Forum Moderators: travelin cat
Order Deny,Allow
Deny from all
Allow from 127.0.0.1You'd still be able to see the server from the outside, but it would serve a 403 for every non-local request.
You could also change the ports on which your supplied server actually serves pages, by changing the Port and Listen lines in your httpd.conf file.
One other technique would be to install another copy of Apache onto your machine. This is more work, but would allow you to match your development environment to your production environment more closely.
First, the hardware firewall to separate my LAN from the WAN. A must, period. Do yourself a favor and get one that has a VPN feature in case you ever need to setup a tunnel.
Second, I run a
Deny,Allowas recommended.
Order Deny,Allow
Deny from all
# My machine:
Allow from localhost
Allow from 127.0.0.1
# My local network:
Allow from 192.168.1
Lastly, I also run a software firewall. I prefer ZoneAlarm Professional because I have setup some "Expert Rules" as they have so named that feature. In the Expert rules I deny access to my local pc and my network.
The main reason for the last two are for when I am either on site and on a different network (be that a client behind their firewall or at the local coffee shop with free wireless), or if I am tunneled into a client site from within my own LAN.
# My local network:
Allow from 192.168.1
Yes, sorry about the ZoneAlarm note. I completely forgot I was in the Mac forum and luckily wasn't submitted to public castration. Thank you to all those souls that kindly overlooked my err. What is a comparable product for the Mac? I'm serious because I am finally on the verge of grabbing myself a piece of the Apple. Anybody have recommendations for the personal firewall? Is there a built-in and is it decent? If not, what is the preferred 3rd party product? Hopefully I'm not pushing beyond the Terms of Service in my inquiry here ...
but even I want a nice gui for the firewall on my laptop.
WHOA! Never thought I'd hear that from you ;)
luckily wasn't submitted to public castration
Good timing on your part, with all the cool gadgets and other good news coming from Apple, this forum isn't in that kind of mood.
Here's the page for it:
[personalpages.tds.net...]
And a write up on Mac firewalls:
[macwrite.com...]
Might seem like overkill to some but I guess you'd call me a 'belt and suspenders' type guy ... but if you're reading this you must be too ;)
Works EXTREMELY well.
I never want my computer to be accessible outside of localhost, so encyclo's localhost thingy is all I need.
1. Mac!= Mass so no mass attacks for you.
2. Firewall = Configure everything all the time when using internet apps (bad)
3. My PowerMac is behind a router, however I put it in the DMZ (all routing direct to it) and shut the firewall off. No problems, never. 13 Open ports since 2001... Nothing...
In other words: don't worry about the 3 open ports.
(However, when you do worry, and would really like to have them closed...)
Do not rely on a gui. Put some ipfw rules in place and you're done.
To get a list of current rules, put the following in terminal:
sudo ipfw list
My current rule is:
65535 allow ip from any to any
(Or: firewall down)
What you'd want is to make a rule which allows only local traffic for 80, and have another to deny all externally incoming port 80 traffic.
The same for the other ports.
However I don't know much about ipfw rule building, and I just have a server which services are set-up the right way and updated,
that has always worked for me.
[edited by: John_Keates at 12:32 am (utc) on Jan. 29, 2007]
