Firewall Protection for Mac OS X
Mac OS X includes a firewall: a security measure that protects your computer from connections initiated by other computers when connected to a network or the Internet.
To Turn on the Firewall
Mac OS 10.5
- From the Apple menu, choose System Preferences.
- Select Security in the Personal row.

- In the Security window, click on the Firewall tab.
- Select Set access for specific services and applications.
The top section of the window lists any running network services. These are set automatically based on any services you turned on in the Sharing preferences pane. Below that you will see applications you have authorized to accept or deny incoming connections. When you launch an application for the first time, you will be asked if you want to allow it or block it. The application is then added to the list.

Advanced Firewall Settings (10.5)
You can add a few more layers of security by using the Advanced feature.
- In the Security window of System Preferences, click on the Advanced button in the Firewall pane. (See above)
- Check Enable Firewall Logging.
This will keep track of all connections to your Mac and allow you to see what machines tried to connect and which ones were denied. - Check Enable Stealth Mode.
This will hide the fact that your machine even exists from unauthorized machines. - Click the OK button.
Mac OS 10.4 and earlier
- From the Apple menu,
choose System Preferences.

- From the Internet & Network pane, choose Sharing.
- Click on the Firewall tab.
- Click Start.
Advanced Firewall Settings (10.4 - Tiger Only)
You can add a few more layers of security by using the Advanced feature.
- Click on the Advanced button in the Firewall pane of the System Preferences. (See image above.)
- Check Block UDP Traffic.
This is a low level messaging protocol that isn't as secure as others. - Check Enable Firewall Logging.
This will keep track of all connections to your Mac and allow you to see what machines tried to connect and which ones were denied. - Check Enable Stealth Mode.
This will hide the fact that your machine even exists from unauthorized machines. - Click OK.