<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	>
<channel>
	<title>Comments on: Mac OS X 10.5 Leopard built-in firewall</title>
	<atom:link href="http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/</link>
	<description>A little bit of technology, security and networking with Linux, FreeBSD and Mac OS X, plus some personal opinions.</description>
	<pubDate>Tue, 14 Oct 2008 11:09:11 +0000</pubDate>
	<generator>http://wordpress.org/?v=2.6.2</generator>
		<item>
		<title>By: Jorge Huerga</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36569</link>
		<dc:creator>Jorge Huerga</dc:creator>
		<pubDate>Mon, 17 Mar 2008 10:58:36 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36569</guid>
		<description>Felipe,

Muchas gracias por tu ayuda, me ha servido para montar al fin el servidor, otra web que me ha ayudado ha sido esta: http://sergio.folgar.es/2007/04/30/compartiendo-carpetas/

Un saludo</description>
		<content:encoded><![CDATA[<p>Felipe,</p>
<p>Muchas gracias por tu ayuda, me ha servido para montar al fin el servidor, otra web que me ha ayudado ha sido esta: <a href="http://sergio.folgar.es/2007/04/30/compartiendo-carpetas/" rel="nofollow">http://sergio.folgar.es/2007/04/30/compartiendo-carpetas/</a></p>
<p>Un saludo</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Felipe Alfaro Solana</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36557</link>
		<dc:creator>Felipe Alfaro Solana</dc:creator>
		<pubDate>Tue, 04 Mar 2008 08:45:04 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36557</guid>
		<description>Jorge,

Si lo que quieres es montar un directorio de otra máquina a través de NFS, puedes utilizar el Finder para montar dicho directorio o, desde la línea de comandos:

sudo mount server:/Users/user /mnt</description>
		<content:encoded><![CDATA[<p>Jorge,</p>
<p>Si lo que quieres es montar un directorio de otra máquina a través de NFS, puedes utilizar el Finder para montar dicho directorio o, desde la línea de comandos:</p>
<p>sudo mount server:/Users/user /mnt</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Felipe Alfaro Solana</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36556</link>
		<dc:creator>Felipe Alfaro Solana</dc:creator>
		<pubDate>Tue, 04 Mar 2008 08:43:30 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36556</guid>
		<description>Jorge,

Lo único que necesitas es configurar correctamente el fichero /etc/exports. Este fichero no existe por defecto, así que tendrás que crearlo. Por ejemplo:

/Users/user -maproot=nobody:nobody -alldirs -network 131.104.48 -mask 255.255.255.0

Esto exportaría el directorio /Users/user a cualquier máquina de la red 131.104.48.*, y mapeando al usuario root desde una máquina remota al usuario nobody.

Después, ejecuta "nfsd update". A partir de este momento, tus clientes deberían ser capaces de montar /Users/user desde tu máquina. Creo que onvia decir que tendrás que configurar el firewall correctamente para permitir el acceso a través de NFS.

Espero que te sirva de ayuda.</description>
		<content:encoded><![CDATA[<p>Jorge,</p>
<p>Lo único que necesitas es configurar correctamente el fichero /etc/exports. Este fichero no existe por defecto, así que tendrás que crearlo. Por ejemplo:</p>
<p>/Users/user -maproot=nobody:nobody -alldirs -network 131.104.48 -mask 255.255.255.0</p>
<p>Esto exportaría el directorio /Users/user a cualquier máquina de la red 131.104.48.*, y mapeando al usuario root desde una máquina remota al usuario nobody.</p>
<p>Después, ejecuta &#8220;nfsd update&#8221;. A partir de este momento, tus clientes deberían ser capaces de montar /Users/user desde tu máquina. Creo que onvia decir que tendrás que configurar el firewall correctamente para permitir el acceso a través de NFS.</p>
<p>Espero que te sirva de ayuda.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Jorge Huerga</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36551</link>
		<dc:creator>Jorge Huerga</dc:creator>
		<pubDate>Sun, 02 Mar 2008 22:54:48 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36551</guid>
		<description>Hola Felipe;

Quisiera saber como puedo montar un directorio nfs, pues me esta diciendo todo el rato que: 
"mount_nfs: /Users/user/tmp: Operation not permitted"

gracias y un saludo</description>
		<content:encoded><![CDATA[<p>Hola Felipe;</p>
<p>Quisiera saber como puedo montar un directorio nfs, pues me esta diciendo todo el rato que:<br />
&#8220;mount_nfs: /Users/user/tmp: Operation not permitted&#8221;</p>
<p>gracias y un saludo</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Science</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36450</link>
		<dc:creator>Science</dc:creator>
		<pubDate>Thu, 13 Dec 2007 01:49:47 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36450</guid>
		<description>my firwall.sh
#!/bin/sh
ipfw -f flush
sysctl -w net.inet.ip.fw.verbose=2
ipfw -f add 100 allow ip from any to any via lo0
ipfw -f add 110 deny log ip from 127.0.0.0/8 to any in
ipfw -f add 120 deny log ip from any to 127.0.0.0/8 in
ipfw -f add 20000 check-state
ipfw -f add allow tcp from me to any established
ipfw -f add allow tcp from me to any out keep-state
ipfw -f add allow udp from me to any out keep-state
ipfw -f add allow icmp from me to any out 
ipfw -f add deny ip from any to any</description>
		<content:encoded><![CDATA[<p>my firwall.sh<br />
#!/bin/sh<br />
ipfw -f flush<br />
sysctl -w net.inet.ip.fw.verbose=2<br />
ipfw -f add 100 allow ip from any to any via lo0<br />
ipfw -f add 110 deny log ip from 127.0.0.0/8 to any in<br />
ipfw -f add 120 deny log ip from any to 127.0.0.0/8 in<br />
ipfw -f add 20000 check-state<br />
ipfw -f add allow tcp from me to any established<br />
ipfw -f add allow tcp from me to any out keep-state<br />
ipfw -f add allow udp from me to any out keep-state<br />
ipfw -f add allow icmp from me to any out<br />
ipfw -f add deny ip from any to any</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Pj</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36426</link>
		<dc:creator>Pj</dc:creator>
		<pubDate>Mon, 03 Dec 2007 15:00:27 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36426</guid>
		<description>Wow...  The only problem I was having was that it wouldn't remember that I told it that Psi was allowed to accept incomming connections.  ...or, well, it remembers it, but it still prompts to ask every time I run Psi anyway, which is rather annoying.

My MacBook is the first Mac I've ever used, and so far the only thing I really don't like about it is that it generally assumes that I'm dumb or something and that too many configuration options will confuse me.  Everywhere I go I find the bare minimum of configurability which is annoying to say the least, and the firewall options are just one more example of that.  There's no more configurability there than necessary to be able to say that there is a configurable firewall, and like everthing else, it leaves me wanting more options.

I think one simple example of what I'm talking about is the system file open dialoge:  Using KDE in Linux, when I open a file, the file open dialoge is basically a complete file manager.  In the process of choosing a file I can navigate to any folder, create or delete folders, rename or delete files, or anything.  In Mac OS X I get a little window that does nothing more than let me choose the name of the file and one of just a few directories that Mac OS X thinks I should be allowed to save to.  The entire GUI is oversimplified like that.

...but that's not to say that I think Linux is better or anything.  I hate Linux, which is why I bought a Mac.  However, the KDE people definately know how to provide configuration options.  If Linux weren't such a terrible OS, Linux combined with KDE would be a wonderful thing.

Anyway, there's nothing wrong with your writing.  Daniel is just a spammer.  Look at the link to his web site, it's just an ad.  The reason he didn't go into any detail is because he didn't actually read the article, he just left a vague message that mentioned the name of the article, but he didn't actually read the article which is why he didn't say anything specific.</description>
		<content:encoded><![CDATA[<p>Wow&#8230;  The only problem I was having was that it wouldn&#8217;t remember that I told it that Psi was allowed to accept incomming connections.  &#8230;or, well, it remembers it, but it still prompts to ask every time I run Psi anyway, which is rather annoying.</p>
<p>My MacBook is the first Mac I&#8217;ve ever used, and so far the only thing I really don&#8217;t like about it is that it generally assumes that I&#8217;m dumb or something and that too many configuration options will confuse me.  Everywhere I go I find the bare minimum of configurability which is annoying to say the least, and the firewall options are just one more example of that.  There&#8217;s no more configurability there than necessary to be able to say that there is a configurable firewall, and like everthing else, it leaves me wanting more options.</p>
<p>I think one simple example of what I&#8217;m talking about is the system file open dialoge:  Using KDE in Linux, when I open a file, the file open dialoge is basically a complete file manager.  In the process of choosing a file I can navigate to any folder, create or delete folders, rename or delete files, or anything.  In Mac OS X I get a little window that does nothing more than let me choose the name of the file and one of just a few directories that Mac OS X thinks I should be allowed to save to.  The entire GUI is oversimplified like that.</p>
<p>&#8230;but that&#8217;s not to say that I think Linux is better or anything.  I hate Linux, which is why I bought a Mac.  However, the KDE people definately know how to provide configuration options.  If Linux weren&#8217;t such a terrible OS, Linux combined with KDE would be a wonderful thing.</p>
<p>Anyway, there&#8217;s nothing wrong with your writing.  Daniel is just a spammer.  Look at the link to his web site, it&#8217;s just an ad.  The reason he didn&#8217;t go into any detail is because he didn&#8217;t actually read the article, he just left a vague message that mentioned the name of the article, but he didn&#8217;t actually read the article which is why he didn&#8217;t say anything specific.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Felipe Alfaro Solana</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36401</link>
		<dc:creator>Felipe Alfaro Solana</dc:creator>
		<pubDate>Tue, 27 Nov 2007 01:02:16 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36401</guid>
		<description>Hi Daniel.

What is it that you don't understand? Is it because of the way that I write? Since I'm no English native speaker, I might have made some spelling or grammatical errors. Can you provide more details so that I can fix what is wrong or confusing?

Thanks!</description>
		<content:encoded><![CDATA[<p>Hi Daniel.</p>
<p>What is it that you don&#8217;t understand? Is it because of the way that I write? Since I&#8217;m no English native speaker, I might have made some spelling or grammatical errors. Can you provide more details so that I can fix what is wrong or confusing?</p>
<p>Thanks!</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Daniel</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36399</link>
		<dc:creator>Daniel</dc:creator>
		<pubDate>Mon, 26 Nov 2007 21:59:50 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36399</guid>
		<description>I couldn't understand some parts of this article Mac OS X 10.5 Leopard built-in firewall, but I guess I just need to check some more resources regarding this, because it sounds interesting.</description>
		<content:encoded><![CDATA[<p>I couldn&#8217;t understand some parts of this article Mac OS X 10.5 Leopard built-in firewall, but I guess I just need to check some more resources regarding this, because it sounds interesting.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: meneame.net</title>
		<link>http://www.felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36351</link>
		<dc:creator>meneame.net</dc:creator>
		<pubDate>Fri, 09 Nov 2007 23:26:00 +0000</pubDate>
		<guid isPermaLink="false">http://felipe-alfaro.org/blog/2007/11/10/mac-os-x-105-leopard-built-in-firewall/#comment-36351</guid>
		<description>&lt;strong&gt;Mac OS X 10.5 Leopard built-in firewall...&lt;/strong&gt;

Pequeña revisión del nuevo cortafuegos de Mac OS X 10.5 Leopard, sus probemas, sus nuevas funcionalidades....</description>
		<content:encoded><![CDATA[<p><strong>Mac OS X 10.5 Leopard built-in firewall&#8230;</strong></p>
<p>Pequeña revisión del nuevo cortafuegos de Mac OS X 10.5 Leopard, sus probemas, sus nuevas funcionalidades&#8230;.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
