OSX Leopard: Firewall in stealth mode

OSX Leopard: Firewall in stealth mode

Secure Home | Search | About
 Networking Firewalls    Post an article   get this group's latest topics as an RSS feed add this group's latest topics to your My MSN content add this group's latest topics to your My Yahoo content add this group's latest topics to your Google content
Subject Author Date
OSX Leopard: Firewall in stealth mode RS 02-24-2008
Posted by RS on February 24, 2008, 10:57 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
Hi all,

Could someone please tell me what are the pros and cons of turning the
Stealth Mode on for the OS X Leopard software firewall? Is there any
reason why it should not be on by default for a home desktop machine?

Thanks,
RS

Posted by Gerald Vogt on February 24, 2008, 11:18 pm
If you were  Registered and logged in, you could reply and use other advanced thread options
> Could someone please tell me what are the pros and cons of turning the
> Stealth Mode on for the OS X Leopard software firewall? Is there any
> reason why it should not be on by default for a home desktop machine?

"Stealth" mode has no benefits and breaks standards, possibly creating
other problems like MTU issues. "Stealth" sounds goods and sells good
and that's why people buy it. But you won't be any more secure than
without "stealth" as you cannot stealth anything in the internet
unless the router before you does it for you.

Gerald

Posted by Ansgar -59cobalt- Wiechers on February 25, 2008, 9:11 am
If you were  Registered and logged in, you could reply and use other advanced thread options
> Could someone please tell me what are the pros and cons of turning the
> Stealth Mode on for the OS X Leopard software firewall? Is there any
> reason why it should not be on by default for a home desktop machine?

Con: It's utterly braindead, because contrary to popular belief dropping
connection attempts and ICMP packets and does *not* make a computer
invisible.

Pro: Gee, I wonder ...

f'up2csf

cu
59cobalt
--
"If a software developer ever believes a rootkit is a necessary part of
their architecture they should go back and re-architect their solution."
--Mark Russinovich

Similar ThreadsPosted
Firewall Stealth Mode? March 11, 2006, 8:32 am
Transparent mode in NS 5GT (Port mode Extended) April 27, 2006, 3:41 am
Failover mode on Arkoon Firewall March 8, 2005, 4:07 pm
"Transparent" Mode in IPCop / smoothwall / MNF (real IP inside firewall) July 21, 2005, 11:43 pm
Tiny Firewall Pro 6.0: How do I stealth RPC Port 135 ? August 8, 2004, 10:30 am
No firewall, no router, but all ports are "stealth"? April 29, 2005, 11:22 am
Firewall/antivirus software to detect stealth malware February 5, 2007, 3:37 am
Checkpoint - Visitor mode May 12, 2005, 2:35 pm
Netscreen 5GT in Extended Mode May 17, 2005, 8:53 pm
Netscreen in Transparent Mode. June 1, 2005, 9:15 am

The site map in XML format XML site map

Contact Us | Privacy Policy