Sidebar Sidebar
Become a MacRumors Supporter for $50/year with no ads, ability to filter front page stories, and private forums.

OS X built in firewall

the ping was sucessfull both with and without the firewall on.

i think it may be down to my wireless router, and the nat firewall settings. could there be a conflict between ipfw in mac os x, and the nat firewall?


i might try my macbook on someone else's router, but i think i might have to open some ports in the nat for my macbook.
 
caligula357 said:
the ping was sucessfull both with and without the firewall on.

i think it may be down to my wireless router, and the nat firewall settings. could there be a conflict between ipfw in mac os x, and the nat firewall?


i might try my macbook on someone else's router, but i think i might have to open some ports in the nat for my macbook.
Click to expand...

EDIT: having a play around, and other programs (quake 3), operate fine with firewall.

it is just safari and firefox, but they still seem to load apple websites.i removed firefox and tried safari on it's own, but to no avail.

very strange.:confused:
 
It seems like your port 80 could be blocked, either on your router or somewhere on your mac.

The fact that it works when the firewall is off must mean, as you said yourself, that it is related to it somehow.

Did you have a chance to activate the firewall log ? It would be very usefull to see why the firewall wants to block your surfing via browsers.

One more thing to try is to do is to simulate the connection via telnet (if you have that on your machine) :
Code: 
telnet [url]www.google.be[/url] 80
GET /

After the first line you should get a connect to... and when you type the second line you should get the raw html page from google.

If not, even telnet is blocked and it is very likely your port 80 and not any of the browser settings.
 
doesn't software update use port 80?
and why would safari/firefox still be able to load apple's site?

very strange...
anyway, here is my firewall log:

Jan 24 13:14:11 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52682:42@1408)
Jan 24 13:14:12 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52684:42@1408)
Jan 24 13:14:12 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52684:42@1408)
Jan 24 13:14:12 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52699:42@1408)
Jan 24 13:14:12 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52699:42@1408)
Jan 24 13:14:13 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52739:42@1408)
Jan 24 13:14:13 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52739:42@1408)
Jan 24 13:14:15 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52798:42@1408)
Jan 24 13:14:15 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52798:42@1408)
Jan 24 13:14:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52831:42@1408)
Jan 24 13:14:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52831:42@1408)
Jan 24 13:14:21 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52931:42@1408)
Jan 24 13:14:21 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52931:42@1408)
Jan 24 13:14:29 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 53151:42@1408)
Jan 24 13:14:29 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 53151:42@1408)
Jan 24 13:14:46 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 53580:42@1408)
Jan 24 13:14:46 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 53580:42@1408)
Jan 24 13:14:48 Rob ipfw: 35000 Deny UDP 192.168.1.3:138 192.168.1.255:138 in via en1
Jan 24 13:14:48 Rob ipfw: 35000 Deny UDP 192.168.1.3:138 192.168.1.255:138 in via en1
Jan 24 13:15:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 8617:42@1408)
Jan 24 13:15:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 8617:42@1408)
Jan 24 13:15:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 8687:42@1408)
Jan 24 13:15:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 8687:42@1408)
Jan 24 13:15:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 8689:42@1408)
Jan 24 13:15:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 8689:42@1408)
Jan 24 13:15:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 8941:42@1408)
Jan 24 13:15:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 8941:42@1408)
Jan 24 13:15:05 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 9472:42@1408)
Jan 24 13:15:05 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 9472:42@1408)
Jan 24 13:15:07 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 10630:42@1408)
Jan 24 13:15:07 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 10630:42@1408)
Jan 24 13:15:11 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 12196:42@1408)
Jan 24 13:15:11 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 12196:42@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 54091:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 54091:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 55115:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 55115:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 56907:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 56907:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 49242:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 49242:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 49754:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 49754:64@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 50266:40@1408)
Jan 24 13:15:18 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 50266:40@1408)
Jan 24 13:15:19 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 19633:64@1408)
Jan 24 13:15:19 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 19633:64@1408)
Jan 24 13:15:20 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 13496:42@1408)
Jan 24 13:15:20 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 13496:42@1408)
Jan 24 13:15:21 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 50344:64@1408)
Jan 24 13:15:21 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 50344:64@1408)
Jan 24 13:15:25 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 59261:64@1408)
Jan 24 13:15:25 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 59261:64@1408)
Jan 24 13:15:33 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 59425:64@1408)
Jan 24 13:15:33 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 59425:64@1408)
Jan 24 13:15:37 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 15007:42@1408)
Jan 24 13:15:37 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 15007:42@1408)
Jan 24 13:15:49 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 21325:64@1408)
Jan 24 13:15:49 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 21325:64@1408)
Jan 24 13:16:11 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 19683:42@1408)
Jan 24 13:16:11 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 19683:42@1408)
Jan 24 13:16:21 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 2686:64@1408)
Jan 24 13:16:21 Rob ipfw: 12190 Deny TCP 216.239.122.200 192.168.1.4 in via en1 (frag 2686:64@1408)
Jan 24 13:17:20 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 30315:42@1408)
Jan 24 13:17:20 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 30315:42@1408)
Jan 24 13:18:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 35514:42@1408)
Jan 24 13:18:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 35514:42@1408)
Jan 24 13:18:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 35516:42@1408)
Jan 24 13:18:03 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 35516:42@1408)
Jan 24 13:18:53 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16614:42@1408)
Jan 24 13:18:53 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16614:42@1408)
Jan 24 13:18:54 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16632:42@1408)
Jan 24 13:18:54 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16632:42@1408)
Jan 24 13:18:54 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16644:42@1408)
Jan 24 13:18:54 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16644:42@1408)
Jan 24 13:18:55 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16663:42@1408)
Jan 24 13:18:55 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16663:42@1408)
Jan 24 13:18:57 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16712:42@1408)
Jan 24 13:18:57 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16712:42@1408)
Jan 24 13:18:59 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16782:42@1408)
Jan 24 13:18:59 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16782:42@1408)
Jan 24 13:19:03 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16899:42@1408)
Jan 24 13:19:03 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16899:42@1408)
Jan 24 13:19:11 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 17236:42@1408)
Jan 24 13:19:11 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 17236:42@1408)
Jan 24 13:19:12 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29865:42@1408)
Jan 24 13:19:12 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29865:42@1408)
Jan 24 13:19:13 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29869:42@1408)
Jan 24 13:19:13 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29869:42@1408)
Jan 24 13:19:13 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29877:42@1408)
Jan 24 13:19:13 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29877:42@1408)
Jan 24 13:19:14 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29885:42@1408)
Jan 24 13:19:14 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29885:42@1408)
Jan 24 13:19:16 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29924:42@1408)
Jan 24 13:19:16 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29924:42@1408)
Jan 24 13:19:16 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12402:42@1408)
Jan 24 13:19:16 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12402:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12408:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12408:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12410:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12410:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12418:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12418:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12420:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12420:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12431:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12431:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12470:42@1408)
Jan 24 13:19:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12470:42@1408)
Jan 24 13:19:18 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29970:42@1408)
Jan 24 13:19:18 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 29970:42@1408)
Jan 24 13:19:18 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12480:42@1408)
Jan 24 13:19:18 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12480:42@1408)
Jan 24 13:19:20 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12613:42@1408)
Jan 24 13:19:20 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12613:42@1408)
Jan 24 13:19:23 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12828:42@1408)
Jan 24 13:19:23 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 12828:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10602:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10602:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10612:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10612:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10618:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10618:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10630:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10630:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10653:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10653:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10665:42@1408)
Jan 24 13:19:37 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10665:42@1408)
Jan 24 13:19:38 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10688:42@1408)
Jan 24 13:19:38 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10688:42@1408)
Jan 24 13:19:38 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10783:42@1408)
Jan 24 13:19:38 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10783:42@1408)
Jan 24 13:19:40 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10929:42@1408)
Jan 24 13:19:40 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 10929:42@1408)
Jan 24 13:19:43 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 11233:42@1408)
Jan 24 13:19:43 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 11233:42@1408)
Jan 24 13:19:47 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16119:42@1408)
Jan 24 13:19:47 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16119:42@1408)
Jan 24 13:19:51 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16333:42@1408)
Jan 24 13:19:51 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16333:42@1408)
Jan 24 13:19:58 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16721:42@1408)
Jan 24 13:19:58 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 16721:42@1408)
Jan 24 13:20:09 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19115:42@1408)
Jan 24 13:20:09 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19115:42@1408)
Jan 24 13:20:10 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19147:42@1408)
Jan 24 13:20:10 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19147:42@1408)
Jan 24 13:20:10 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19213:42@1408)
Jan 24 13:20:10 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19213:42@1408)
Jan 24 13:20:11 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19282:42@1408)
Jan 24 13:20:11 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19282:42@1408)
Jan 24 13:20:13 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19333:42@1408)
Jan 24 13:20:13 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19333:42@1408)
Jan 24 13:20:15 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19416:42@1408)
Jan 24 13:20:15 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19416:42@1408)
Jan 24 13:20:19 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19630:42@1408)
Jan 24 13:20:19 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 19630:42@1408)
Jan 24 13:20:20 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 59346:64@1408)
Jan 24 13:20:20 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 59346:64@1408)
Jan 24 13:20:21 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 41035:64@1408)
Jan 24 13:20:21 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 41035:64@1408)
Jan 24 13:20:23 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 55896:64@1408)
Jan 24 13:20:23 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 55896:64@1408)
Jan 24 13:20:27 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 19331:64@1408)
Jan 24 13:20:27 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 19331:64@1408)
Jan 24 13:20:32 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 62836:42@1408)
Jan 24 13:20:32 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 62836:42@1408)
Jan 24 13:20:35 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 62917:42@1408)
Jan 24 13:20:35 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 62917:42@1408)
Jan 24 13:20:35 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 54704:64@1408)
Jan 24 13:20:35 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 54704:64@1408)
Jan 24 13:20:41 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 63070:42@1408)
Jan 24 13:20:41 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 63070:42@1408)
Jan 24 13:20:51 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 56347:64@1408)
Jan 24 13:20:51 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 56347:64@1408)
Jan 24 13:21:05 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 63557:42@1408)
Jan 24 13:21:05 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 63557:42@1408)
Jan 24 13:21:23 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 46774:64@1408)
Jan 24 13:21:23 Rob ipfw: 12190 Deny TCP 205.203.131.32 192.168.1.4 in via en1 (frag 46774:64@1408)
Jan 24 13:27:08 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 24311:42@1408)
Jan 24 13:27:08 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 24311:42@1408)
Jan 24 13:27:11 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 24376:42@1408)
Jan 24 13:27:11 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 24376:42@1408)
Jan 24 13:27:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 24478:42@1408)
Jan 24 13:27:17 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 24478:42@1408)
Jan 24 13:27:41 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 24978:42@1408)
Jan 24 13:27:41 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 24978:42@1408)
Jan 24 13:27:47 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 22668:42@1408)
Jan 24 13:27:47 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 22668:42@1408)
Jan 24 13:27:53 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 22949:42@1408)
Jan 24 13:27:53 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 22949:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58096:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58096:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58106:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58106:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58116:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58116:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58126:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58126:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58142:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58142:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58163:42@1408)
Jan 24 13:27:56 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58163:42@1408)
Jan 24 13:27:57 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58221:42@1408)
Jan 24 13:27:57 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58221:42@1408)
Jan 24 13:27:58 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58303:42@1408)
Jan 24 13:27:58 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58303:42@1408)
Jan 24 13:27:59 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58411:42@1408)
Jan 24 13:27:59 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58411:42@1408)
Jan 24 13:28:03 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58595:42@1408)
Jan 24 13:28:03 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 58595:42@1408)
Jan 24 13:28:35 Rob ipfw: 35000 Deny UDP 192.168.1.2:138 192.168.1.255:138 in via en1
Jan 24 13:28:35 Rob ipfw: 35000 Deny UDP 192.168.1.2:138 192.168.1.255:138 in via en1
Jan 24 13:29:46 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 23502:42@1408)
Jan 24 13:29:46 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 23502:42@1408)
Jan 24 13:29:46 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 23504:42@1408)
Jan 24 13:29:46 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 23504:42@1408)
Jan 24 13:29:49 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 23652:42@1408)
Jan 24 13:29:49 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 23652:42@1408)
Jan 24 13:29:55 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 23992:42@1408)
Jan 24 13:29:55 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 23992:42@1408)
Jan 24 13:30:07 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 25567:42@1408)
Jan 24 13:30:07 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 25567:42@1408)
Jan 24 13:30:31 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 28593:42@1408)
Jan 24 13:30:31 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 28593:42@1408)
Jan 24 13:31:19 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 35267:42@1408)
Jan 24 13:31:19 Rob ipfw: 12190 Deny TCP 72.14.253.91 192.168.1.4 in via en1 (frag 35267:42@1408)
Jan 24 16:18:29 Rob ipfw: 35000 Deny UDP 192.168.1.2:138 192.168.1.255:138 in via en1
 
You're using AirPort then?

Anyway.. they're all denied TCP packets and they are all being denied because of this rule "12190 deny tcp from any to any", that I've mentioned a few times.

Now, since you're clearly behind a router, I must say, having a software firewall on your Mac borders on paranoia (IMO, others may disagree). I don't believe you really need to waste those resources on a second firewall. The NAT in your routers is likely doing a pretty solid job of protecting you from the outside world.

Beyond that, I cannot understand what/why/where that rule is coming from. I cannot duplicate it on any Tiger box that I've tried it on (5 so far). It's not a normal rule that should be appearing.
 
yellow, this is what I have:

Code: 
02000 allow ip from any to any via lo*
02010 deny ip from 127.0.0.0/8 to any in
02020 deny ip from any to 127.0.0.0/8 in
02030 deny ip from 224.0.0.0/3 to any in
02040 deny tcp from any to 224.0.0.0/3 in
02050 allow tcp from any to any out
02060 allow tcp from any to any established
02070 allow tcp from any to any dst-port 6891-6900 in
02080 allow tcp from any to any dst-port 548 in
02090 allow tcp from any to any dst-port 427 in
02100 allow tcp from any to any dst-port 5190 in
12190 deny tcp from any to any
65535 allow ip from any to any

Yet, I'm not having a problem.

Isn't the line 12190 just saying deny anything tcp that isn't explicitly allowed?
 
It is.. but in the OP's case, that is the rule that is causing all the problems. From the log:

Jan 24 13:14:11 Rob ipfw: 12190 Deny TCP 216.239.59.99 192.168.1.4 in via en1 (frag 52682:42@1408)
Click to expand...

The red hilite indicates the rule that is invoked. So that rule is blocking Google.com in that particular instance.

It COULD be that the router is ****ed up and is fragmenting the packets, which is casing the other rules to not be invoked. I guess the OP's BEST next step is to take the router out of the equation and hook the Mac up directly to the broadband router and see if the on/off makes a difference still.
 
yellow said:
It COULD be that the router is ****ed up and is fragmenting the packets, which is casing the other rules to not be invoked. I guess the OP's BEST next step is to take the router out of the equation and hook the Mac up directly to the broadband router and see if the on/off makes a difference still.
Click to expand...

FIXED IT!!!

it was because my wireless router was 'tweaked' to an MTU of 1430, and the default of mac os x is 1500.

so, following http://docs.info.apple.com/article.html?artnum=303192 , i adjusted the MTU first to 1430 to match the router, no luck, but then again to 1400, and now everything connects fine through the firewall :D

thanks.
 
You must log in or register to reply here.
Register on MacRumors! This sidebar will go away, and you'll see fewer ads.
Top Bottom
Back