MacOS X 10.5 firewall recommendations?

[riddle]

Apologies if this a common question - I searched and didn't find it.

I'm an XAMPP newbie, intending to use it for local testing and staging only. I've run "mampp security" but see that it only blocked FTP and MySQL connections. My HTTP server is still visible from the outside (although it's now behind a password).

Does anyone have any tips on how to configure the MacOS X 10.5 (Leopard) firewall to restrict XAMPP entirely to local connections? Is HTTP the only service left to lock down or are there others I still need to worry about?

A tutorial or cookbook would be ideal but I'll take vaguer suggestions if that's all I can get. :-)

Thanks.

-- Prentiss Riddle ("aprendiz de todo, maestro de nada") riddle@io.com
-- I haz a flavr. http://twitter.com/pzriddle http://flickr.com/photos/riddle

[Wiedmann]

Instead of using a firewall, you can also change the Listen directive in "httpd.conf" and "httpd-ssl.conf". (see the Apache manual)

[riddle]

Wiedmann, thanks for the quick reply and the tip.

I'm looking at the documentation for the Apache Listen directive now: http://httpd.apache.org/docs/2.0/mod/mp ... tml#listen

A couple of additional questions:

- It looks like it wants a specific IP address. I'm using a MacBook which changes IP addresses depending on location. Can I use 127.0.0.1 for localhost in the Listen directive?

- I like the idea of belt and suspenders. There's no reason not to use the Listen directive and the firewall, is there?

- Are FTP, MySQL and HTTP the only services to secure or are there others?

Thanks again.

Prentiss

[Wiedmann]

Can I use 127.0.0.1 for localhost in the Listen directive?

"127.0.0.1" is the IP for "localhost", and that's what you want.

There's no reason not to use the Listen directive and the firewall, is there?

You can do what you want. Use "Listen", use firewall or both. (shutdown XAMPP should be the safest )

- Are FTP, MySQL and HTTP the only services to secure or are there others?

That are the only services provided by XAMPP. Maybe your Mac OS X have more.

(You are directly connected to the internet with a modem? Because with a NAT-Router there is need for "Listen" or firewall at all.)

[pacella]

How can I search for a firewall on my own computer? I have a program that says I need to disable a firewall before using it, but I can't find a firewall on my computer! I already turned off Windows Firewall and AVG firewall, and now it still says that. Is there a way I could search to see if one is still on that I can't see?
_____________________
matrimonial magazine

[Wiedmann]

I already turned off Windows Firewall

How can you disable a Windows Firewall on a MacOS X?

[Hunter18]

As for me i prefer use ProteMac NetMine.It’s really good firewall.

[anindeeta]

Does Windows inbuilt firewall fail to work with the routers firewall and result in conflict? I have a Linksys router, it has a default firewall on wether or not turned on. I've tried opening ports and even using DMZ in extreme for programs but it seems the only suggestion is "your behind a firewall" now in regards to the question are my 2 firewalls conflicting and nothing is working out? Because sometimes I can lose my connection.
__________________________
yahoo keyword tool ~ overture ~ traffic estimator ~ adwords traffic estimator

[Fanofmac]

so, if its really this level annoying, change your firewall
as far as i know using NetMine would solve the problem protemac_com/netmine/

[zxzasa]

i'd recommend you to use http://www.protemac.com/netmine/ as a firewall, had never problems with it