Why do apps need *repeatedly* need permission to allow incoming connections

Even though I have added them to the list of allowed programs in the Security preference pane, many apps still ask me to “Allow” or “Block” access to incoming connections for my firewall. In the same dialog it recommends that I can avoid seeing this in the future by adding this app to my list of allowed programs—but I've already done so! And it's still asking me for permission.
Why?

Two things come to mind: (a) your ALF is borked and (b) the apps keep changing (for example, you add an app and then update it with a new version).
Try removing the file called com.apple.alf.plist in *Macintosh HD/Library/Preferences/* and rebooting. Then just add the "offending" applications as they request that they should.
<Edited by Moderator>

Similar Messages

  • What is the fix for some applications repeatedly asking permission to accept incoming connections?

    What is the fix for some applications repeatedly asking permission to accept incoming connections?
    On every restart, AutoPairs and Epson Event Manager asks me to reject or agree to allow incoming connections. It is very aggravating and time-wasting. I know other Mac users who have the identical problem with other applications on their Macs.
    Isn't there some way to make my Mac understand that "Yes" means "Yes" once and for all?
    I am presently running Yosemite, but this was a problem with prior OS X versions too.
    Respectfully,
    Nate

    This is a comment on why you might, or might not, want to use the built-in Application Firewall.
    The firewall blocks incoming network traffic, regardless of origin, on a per-application basis. By default it's off, and when turned on, it allows applications digitally signed by Apple, and only those applications, to listen on the network. It does not block outgoing traffic, nor can it distinguish between different sources of incoming traffic, nor does it filter traffic by content.
    No matter how it's configured, the firewall is not, as some imagine, a malware filter. If that's what you expect it to do, forget it. All it will do is bombard you with pointless alerts.
    Consider some scenarios in which you may expect the firewall to be useful.
    1. You enable file sharing, and you allow guest access to certain folders. That means you want people on your local network, but not outsiders, to be able to access those shared folders without having to enter a password. In the default configuration, the firewall will allow that to happen. The router prevents outsiders from accessing the shares, whether the application firewall is on or off. But if your computer is portable and you connect it to an untrusted network such as a public hotspot, the firewall will still allow access to anyone, which is not what you want. It does not protect you in this scenario.
    2. You unknowingly install a trojan that steals your data and uploads it to a remote server. The firewall, no matter how it's configured, will not block that outgoing traffic. It does nothing to protect you from that threat.
    3. A more likely scenario: The web browser or the router is compromised by an attacker. The attack redirects all web traffic to a bogus server. The firewall does not protect you from this threat.
    4. You're running a public web server. Your router forwards TCP connection requests on port 80 to your Mac, and the connections are accepted by the built-in web server, which is codesigned by Apple. The application firewall, still configured as above, allows this to happen. An attacker hacks into the system and tries to hijack port 80 and replace the built-in web server with one that he controls. The good news here is that the firewall does protect you; it blocks incoming connections to the malicious server and alerts you. But the bad news is that you've been rooted. The attacker who can do all this can just as easily turn off the firewall, in which case it doesn't protect you after all.
    5. You're running a Minecraft server on the local network. It listens on a high-numbered port. You, as administrator, have reconfigured the firewall to pass this traffic. An attacker is able to log in to a standard account on the server. He figures out how to crash Minecraft, or he just waits for you to quit it, and then he binds his own, malicious, Minecraft server to the same port. The firewall blocks his server, and because he's not an administrator, he can't do anything about it. In this scenario, the security is genuine.
    6. Here is a more realistic scenario in which you might have reason to enable the firewall. Your MacBook has sharing services enabled. You want those services to be available to others on a home or office network. When you're on those networks, the firewall should be off. When you move to an untrusted network, you can either turn off all the services, or enable the firewall with a non-default configuration to block them. Blocking is easier: one click instead of several.

  • Why do apps need access to the microphone on the iPhone?

    why do apps need access to the microphone on the iPhone?

    Kind of depends on the App.
    If its a dictation App it needs to hear your voice. If its a souind recorder it needs it to record audio.
    What App is asking for it?
    What does the App do?

  • HT4759 Suggestions on how to find lost/stolen iPad? Find my iPhone app needs the iPad to be connected to internet

    Suggestions on how to find lost/stolen iPad? Find my iPhone app needs the iPad to be connected to internet

    ZeinaSalem wrote:
    Suggestions on how to find lost/stolen iPad?
    What to do if your iOS device is lost or stolen >  http://support.apple.com/kb/HT5668

  • Repeated iTunes prompt to allow network connections

    I've recently upgraded to iTunes 10. All is fine except every time I start iTunes I get a prompt to allow iTunes to accept incoming network connections.
    iTunes is set to accept incoming connections in my System Preferences>Security>Firewall settings
    Any ideas on solutions much appreciated
    Mark

    Tried this and it doesn't work. When iTunes starts it automatically adds itself to the firewall set to allow incoming connections. The first time it starts it does this because the firewall preferences file does not have an entry for it. The second time it starts, the entry is there and iTunes then prompts and keeps prompting. Deleting the entry from the firewall will stop it, but only for the next start.
    You can see this happening y looking at the firewall preferences file in /Library/preferences. It's called com.apple.alf.plist. If you have this problem you will see an entry in it for iTunes with a block of hex data. When you remove iTunes from the firewall setting, this disappears. When you start iTune, it is re-added. The next start then checks this and prompts.
    The only solution that seems to be accepted to be working by a number of discussions on various forums (and it worked for me), is to do the following:
    1. Delete the iTunes application from your applications.
    2. Stop the iTuneHelper application in Activity Monitor.
    3. Clear iTune firewall entries.
    4. Download iTunes from apple.com and install it.
    Going back and monitoring the com.apple.alf.plist file ou will now see that when iTunes starts, it does not add any entries to this file. My understanding is that this whole issue is to do with self signing applications. It would appear that the firewall is now seeing iTunes as a self signing application and no longer needs to add an entry to it's preferences or prompt for access.

  • Firewall keeps asking for permission to allow incoming...

    Help! I have a simple Intel MacMini system running OS X 10.5.5 (Client) with a few web services running on it. It has run for years without problem (mostly Tiger, more recently Leopard). Recently have been having problems with the Leopard Firewall asking permission for 'incoming' every time I start the machine. This is a real pain - in particular because it seems if you don't get to the dialog asking permission in reasonable time, OS X Firewall assumes an answer 'No' and short of rebooting there doesn't appear to be any way of telling it you want access allowed.
    Just for clarity - all the apps in question are in the 'Allowed Apps' list already, and set to "Allow Access". Also, I recently moved the server from an old CoreDuo Mac Mini to a new Core2Duo Mac Mini - using Migration Assistant. The server is running the following useful apps:
    CommunigatePro mail server
    Parallels Desktop running Win2K server
    PureFTPd Manager
    Apart from Activity Monitor, nothing else runs on the machine.
    The problem applications are CommunigatePro, Some 'Helper' applications for CommunigatePro, and PureFTP (installed / run via PureFTPd Manager).
    I am guessing that this is either a permissions thing (perhaps OS X Firewall can't 'mark' the app as having permission - if that is what it does), or an app signing thing - the apps that are causing problems are third party sourced. But all have worked reliably under Leopard and Tiger for ages - so I don't think it is necessarily someone else's (i.e. not Firewall's) fault. Also I have run Disk Utility to check permissions - and it has found nothing to fix.
    Anyone got any ideas?

    I hit the same problem. In my case the problem was related to a downloaded JDK that included source code for Java development. This new JDK was installed at the default location /Library/Java/JavaVirtualMachines/1.6.0_26-b03-383.jdk/. Some of my scripts use this version of Java and those are the ones that were giving the warning. I was not able to add this Java to firewall settings because the stupid UI would not allow me to navigate to that directory. I am not sure what prevented it from going past /Library/Java/JavaVirtualMachines/1.6.0_26-b03-383.jdk/ directory but that was the reason why I could not add an allow rule for that java executable. Anyways, the command line solution to this was to run -
    sudo /usr/libexec/ApplicationFirewall/socketfilterfw --add /Library/Java/JavaVirtualMachines/1.6.0_26-b03-383.jdk/Contents/Home/bin/java
    This added the second java into firewall rules. In your case I would suspect there is another version of java executable that is run to the one that you have already allowed. If you right click and the java rule and do show in finder you will probably be able to figure out if you are indeed using the allowed java.

  • Why does Firefox needs permission to make changes to my computer?

    Yesterday, when I tried to start up Firefox, a window popped up and asked if I wanted to allow the program (Firefox) to make changes to my computer. It has never asked me that before and ever since yesterday, whenever I click to run it, the same window pops up. It doesn't specify what changes Firefox is making and I just keep clicking "allow." I have Windows 7 and yesterday, I also downloaded Sleep is Death by Jason Rohrer- a simple, small game, but I don't believe it asked me to change anything in Firefox. Can anyone tell me either what the changes are or how to stop Firefox from requesting to make them?
    == This happened ==
    Every time Firefox opened
    == Yesterday

    Check that you do not run Firefox as Administrator.
    Right-click the Firefox desktop shortcut and choose "Properties".
    In the Compatibility tab, make sure that Privilege Level: "Run this program as Administrator" is not selected.
    You also need to check the Properties of the firefox.exe program in the Firefox program directory.
    If you can't make the changes then you need to start Windows Explorer as Administrator.

  • I can't view this video on my IPad? Any suggestions why? App needed?

    http://www.dfaus.com/2011/03/aftershock.html
    This is th video I can't view among others? Help is much appreciated!!

    You can try one of the app/service combinations for playing Flash such as Skyfire or iSwifter. One of those might work for you.
    Regards.

  • HT1923 Why do I need permission to delete some of the Apple folders from my own computer?  I can't delete them to reinstall them.

    I'm having problems installing the new iTunes 11.  I kept receiving a "component missing" message with the code 45019.  When I tried uninstalling everything the support site told me to.  When I double checked my cpu drive like it said it showed that It didn't completely remove all the apple files.  I tried manually uninstalling and I keep getting an error now saying that I don't have permission to remove these files..... If I don't.... Then who does?? And how do I remove them so I can properly get my iTunes up and running again? 

    Hello My P.C.,
    Welcome to the Apple Support Communities. Sorry to hear you are having issues with your P.C., the following article will walk you through uninstalling all related components with iTunes.
    Removing and Reinstalling iTunes, QuickTime, and other software components for Windows XP
    http://support.apple.com/kb/HT1925
    There is a step at the end that walk you through reinstallation, that is an optional step for you of course.
    Regards,
    -Norm G.

  • HT201328 I have paid for my iphone 4 in full, and it is NOT under contract. Why do I need permission from my carrier? Why this anti-consumer ripoff

    how do I unlock my iphone for which is NOT under contract

    Just because you paid full retail does not mean you bought an unlocked phone. Where, EXACTLY, did you buy it?

  • Why does Apple need to keep me from connecting my Iphone on my home computer and my work computer?

    I travel alot for work and the fact that I can't dock my Iphone until I get home or that I have to email work pictures to my self from home to work because Apple can't trust people with their own content is really, really annoying.
    What are you doing Apple? Are you trying to upset your clientel? Is it too hard for you to believe that I have a home computer and a laptop? Of which, you sell all of the the above, but if they were to be able to interact with each........no, no, that would just make too much sense.

    iCloud stufff...
    http://www.apple.com/icloud/
    http://support.apple.com/kb/index?page=search&src=support_site.kbase.search&loca le=en_US&q=icloud
    http://support.apple.com/kb/HT4436
    http://support.apple.com/kb/VI292

  • Use Mobile Data For: Settings - Why does Settings need a cellular data connection?

    iPhone 5 iOS 8.1
    Settings > Mobile > Use Mobile Data For: Settings
    Just curious, why does the iPhone need this turned on? Why does the settings app need a cellular mobile data connection?
    If you turn it off, you're pestered to turn it on every time you go into settings?

    Because, that's the way Siri works...it needs an Internet connection...requests are sent to Apple's servers. No Internet, no Siri.

  • Do I need incoming connections?

    I have my firewall (Leopard) set to ask about incoming connections for each application. I always say no, and my apps all work fine. These are apps like MS Office, etc. Is there any reason I should allow incoming connections, and how do I know when to answer yes? Generally, I like to restrict all network communications unless there is a good reason to allow it, even for known applications. What do these apps use incoming connections for?

    +"What do these apps use incoming connections for? "+
    Mostly they are looking for "update" information. If you disable the application's update feature this should stop. I agree with your concept of restricting any communication I don't feel is necessary. I like to check for updates at my convenience. The Adobe "updater" is the worst...it's always jumping up in your face, trying to "phone home" and most of the time it's just irritating.

  • System asking for permission for incoming connections

    When I restart my computer I get messages that ask if I want to allow incoming connections to programs such as qmaster and realplayer. I allow this. The message also says that I can change this in the firewall pane in system preferences. When I go there I see that both already allow incoming connections.
    Why is the system asking me each time when I've already said that it is allowed?

    I had the same problem for iTunes, Connect360 and Transmission. After reading many forum post and trying many things to no end this is what worked for me.
    NOTE THIS WORKED FOR ME, IT MAY NOT WORK FOR YOU, DON'T BLAME ME.
    1. Log into an Admin account
    2. Go to the Firewall under the Security Pane in System Preferences and remove ALL programs listed under "Set access for specific services and applications." (you can try removing just the troublesome apps)
    3. Still in the Firewall tab, change setting to "Allow all incoming connections."
    4. In the Finder go to your Applications Folder and drag iTunes (or any other offending apps) to the trash and delete from the dock. *This SHOULD NOT delete your music, playlists, ratings or anything else, it did not on mine. But BACKUP if you want to be 100% sure*
    5. In the System Preferences, go to Accounts > Login Items and remove ItunesHelper.
    6. Restart your mac and log in as the Admin again.
    7. Download any apps you deleted, i.e. iTunes. Link: http://www.apple.com/itunes/download/
    8. Install the apps (don't open them after install)
    9. Go back into the firewall settings and change it back to "Set access for specific services and applications."
    10. Open iTunes and any other apps you reinstalled.
    11. Add iTunes back to the Dock.
    This should have fixed the problem, and iTunes should act like nothing ever happened...
    We still need to add iTunesHelper back to the Login Items.
    12. In the finder go to Applications, and right-click on iTunes, select "Show Package Contents.
    13.Open the System Preferences and go to Login Items under Accounts.
    14. Back in the finder (the iTunes Package Contents) go to Contents>Resources>iTunesHelper
    15. Drag iTunesHelper into the Login Items list.
    This worked for me. I don't think it ever asked for permission for iTunes. And I have only been asked once for the other programs that used to ask me everytime.
    Hope this helps you and everyone else with this problem.

  • I want to know that if i want to download facebook on my iphone 4 or any other apps then it ask me put my card details for payment. why is that. if they are free then why do i need to give my card details?please help me anyone.

    I want to know that if i want to download facebook on my iphone 4 or any other apps then it ask me put my card details for payment. why is that. if they are free then why do i need to give my card details?please help me anyone.

    Just select no credit card as outlined here:
    http://support.apple.com/kb/ht2534

Maybe you are looking for

  • SDB - how to release Solutions ( IS01 ) in background

    I would like to release existing Solutions via job: -both Bapi and function CRMXIF_SOLUTION_SAVE work only in creation time and not in changing exixting solutions; -the batch input via IS01 doesn't work because in background mode the IS01 is a read o

  • Change on FSG didn't show up

    Hi, I changed Field Status Group for personal number from supressed to optional. Now when I try to post a test document using F-02, Personal number doesn't show up. I checked the Field Status Variant for CoCd and Field Status Group for A/c. They are

  • Other features for the iPod

    Hello. I'm a newbie in this forum, and I could'nt find a proper forum to post any requests for additional features that could be implemented to the iPod. After giving some thoughts about it: How about the iCam? A 160GB iPod with 2MP video cam with fl

  • Recurring Todo Problem Using WCAP

    Hello all! I have no problem using WCAP to complete a regular todo. When I try to complete a recurring todo using the same method, I cannot. I am currently setting the url.completed variable equal to the current date and time. Ex. ...?completed=04142

  • IMac (Mid 2007) - Black / Purple dots on display

    Hello, I am having a problem with my Intel iMac display. I don't want to write a long story, so I'll try to keep it short: 1) October 2008 - My iMac Super Drive started making a funny noise when playing DVD movies (It was a Pioneer one), I took it in