimate part of firefox. or have I been hacked? Is there now a cookie that will cause firefox to direct me immediately to vostaren when I open firefox?

hi friendmozilla, no this is no legitimate part of firefox and sound like an issue with adware that might have been bundled with a download. in order to resolve that please perform all these steps:
# [[Reset Firefox – easily fix most problems|reset firefox]] (this will keep your bookmarks and passwords)
# afterwards go to the firefox menu ≡ > addons > extensions and in case there are still extensions listed there, disable them.
# finally run a full scan of your system with different security tools like the [http://www.malwarebytes.org/products/malwarebytes_free free version of malwarebytes] and [http://www.bleepingcomputer.com/download/adwcleaner/ adwcleaner] to make sure that adware isn't present in other places of your system as well.
[[Troubleshoot Firefox issues caused by malware]]

Macbook shuts off and when I restart it the time is changed? Have I been Hacked?

macbook shuts off and when I restart it the time is changed? Have I been Hacked?
I am concerned that someone is going to steal my identiy and will in incurr 12 years of bad credit? I have just installed mountan lion and am unsure if this problem was caused by this? I suspect that if there was someone, or a program was trying to remotely access my computer then there would be traces of their actions.

How old is your macbook, and what condition is your battery in?
I doubt you're being hacked - more like your battery is dead.
Try doing both PRAM and SMC resets, setting the system time and seeing if they hold. Ensure you are connected to a power source.
For PRAM
http://support.apple.com/kb/HT1379?viewlocale=en_US&locale=en_US
For SMC
http://support.apple.com/kb/HT3964

Have I been hacked?

Ok, so I was on deviant art .com- a website which lets artists of all kinds post pictures of sculptures, paintings, drawings, photos, digital art, etc., online and lets them create a profile. I have been using it for a few months now, just looking for pictures or fan art, and today I typed in "Punk Girl" on the search engine. I found a picture, and clicked it, and the artist said that they had been inspired by another artist, and gave me a link to them. When you leave Deviant art, it warns you that you are leaving the site before you continue, unless the link is of another artist's profile. It was another artist, so it was fine with the computer. However, the problem came when I clicked "Browse" to view the artist's gallery (It display's the artist's homepage and options to go to the gallery) immediately the screen went white, as it does when a page is loading, but a small box popped up saying that my computer was exposed to threats and harm, and that I needed to scan for viriuses right now. It looked EXACTLY like a mac box that pops up when there's software to install or some sort of notification, complete with a cancel and glowing 'ok' option buttons, and even the font was right. I was alarmed, and clicked it. A page instantly loaded that did NOT look like a mac page, and instead had pink folder pictures and a dark blue side bar. The loading green lights/bars that came up looked like a Window's download or installation, and started load something. I recognized that this was not right, and quit safari ASAP as about 3 and 1/2 of the lights/bars lit up. So, now, comes the question: HAVE I been hacked? What should/can I do? Can I go back online? PLEASE HELP & Thank you for your time!

Greetings,
No, you have not been hacked. Based on your description of the incident, that artist's site obviously has some ads that like to download things automatically or try to scare users into doing something they really don't need to do. They may not even be aware of this, and their site may have been hacked to add those types of ads or automatic downloads. You should email them if you can and let them know, just in case.
Even if something is downloaded to your Mac, only you can install it, and that requires your admin password. Without that, you can have all sorts of things downloaded and they will do absolutely nothing.

Chess piece image of king showing instead of the normal picture we had chosen. Have we been hacked or does this happen for another reason?

Chess piece image of king showing instead of the normal picture we had chosen. Have we been hacked or does this happen for another reason?

While ATT was the one who made the news this time, it has been long reported that most of the major providers (google, Facebook, AOL, etc.) have been monitoring data trafic on their networks, and providing back door access to government agencies for years. (If one recalls, kinda the point Edward Snoden made with his secret government messages release.) At least, they seem to be backing off, as the public becomes more aware or their privacy invasions.

Some received an e-mail i did not send! have i been hacked? what do i do?

Someone just asked if I sent an e-mail to her...and a lot of other people that are in my address list were sent it as well. I DID NOT send it! What do I do? Have I been hacked? Help please.
Thank you!

Was it some kind of spam?
One possibility is that someone has access to your account. The best thing to do about that is immediately change your password.
Another possibility is that there is malware on your computer manipulating it. This article lists a variety of tools you can use to supplement your regular security software in checking for and removing malware: [[Troubleshoot Firefox issues caused by malware]].
Another possibility is that at some point, someone got a copy of your address book, but they are sending the messages from a different account. Unfortunately, it is easy for spammers to "forge" your name and email address as the sender of a message.
Or maybe it's a coincidence and spammers are randomly mixing and matching from and to addresses to see if they can slip past the filters?
I think without more information from the recipient(s), it is difficult to know which of these is the case. For example, the recipients could compare the message headers for a real message and a spam message and compare the servers the messages passed through. Spam sent by automated means from elsewhere on the internet usually travels through a different set of servers between the sender and recipient. That's what I would expect to find. If they are identical, then I would be more concerned about malware or an intruder on your account.

When trying to set up automatic syncing , on my iPod Nano, I get a notice that I am synced to another unknown computer. How do I get unsynced from this other computer ? Have I been hacked ?

When trying to set up automatic syncing , on my iPod Nano, I get a notice that I am synced to another unknown computer. How do I get unsynced from this other computer ? Have I been hacked ?

Well, most of what we can tell you is already stated in the message you are getting. A phone can only sync with one library at a time. You have apparently synced your phone with a different iTunes library in the past, or changes have been made to this library so the phone no longer recognizes it as the library with which it was synced. To know which you will have to provide the information.
If you bought them using the AppleID you use with this phone it may simply be easier to re-download them directly to the phone rather than sync them, though you will want to resolve that issue at some point.
Downloading (using iOS or computer) past purchases from the App Store, iBookstore, and iTunes Store - http://support.apple.com/kb/ht2519

Firewall tab greyed out in System Preferences - have I been hacked?

Similar Messages

Maybe you are looking for