Comments on: An even more secure OS X before Leopard. http://blog.cocoia.com/2007/an-even-more-secure-os-x-before-leopard/ The Cocoia Blog is the website of Sebastiaan de With, a Dutch Icon and Interface designer. Sat, 13 Mar 2010 12:35:52 -0800 http://wordpress.org/?v=2.9.1 hourly 1 By: tinzi's Blog http://blog.cocoia.com/2007/an-even-more-secure-os-x-before-leopard/comment-page-1/#comment-288 tinzi's Blog Sun, 25 Mar 2007 12:18:49 +0000 http://blog.cocoia.com/?p=15#comment-288 <strong>Es soll ja immer noch Leute geben,...</strong> die mit einem Mac unter OS Zehnpunktirgendwas mit dem Admin-Account die täglichen Dinge wie surfen, mailen und arbeiten erledigen. Das ist nicht so schlau, was man hier und hier oder auch hier nachlesen kann. Also, was tun? Ganz einfach: 1. S... Es soll ja immer noch Leute geben,…

die mit einem Mac unter OS Zehnpunktirgendwas mit dem Admin-Account die täglichen Dinge wie surfen, mailen und arbeiten erledigen. Das ist nicht so schlau, was man hier und hier oder auch hier nachlesen kann.

Also, was tun?

Ganz einfach:

1. S…

]]> By: alxtoth http://blog.cocoia.com/2007/an-even-more-secure-os-x-before-leopard/comment-page-1/#comment-98 alxtoth Sun, 18 Mar 2007 18:26:22 +0000 http://blog.cocoia.com/?p=15#comment-98 Hi, rebooting the Mac will restore the original firewall. I have a script to remove unneded lines, but how to integrate it in the OS X 10.4 boot process? /sbin/ipfw show > /tmp/origrules awk '/dst-port 137 in/ {print "/sbin/ipfw del", substr($1,0,5)}' /tmp/origrules > /tmp/newrules awk '/dst-port 427 in/ {print "/sbin/ipfw del", substr($1,0,5)}' /tmp/origrules >> /tmp/newrules awk '/dst-port 631 in/ {print "/sbin/ipfw del", substr($1,0,5)}' /tmp/origrules >> /tmp/newrules awk '/dst-port 5353 in/ {print "/sbin/ipfw del", substr($1,0,5)}' /tmp/origrules >> /tmp/newrules awk '/67 to me in/ {print "/sbin/ipfw del", substr($1,0,5)}' /tmp/origrules >> /tmp/newrules awk '/5353 to me in/ {print "/sbin/ipfw del", substr($1,0,5)}' /tmp/origrules >> /tmp/newrules chmod +x /tmp/newrules sh /tmp/newrules rm /tmp/origrules rm /tmp/newrules Hi, rebooting the Mac will restore the original firewall. I have a script to remove unneded lines, but how to integrate it in the OS X 10.4 boot process?

/sbin/ipfw show > /tmp/origrules

awk ‘/dst-port 137 in/ {print “/sbin/ipfw del”, substr($1,0,5)}’ /tmp/origrules > /tmp/newrules
awk ‘/dst-port 427 in/ {print “/sbin/ipfw del”, substr($1,0,5)}’ /tmp/origrules >> /tmp/newrules
awk ‘/dst-port 631 in/ {print “/sbin/ipfw del”, substr($1,0,5)}’ /tmp/origrules >> /tmp/newrules
awk ‘/dst-port 5353 in/ {print “/sbin/ipfw del”, substr($1,0,5)}’ /tmp/origrules >> /tmp/newrules
awk ‘/67 to me in/ {print “/sbin/ipfw del”, substr($1,0,5)}’ /tmp/origrules >> /tmp/newrules
awk ‘/5353 to me in/ {print “/sbin/ipfw del”, substr($1,0,5)}’ /tmp/origrules >> /tmp/newrules

chmod +x /tmp/newrules
sh /tmp/newrules

rm /tmp/origrules
rm /tmp/newrules

]]> By: Talesh http://blog.cocoia.com/2007/an-even-more-secure-os-x-before-leopard/comment-page-1/#comment-70 Talesh Tue, 13 Mar 2007 17:02:44 +0000 http://blog.cocoia.com/?p=15#comment-70 Great article but you dont explain how to set a open firmware password on an intel mac. My MBP keeps bypassing the Command-Option-O-F and boots like normal. Great article but you dont explain how to set a open firmware password on an intel mac. My MBP keeps bypassing the Command-Option-O-F and boots like normal.

]]> By: Curtis Jones http://blog.cocoia.com/2007/an-even-more-secure-os-x-before-leopard/comment-page-1/#comment-61 Curtis Jones Tue, 13 Mar 2007 05:36:15 +0000 http://blog.cocoia.com/?p=15#comment-61 Hey ... thanks for the link to GlowWorm FW ... got quite a few visitors because of it. Good article, too. Hey … thanks for the link to GlowWorm FW … got quite a few visitors because of it. Good article, too.

]]> By: Greg http://blog.cocoia.com/2007/an-even-more-secure-os-x-before-leopard/comment-page-1/#comment-58 Greg Mon, 12 Mar 2007 23:16:10 +0000 http://blog.cocoia.com/?p=15#comment-58 <i>You have your commands reversed in the disabling isight section. The chmod a-rwx should be the disabling command, and a+r should be the enabling command.</i> Ed. ; I screwed up. Put you in the article mate, thanks a lot. You have your commands reversed in the disabling isight section. The chmod a-rwx should be the disabling command, and a+r should be the enabling command.

Ed. ; I screwed up. Put you in the article mate, thanks a lot.

]]>