Chrome Helper whitelists itself in Firewall settings

Hello community!


Today I noticed that under Settings/ Network/ Firewall/ options, I'm unable to Block All Incoming Connections. I'm able to turn it ON, but if I close the Settings app and launch it again, I find it is automatically turned OFF.





Also, I see that com.google.chrome.helper adds itself to the Firewall Settings and also grants itself the allow incoming connections permission.


As before, I'm able to block it and even remove it from the list, yet if I close the Settings app and launch it again, I find this entry back in the list with incoming connections allowed.


Unlike before, there is no Touch ID authorization being required before making changes to the Firewall Settings.


Could this be some malware or am I missing something?


Thanks.

MacBook Pro (2017 – 2020)

Posted on Mar 28, 2023 2:21 PM

Reply
Question marked as Top-ranking reply

Posted on Mar 30, 2023 8:01 AM

I think there is a bug with macOS Ventura. Both the Settings app and the Firewall feature are not working as they should. Didn't have any such problems until Monterey.


The next day, in addition to Chrome, helper apps from other Chromium based browsers (like Brave, Edge, etc.) too showed up in the list:



No matter what changes I make, it would disappear if I close the Settings app and open it again. Everything would return to as shown above.


This is what I did:


  1. Disabled WiFi
  2. Turned OFF firewall.
  3. Deleted the /Library/ Preferences/ com.apple.alf.plist file (after taking a backup).
  4. Rebooted.


Now the Firewall entries were blank like this:




I disabled automatically allow permissions and enabled Stealth Mode. These settings are now sticking if I exit the Settings app.


I received a few prompts for incoming connections that I denied. So the setting looks like this now:




But the Block all incoming connections switch still doesn't stick. I'm able to turn it ON, but the moment I close the Settings app and open it again, I find the switch is again turned OFF.


I guess macOS BLOCKS all incoming connections by default, and only those that request to be allowed show up in the list, and the user chooses which ones to allow and which ones to deny.

2 replies
Question marked as Top-ranking reply

Mar 30, 2023 8:01 AM in response to leroydouglas

I think there is a bug with macOS Ventura. Both the Settings app and the Firewall feature are not working as they should. Didn't have any such problems until Monterey.


The next day, in addition to Chrome, helper apps from other Chromium based browsers (like Brave, Edge, etc.) too showed up in the list:



No matter what changes I make, it would disappear if I close the Settings app and open it again. Everything would return to as shown above.


This is what I did:


  1. Disabled WiFi
  2. Turned OFF firewall.
  3. Deleted the /Library/ Preferences/ com.apple.alf.plist file (after taking a backup).
  4. Rebooted.


Now the Firewall entries were blank like this:




I disabled automatically allow permissions and enabled Stealth Mode. These settings are now sticking if I exit the Settings app.


I received a few prompts for incoming connections that I denied. So the setting looks like this now:




But the Block all incoming connections switch still doesn't stick. I'm able to turn it ON, but the moment I close the Settings app and open it again, I find the switch is again turned OFF.


I guess macOS BLOCKS all incoming connections by default, and only those that request to be allowed show up in the list, and the user chooses which ones to allow and which ones to deny.

Mar 30, 2023 7:23 AM in response to Sridhar Ananthanarayanan

Sridhar Ananthanarayanan wrote:

Hello community!

Today I noticed that under Settings/ Network/ Firewall/ options, I'm unable to Block All Incoming Connections. I'm able to turn it ON, but if I close the Settings app and launch it again, I find it is automatically turned OFF.


https://discussions.apple.com/content/attachment/8b077077-5699-46be-ad26-b0d48cc2c614


https://discussions.apple.com/content/attachment/53818c73-4eed-4f25-911a-80134f91e598


Also, I see that com.google.chrome.helper adds itself to the Firewall Settings and also grants itself the allow incoming connections permission.

As before, I'm able to block it and even remove it from the list, yet if I close the Settings app and launch it again, I find this entry back in the list with incoming connections allowed.

Unlike before, there is no Touch ID authorization being required before making changes to the Firewall Settings.

Could this be some malware or am I missing something?

Thanks.


Try deleting the app and compare your results...

or

Google Chrome Help


Try a differnt browser and compare your results if you have an ongoing issue with your Chrome.



This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

Chrome Helper whitelists itself in Firewall settings

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.