what is emlog.pl

Went to turn on the firewall and got the message


"Do you want the application “emlog.pl” to accept incoming network connections?

Clicking Deny may limit the application’s behavior. This setting can be changed in the Firewall pane of Security & Privacy preferences."


Is emlog.pl an Apple application and if so should it be denied or allowed?

Mac mini (Late 2014), macOS Sierra (10.12.2)

Posted on Feb 3, 2017 6:22 PM

Reply
Question marked as Top-ranking reply

Posted on Oct 18, 2017 8:49 PM

lol Ok guys - NO ONE has really answered this guy's question! All the other guy did was state the following: "you don't know how hackers and networking works" - which is NOT helpful (just kinda smug and arrogant 😟)! So dude, let me actually help you:


I went into the Unix shell and typed the following:


~>man emlog.pl


And I got THIS output:


DESCRIPTION

emlog is a perl script that scans log messages either fed through stdin or via a local UDP port, looking for

authentication failures and other security notices, and feeding them as events to the Event Monitor (emond)


So! Happy trails!

5 replies
Question marked as Top-ranking reply

Oct 18, 2017 8:49 PM in response to gbo25

lol Ok guys - NO ONE has really answered this guy's question! All the other guy did was state the following: "you don't know how hackers and networking works" - which is NOT helpful (just kinda smug and arrogant 😟)! So dude, let me actually help you:


I went into the Unix shell and typed the following:


~>man emlog.pl


And I got THIS output:


DESCRIPTION

emlog is a perl script that scans log messages either fed through stdin or via a local UDP port, looking for

authentication failures and other security notices, and feeding them as events to the Event Monitor (emond)


So! Happy trails!

Oct 19, 2017 7:44 AM in response to Ruum

Hello Ruum,

Your statement is incorrect. I provided a link to a similar question. That link takes you to a clear description of what this file does and additional information about it, including that same man page. If you want to provide a better reply and save the OP a couple of clicks, you are welcome to do so. But if you really wanted to be helpful, you wouldn't wait 8 months to post it. Otherwise, that just makes the people who did provide timely assistance feel smug and arrogant. 🙂

Feb 4, 2017 9:01 AM in response to gbo25

It appears to be legitimate, which is more than I can say about the firewall. The application firewall is not a real security tool. What you see is a good example. You seem to have made customizations the firewall to make it do something. But unless you really know how networking and hackers work, then you are wasting your time. And if you did know how networking and hackers work, then you wouldn't be using the application firewall in the first place.

This thread has been closed by the system or the community team. You may vote for any posts you find helpful, or search the Community for additional answers.

what is emlog.pl

Welcome to Apple Support Community
A forum where Apple customers help each other with their products. Get started with your Apple Account.