Hi Neil,

To Add to Bob's reply.

Allow All Incoming Connections: This default option blocks no traffic. The firewall is off.

Block All Incoming Connections: An extreme option, this prevents any traffic from the outside world from initiating an Unsolicited connection to any service on your computer, but allows you to connect out as much as you want.

Limit Incoming Connections to Specific Services and Applications: This option lets you pick and choose what gets in to which programs. If you have any Sharing services enabled, they appear at the top of the list below Limit Incoming Connections. If you have chosen to control incoming access for specific applications —including Apple programs like iPhoto or iTunes that add themselves to the list with your permission when you enable sharing within those programs—they appear in this list, too. When both services and applications are shown in the list, they’re separated by a line with services on top and applications on the bottom.

Whenever you turn on or off any service, it is added or removed from this list to create or remove an exception to the firewall. If you launch a program that needs access from the outside world, Mac OS X prompts you for permission to allow such access; if you agree, the
application is automatically added.

<http://www.macworld.com/article/131116/2007/12/firewall.html?lsrc=mwweek >

<http://support.apple.com/kb/HT1810>

Cheers,
Ronni

On 31/10/2008, at 8:30 PM, Robert Howells wrote:

Does this help :-

<http://images.apple.com/server/macosx/docs/Leopard_Security_Config_20080530.pdf >


Bob


On 31/10/2008, at 8:01 PM, Neil Houghton wrote:

Hi Steven,

Glad to hear you found a solution.

I must admit, I find the Mac OSX firewall set-up much harder to understand
now.

It used to be that the firewall was on by default (but you could turn it off if you so desired) and then you just turned on the features that you wanted - eg file sharing, internet sharing etc. This all seemed self explanatory
(ie easy).

Now we have the choice to:

"Allow all incoming connections" or
"Allow only essential services" or
"Set access for specific services and applications"

Having checked my set-up (which I'm sure was the default) it seems to be the
first option - which sounds like it means firewall "off"

Didn't we used to deride Windows for having the firewall "off" by default?

The trouble is, now I'm not sure how the other two options work - and the
help manual didn't enlighten me!

For example, what does OSX regard as "Essential Services" ?

I note that if you tick one of the boxes in the Sharing panel and then check
back at the Firewall panel, then that "service" has been listed, eg:
File Sharing (AFP)
Printer Sharing

I would have thought that if you had ticked the box and the service was
listed then it would now be considered "essential" However, Steven's
experience seems to suggest that this is not the case (so what ARE
"essential services")

Or are the services listed only enabled if you tick the third option and, if so, how do you know what you need to enable to do various things - in fact what sort of things/programs require "incoming connections" and how do you know? (or to put it another way, what sort of things are likely to stop
working if I tick it!!)

Anybody seen any GOOD articles that cover the new OSX firewall system & how
to set-it up (as I say, I found the onboard help pretty useless!)


Cheers


Neil
--
Neil R. Houghton
Albany, Western Australia
Tel: +61 8 9841 6063
Email: [EMAIL PROTECTED]

on 31/10/08 7:14 PM, Steven Knowles at [EMAIL PROTECTED] wrote:

James, I think that's it!

I was in process of following Daniel's suggestions - Repair
Permissions on both machines made no difference. Seeing your message,
I checked System Preferences > Security > Firewall. On the MBP I had
this set to "Allow only essential services". Changed it to "Allow all
incoming connections". Problem solved.

Thanks fellas.

Cheers, Steven

On 31/10/2008, at 2:09 PM, James Devenish wrote:

Hi Steven,

Make sure there isn't a firewall on the MBP that blocks fire sharing.

Regards,
James.


-- The WA Macintosh User Group Mailing List --
Archives - <http://www.wamug.org.au/mailinglist/archives.shtml>
Guidelines - <http://www.wamug.org.au/mailinglist/guidelines.shtml>
Unsubscribe - <mailto:[EMAIL PROTECTED]>