firewall preferences not "sticking"

Question

Level 1

55 points

firewall preferences not "sticking"

I have applications that, when run, cause a dialog to pop up asking "Do you want the application "blah blah" to accept incoming network connections?" I then select "allow" or "deny" and then the next time I run the application... I have to do it again. Is there a way for the firewall to remember these preferences?

They do appear in the system preference pane for security under "firewall" when I click advanced. So why doesn't it stick?

Macbook unibody, Pismo, Mac OS X (10.5.8)

Posted on May 16, 2011 8:02 PM

Reply

Answer 1

roam

Level 6

13,637 points

May 16, 2011 8:22 PM in response to Paul Bailey3

I think it is a bit of a bug for it to keep nagging like that. It occurs as far as I can tell, with Applications that share their content.

For example in iPhoto, if you have selected in its preferences 'Share my photos' the Firewall makes that nagging request. By deselecting that selected preference, it will stop the nag.

This is not a solution but a possible means of alleviating it to some extent, regarding applications where sharing content is not important.

Reply

Answer 2

Linc Davis

Level 10

209,547 points

May 16, 2011 8:19 PM in response to Paul Bailey3

"Some applications check their own integrity when they are run without using code signing. If the Application Firewall recognizes such an application it will not sign it, but then it will re-present the dialog every time the application is run. This may be avoided by upgrading to a version of the application which is signed by its developer."

Mac OS X v10.5, 10.6: About the Application Firewall

Reply

Answer 3

Paul Bailey3 Author

Level 1

55 points

May 20, 2011 11:09 AM in response to Linc Davis

The specific problem I'm having now is with the new Canon print drivers. Those were updated so that the ARE signed, and NOW they require me to click allow every time. This seems like the opposite of the behavior I've observed.

Reply

Answer 4

Linc Davis

Level 10

209,547 points

May 20, 2011 11:21 AM in response to Paul Bailey3

The Canon print drivers are distributed with code signatures. Maybe the signatures are invalid. You could try reinstalling them. Personally I think the application firewall is pretty much useless. I wouldn't bother with it.

Reply

Answer 5

Paul Bailey3 Author

Level 1

55 points

May 25, 2011 9:40 AM in response to Linc Davis

Okay, it is actually worse than I realize. If I print two documents back to back (so that the print driver does not quite between printing them) I must tell the firewall to allow each print job. The application has already been granted the ability to accept incoming network connections of this type! Sigh.

Is there some third party firewall you would use?

Reply

Answer 6

Linc Davis

Level 10

209,547 points

May 25, 2011 9:43 AM in response to Paul Bailey3

I would use a router.

Reply

Answer 7

Jstoll

Level 1

19 points

Jul 24, 2011 4:33 AM in response to Paul Bailey3

You can check a valid code signing with the terminal command (example shown for iTunes):

codesign -v /Applications/iTunes.app

If code signing is ok, the command will return with no output otherwise you'll see something like:

a sealed resource is missing or invalid

try: delete the app, remove entry in preferences/firewall, reinstall app as administrator of computer

When you launch app the first time, accept incoming network traffic, authenticate as administrator

after this the preference should "stick"

Reply