Take the 2-minute tour ×
Information Security Stack Exchange is a question and answer site for Information security professionals. It's 100% free, no registration required.

I've recently installed XAMPP on my Mac OS X 10.6.8, and this has caused me to reevaluate how I have my firewall setup. Right now I am using the two firewalls that came pre-installed on my computer:

  1. ipfw packet-filtering firewall
  2. Application firewall

In my experience, applications err on the side of usability and as a result have insecure default settings. Given this, I figure I'll need to make some changes (either in ipfw.conf or the Security Pane) to properly harden my network. This is especially important now that I will be running an XAMPP server (for local development only).

What changes should be made to the default settings on the Apple firewalls in order to properly secure your computer/server?

share|improve this question
add comment

1 Answer

up vote 1 down vote accepted

Apple have very comprehensive hardening guides for OSX, which they publish at http://www.apple.com/support/security/guides/ so you should go through that first.

XAMPP is not meant for production use, so out of the box it is deliberately very insecure. You're not meant to use it for anything serious, so they turn lots of security features off to make it easy to use. You can reverse these deliberate weaknesses by running the lampp security command.

Because it's not for production, there isn't much in the way of hardening guides for it. I see one at http://robsnotebook.com/xampp-security-hardening you could take a look at.

Otherwise you're going to have to look at hardening guides for the specific components (Apache, MySQL, etc.)

share|improve this answer
add comment

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.