Firewall: Default Configuration vS. Recommended

[ciZZoR_giTToR]

Ventura 13.5

“From the admin account & Block All + lower 3 options enabled”

Can someone please list the Allow/Block firewall settings:

Recommended Allow/Block settings:

“Brave Nightly.app appears -Allowed. Is there any way to tweak these settings any further?”

“What additional Network Early Intrusion Detection do you use? Network or Device??”

 

[bogdanw]

macOS firewall blocks incoming connections
Apple Support
Change Firewall settings on Mac
https://support.apple.com/en-gb/guide/mac-help/mh11783/mac
https://support.apple.com/guide/mac-help/mh11783/mac
Block connections to your Mac with a firewall
https://support.apple.com/en-gb/guide/mac-help/mh34041/mac
https://support.apple.com/guide/mac-help/mh34041/mac

If you want a firewall,
LuLu is free https://objective-see.org/products/lulu.html
Little Snitch can run in Demo mode https://www.obdev.at/products/littlesnitch/download.html
"Without a license key, Little Snitch runs in demo mode, which provides the same protection and functionality as the full version. The demo runs for three hours, and it can be restarted as often as you like."

 

[svenmany]

What additional Network Early Intrusion Detection do you use? Network or Device??

When I'm in a coffee shop, where the LAN traffic might be suspect, I turn on the native MacOS packet firewall with very restrictive rules regarding incoming traffic. I use Murus to do that. https://www.murusfirewall.com/. Murus provides a bunch of preconfigured services to allow easy setup of allowed outgoing and incoming ports.

I enjoy Murus quite a lot. It really helped me ramp up my understanding of the packet firewall. PF (the official name) is just a command line tool. Murus adds a very, very nice graphical interface to it.

 

[HDFan]

In addition to Apples' firewall I use Sophos, Little Snitch, and a Cisco firewall device.