Web Sharing, Firewall, & Security Issue

I recently turned on/activated Web Sharing, but I forgot to turn on the Firewall. Now I think I may have gotten malware, or some other sort of bad stuff on my machine.
Am I right in this thinking? If so, what steps might I take to offset the damage? Thanks.
Quick background note: I was experimenting with the using the Apache server that comes built in with Mac (because I'm learning mysql, php, etc.) And this tutorial mentions the importance of activating the Firewall if the user turns on Web Sharing http://www.macinstruct.com/node/112
Specs:

I didn't know about Quarantine being included in the Leopard OS ("Quarantine is a feature of Mac OS X introduced in version 10.5 (aka Leopard)) Thanks for pointing that out.
More generally, I've been using Macs for several years and really like them, but this was the first time I activated/enabled Web Sharing for using the Apache server software and so I was just a little worried about that. And also, it seems as though my system has been working more slowly than it usually does.
BTW: I did some of the most commonly suggested steps for improving performance.
1. Check to see I have latest OS updates. [Done]
2. Run/verify/repair disk permissions via Disk Utility [Done]
3. Clear browser caches [Done]
Thanks again.

Similar Messages

  • Other web browsers and security issues?

    Since even an Apple KB article recognizes the need for an additional browser and because of Safari's limitations and problems, I'm going to try switching to another browser (most likely OmniWeb and am looking at Firefox, Shira and Opera also though perhaps not as a primary browser) but I'm wondering about their ability to keep on top of any security issues for Mac? (and how do you keep up with security updates?)
    Though perhaps unfounded, at least with Safari, I feel that Apple has a vested interest in keeping on top of security issues (for Safari and Java) and I can readily find out about security updates via software updater.

    Most of the other Mac browsers have their adherents. They are all good browsers (I have 7 browsers installed to test various web sites and for change-of-pace usage). They all have their strengths and they all have their weaknesses. Only iCab and OmniWeb are still shareware, the rest are now or always have been free (Opera just recently stopped charging for its browser).
    I have settled on Firefox as my alternate browser and I use it maybe just a tad more than Safari, but I do switch back and forth between them. The Mozilla foundation is good at getting security updates out when needed. Firefox has a button on the toolbar to check for updates. One nice thing about Firefox is that you can install free extensions which enhance the features available. I have one to supplement tab features, one to control iTunes from Firefox's status bar, one to help me format messages in discussion forums, and one to block ads.
    I prefer OmniWeb for doing intensive research because of the way it handles tabs in its sidebar, showing me which ones I've looked at and which ones I haven't, and giving me great flexibility in rearranging tabs, which are viewable as thumbnails or text names (I have had up to a hundred or so tabs open in OmniWeb.
    Shiira is good and its fast. I have not checked for updates for a while, but the last time I updated there was still a problem with Shiira kicking you out of logged-in sites when you moved from page to page with in web site. This may have been fixed by now - they were aware of the problem back then.
    Camino is a native OS X cousin of Firefox and is also fast, but is not updated as often.
    I would stay away from Mozilla or Netscape unless you need all the additional modules they have and which take up hard disk space. Firefox and Camino represent the browser module of Mozilla/Netscape. Mozilla and Netscape have modules for email, irc chat, newsgroups, and for creating and editing web pages. Netscape is a branded and slightly customized version of Mozilla and is not updated as often.
    Opera is a nice browser and some use it as their main browser, but I have not seen anything that really stands out for me, but that does not mean it is not worth a look.
    I would stay away from abandonware Internet Explorer.
    As for checking for updates, several of them, as with many Mac programs, now have a menu item that allows you to check for updates. Most of them also announce their updates on both VersionTracker and MacUpdate.
    Happy Exploring.

  • Shared Services Security Issue with Financial Reporting - 11.1.1.3

    Hi,
    So we have some users that are provisioned in some groups. Those groups have Essbase Server Access and Planner access to an application. That access is working great. They have access to the app and they have access via Smartview to the cube.
    Now we need them to be able to see all the Financial Reports (FR) created for that application. There are so many provisioning choices under 'Reporting and Analysis', that I'm not sure how to get this done correctly. Right now we have to assign 'Viewer' access and 'Explorer' access under 'Content Manager' tree in order for this to happen. I just think this seems wrong. We just need the user to be able to run and view a report from Workspace.
    Any help is appreciated as this is a very green area for me.

    Hi,
    You will need both Viewer and Explorer access for users to run reports.
    the reason is that without the Explorer, users will not be able to see any reports or the explorer in Workspace.
    Without Viewer, users will not be able to view/open any of the reports. You also have to give report access to users anyway related to the groups.
    You can see anll information about different security roles for Reporting and Analysis in the shared Services admin guide.
    The documentation is the best place to start for any information needed and confirming what fulfills your needs.
    Cheers
    RS

  • Having security issue with SL Screen Sharing

    Hello,
    Maybe I am missing some new setting in Snow Leopard that increases screen sharing security, but as it is, screen sharing is now insecure on my network.
    Prior to Snow Leopard I would log into my Mac from another without selecting the "remember this password in my keychain"... after finishing the session, I would again be asked for my password before ropening a new screen sharing session. All machines on the network were Leopard.
    Now, with all macs on the network Snow leopard, on one of the machines I can log on in the morning, work for a while, quit screen sharing, and go back in an hour and start sharing that mac's screen with no password required. Anoyone else can can do this also! I have checked the keychain on the Mac I am viewing from and there does not seem to be an entry there for screen sharing.
    On another of the Snow machines it always asks for the password, but on 2 of them, once I have started viewing another Mac's screen a password is no longer required regardless of the fact that I haven't checked that "remember password" .
    This means that after I leave a Mac from screen sharing it, someone else has full access to that machine just by clicking on the Share Screen button... unless I can close the hole somehow.
    Any ideas or a way to fix this would be appreciated.
    Thanks
    Jamy

    Hi all,
    I just upgraded to Snow 10.6.2 so through 2 separate updates, this security hole on all 3 Macs on my network exists.
    To test it I went to an office and opened a screen on another (Snow Leopard) Mac that was set up to allow users only to connect. I then quit Screen sharing, and returned 3 hours later, only to be able to open the Hard Disk window and return to that Mac's screen without any passwords required. I was very careful not to allow the Keychain to remember me.
    Since I originally posted I see another thread has begun up expressing essentially the same issue.
    I would strongly advise anyone who uses Snow Leopard in a secure environment , at least through 10.6.2, to disable screen sharing or risk unauthorized access, or monitoring, of their Macs from within their networks. Screen Sharing's security settings (if they work at all) do not work on Snow Leopard the same as they worked on Leopard.
    I have not found a fix for this in the 3 weeks since I first noticed it other than to disable it, or restart the Mac I started the session from, then it will ask for a password, but that is hardly an acceptable fix in some secure or corporate environments (akin to having to restart in order to empty the browser cache when accessing webMail lol)
    Regards,
    Jamy

  • Web Sharing not working after installing security update

    I have been using Web Sharing without problems for several months, but now, after installing the latest security update, my browser cannot find my server at macbook.local.
    The console error messages read:
    10/15/08 11:35:17
    AM org.apache.httpd644
    httpd: Syntax error on line 455 of /private/etc/apache2/httpd.conf: Syntax error on line 15 of /private/etc/apache2/extra/httpd-userdir.conf: Syntax error on line 8 of /private/etc/apache2/users/+entropy-php.conf: Cannot load /usr/local/php5/libphp5.so into server: dlopen(/usr/local/php5/libphp5.so, 10): no suitable image found. Did find:\n\t/usr/local/php5/libphp5.so: no matching architecture in universal wrapper
    10/15/08 11:35:17 AM
    com.apple.launchd[1]
    (org.apache.httpd644) Exited with exit code: 1
    I have read a number of other posts (and searched a bit on Google), but nothing I found seems to address this particular console error message.
    What should I do?

    This page fixed the problem. For me this is the part that I had to run:
    Problem 2: Apache is 64 bit, entropy is 32 bit.
    The only solution to this that I've seen is to force Apache to be 32 bit. For intel based machines:
    Code:
    sudo cp /usr/sbin/httpd /usr/sbin/httpd-fat
    sudo lipo /usr/sbin/httpd -thin i386 -output /usr/sbin/httpd
    that will strip everything except the 32 bit intel code from httpd (after making a backup), forcing it to be 32 bit. For PPC, the command will be similar.
    This fix is a bit tacky, but shouldn't cause any problems.
    After running this everything worked as normal. Thanks to everyone that helped.

  • Issue on Web sharing and XSL files

    Hi all,
    What are the things to be taken care while we are doing websharing. I have an issue with one of my xMII projects. Everything is working fine on that server except xsl files. It is not getting transformed into HTML at run time. It is showing in XML format instead. I really doubt the problem is with my web sharing, because the same set of files(<b>including XSL file</b>) are working on a different server without any issue.
    I have done websharing by right clicking on the folder name, selecting the websharing tab and giving Alias name. Is that ok or anything more as to be done?
    Can anyone please trace out the issue.
    Thanks in advance
    Muzammil P.T

    Hi,
    Webroot is still in c:\inetpub\wwwroot, but i set up a new virtual directory to <b>c:\Lighthammer</b> and accessing xMII using the URL http://*...*/Lighthammer
    and my project contects using http://*...*/Lh/CompApps/MyProj/HomePage.html
    (I have given Lh as the Alias name).
    Here, My xMII homepage is working and myProj Homepage is also working fine. Once i calls the HTML pages which contains XSL files, the problem is coming.
    Please Note: The same contents is working on our different server without any change.
    Regards
    Muzammil

  • Web Sharing Issues... No PHP support

    Good morning all, I guess it's fair to say that we are having problems with PHP, but I'm curious to see if anyone is having the same issues that I am... here is the story:
    I have two Mac's, a powerbook G4, and a powermac G5. I decide to wipe the hard-drive and start fresh with my G4 so when I got leopard I got my chance.
    The install went pretty smoothy, and I'm enjoying the OS quite a lot and look forward to when I have a better Idea as to what I'm doing. On this device I was able to get MySQL server running (after I installed the wrong bit - G4 is not 64bit... do'h) but I got it up and running and can connect to my web server's database.
    With my G5 I did the standard upgrade, but here is where I wish I would have held off on that upgrade for a few weeks. When I turn on Web Sharing, and try to navigate out to http://computername.home/~Brian/ I get the message that says that I do not have permissions to access this Server...
    I do the same thing on the G4 and it works just fine, as I can't install PHP on it yet... Anyway, I've called Apple and made them aware of the issue, and I think I'm going to try some things in the terminal to perhaps turn off PHP or turn it on (apple's version of it) to see if that will let me access my web-server as now when I'm working on my website it won't let me access my MySQL etc...
    Anyway, did anyone else run into this same issue?
    Thank you,
    Brian
    http://www.comicearth.com

    I had the same/similar problems to start with.
    If your issues are the same as mine it is because Apache has been upgraded from 1.3 to 2.2.
    The thread with the details (and solution) is:-
    http://discussions.apple.com/message.jspa?messageID=5649480#5649480

  • Use Lion Server to set up security in Web Sharing

    Can I use Lion Server to set up security in Web Sharing?
    I want a password prompt to appear when someone comes to look at my Web Sharing files.
    I have tried to do this manually in Snow Leopard and Lion, and am considering buying Lion Server just for this one purpose.
    Does the admin GUI in Lion Server have an option that allows you to set up a password prompt for folks that look at my Web Sharing files?
    THanks.
    mac

    Miracles do happen.
    Because I just bought Lion Server, I was able to get a guy from the Apple Server support group on the phone, for a long time, and he helped me set this up using the Server app and the Server Admin app.
    Now I have a password prompt on my Web Sharing files.
    It's an incredible relief to have this working.
    Thanks for the responses.

  • Severe Security Issue with Sharing Permissions and Windows

    I recently discovered a severe Security issue with the windows sharing an permission settings:
    I have two users, an admin user and a parental controlled user. On my mac mini, i have a external harddrive connected. On the harddrive, i have three folders, Itunes, Iphoto (Package) and a Temp Folder. I want to share the Harddrive RW for the admin, but only R for the parental user. But the Temp folder should be accessible for RW for the parental as well.
    1. I set the Drive checkbox "ignore ownership" off.
    2. I set the permissions of the drive to admin RW, parental R and Everyone to "no access"
    3. I apply to enclosed Items
    4. I set the permission of the Temp folder to admin RW, parental RW and Everyone to "no access"
    5. I apply to enclosed Items
    6. I go to "File Sharing" in the Preferences and activate SMB sharing for both users
    7. I delete all previous shares
    8. I add the Disk and use the proposed permissions which are admin RW, parental R, Everyone "no access"
    9. I add the Temp folder and use the proposed permissions which are admin RW, parental RW, Everyone "no access" - Funny, there is a new Group called "Temp" created which has custom access on both sharepoints
    10. I connect to the mac over a Windows machine (NTLM auth set appropriatly). Now I try to create a folder on the root of the Disk share, I get a denied message.
    BUT WHEN I GO INTO A SUBFOLDER (eg. ITUNES or IPHOTO), WHICH HAS ALSO JUST "R" PERMISSION FOR THE PARENTAL USER, I AM ABLE TO RW, DELETE AND DO EVERYTHING!!!
    TO RECAPITULATE: THE SHARING PERMISSIONS ARE "R", AND THE FILE PERMISSIONS IN THE RESPECTIVE FOLDERS FOR THE RESPECTIVE USER ARE ALSO JUST "R". BUT THE USER CAN DO EVERYTHING IN THE SUBFOLDERS!!!

    I recently discovered a severe Security issue with the windows sharing an permission settings:
    I have two users, an admin user and a parental controlled user. On my mac mini, i have a external harddrive connected. On the harddrive, i have three folders, Itunes, Iphoto (Package) and a Temp Folder. I want to share the Harddrive RW for the admin, but only R for the parental user. But the Temp folder should be accessible for RW for the parental as well.
    1. I set the Drive checkbox "ignore ownership" off.
    2. I set the permissions of the drive to admin RW, parental R and Everyone to "no access"
    3. I apply to enclosed Items
    4. I set the permission of the Temp folder to admin RW, parental RW and Everyone to "no access"
    5. I apply to enclosed Items
    6. I go to "File Sharing" in the Preferences and activate SMB sharing for both users
    7. I delete all previous shares
    8. I add the Disk and use the proposed permissions which are admin RW, parental R, Everyone "no access"
    9. I add the Temp folder and use the proposed permissions which are admin RW, parental RW, Everyone "no access" - Funny, there is a new Group called "Temp" created which has custom access on both sharepoints
    10. I connect to the mac over a Windows machine (NTLM auth set appropriatly). Now I try to create a folder on the root of the Disk share, I get a denied message.
    BUT WHEN I GO INTO A SUBFOLDER (eg. ITUNES or IPHOTO), WHICH HAS ALSO JUST "R" PERMISSION FOR THE PARENTAL USER, I AM ABLE TO RW, DELETE AND DO EVERYTHING!!!
    TO RECAPITULATE: THE SHARING PERMISSIONS ARE "R", AND THE FILE PERMISSIONS IN THE RESPECTIVE FOLDERS FOR THE RESPECTIVE USER ARE ALSO JUST "R". BUT THE USER CAN DO EVERYTHING IN THE SUBFOLDERS!!!

  • Firewall blocks web sharing

    2 computers, laptop with Snow Leopard, large web site in ~/Sites/htdocs, with .shtml files and an SSI file to add text common to all .shtml files. I'd like to see this on the desktop computer as it appears to others , but Firewall blocks web sharing on laptop. How do I  fix Firewall?

    System Preferences>Sharing.  Is File Sharing selected? 

  • Is anyone having Web Sharing issues after switching from 10.6 to Mountain Lion?

    I want to upgrade to Mountain Lion from Snow Leopard (10.6.8) but I wanted to see if anyone is experiencing any issues with their Web Sharing after making the switch. I use Web Sharing daily to build and test  web sites for my clients and when I made the switch to 10.6 none of my database driven sites worked. Ultimately I had to install a new version of PHP 5 because 10.6 came with and older version.  And I had to reinstall SQL for my databases along with some other related items.  It wasn't a major problem but it took a couple of days to track down the issue.  Anyone seen any weirdness like that with Mountain Lion?

    Web sharing is absent in Mountain Lion. Apple removed the feature. There're some unofficial hacks to bring it back, search the forums.

  • Web Sharing issue after restore

    After restoring my imac from a time machine backup recently, everything is working great apart from my Web Sharing.
    I used to go to http://localhost/~username, that just gives localhost, server not found.
    I can still connect to the mysql server at localhost, but any attempt to browse any of my created sites comes up blank and looks to be a possible apache problem as http://localhost is also blank.
    In sharing prefs, web sharing is on, I've turned it off and on again. The weird thing is that where it previously would say http://localhost/~username it not says http://codename.lan.
    Connecting to this doesn't work surprisingly so I don't know what to say!
    Any starting places would be most welcome!

    at http://discussions.apple.com/thread.jspa?messageID=8768900&#8768900
    Thomas Flaherty wrote:
    Seems that a directory /var/log/apache2 was not there after the restore
    sudo mkdir apache2
    chmod 755 apache2"
    the owner/group should be root/wheel
    This solution worked for me, try it.

  • Security issues for Flash cookies, Local Shared Objects, .sol files

    Good day, all
    I just found out a bit about flash cookies from Wikipedia and http://epic.org/privacy/cookies/flash.html
    I was wondering if there was a security issue with these (as opposed to privacy issues)?
    It seems easy enough to prevent them being stored or delete them after they are set.
    Thanks,
    Hugh

    Hello Patricia,
    You wrote,
    I came to this forum to see if I could find out how to delete adobe's flash cookies
    You have to do it online via this website.
    Macromedia's Website Storage Settings panel
    Note: As the site says, the dialogue box is not an image, "it is the actual settings manager"
    I just tried it out and deleted the flash content from How Stuff Works, then revisited the site (How Stuff Works) and it didn't add it back, so it seems to work as stated.
    regards roam

  • Can't get Web Sharing to Work

    I can't seem to get Web Sharing to work internally or externally with the AE. ON the G5 with MacOS 10.5.6, I have Web Sharing turned on under Sharing, Security > Firewall allows all incoming, Network configured as DHCP with IP 10.1.4.
    On the AE, under Internet > Internet Connection I have Using DHCP, Connection Sharing = Share a public IP address. Under DHCP I have a DHCP reservation for my G5 10 10.1.4. Under NAT, I have enable default host at 10.1.4. I currently have NAT Port Mapping Protocol on and have Web Sharing configured (though I have tried with it off).
    Under System Preferences > Sharing and Web Sharing selected, when I select my computer's website I get Safari can't connect to server. Same when I try to access a web page hosted here via dyndns.
    So, there must be something I'm doing to cause this but I sure can't figure it out.
    Any ideas?
    Ed

    Solved. Just did created /var/log/apache2 directory and a chmod 755 on the directory.
    Had to keep digging through discussions to find it.

  • MacoBook Pro connecting wirelessly via Personal Web Sharing from iMac G5

    Subject line says it all... more specifically my problem is that some things seem "blocked" on the MBP when i'm connecting wirelessly via my iMac network, but then are 100% functional when I use other wireless networks.
    examples:
    • gmail via Mail.app [mailbox always has the ! symbol and says it's timed out]
    • playing app-based online games, certian functions will not work
    • using FTP software, it won't connect
    Maybe this an issue I can fix with port forwarding, if so how do I go about doing this? I was told my iMac is technically acting as a router, but I don't have a lot of experience with this type of networking. Thanks!
    iMac G5 2GHz • 15" MacBook Pro 2GHz   Mac OS X (10.4.9)  

    Personal Web Sharing can be a bit tricky and yes, it's because of the firewall on the Mac that's sharing its connection.
    The actual firewall software in the Mac is completely configurable, but the friendly user interface doesn't support the more sophisticated configurations. Fancier setups would require the use of commandline scripts run from Terminal.
    You'll save yourself a lot of headaches if you buy a wireless base station, and forget about using Personal Web Sharing. A $60 Linksys will do the job nicely.

Maybe you are looking for