Information Security Stack Exchange is a question and answer site for information security professionals. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I've recently installed XAMPP on my Mac OS X 10.6.8, and this has caused me to reevaluate how I have my firewall setup. Right now I am using the two firewalls that came pre-installed on my computer:

  1. ipfw packet-filtering firewall
  2. Application firewall

In my experience, applications err on the side of usability and as a result have insecure default settings. Given this, I figure I'll need to make some changes (either in ipfw.conf or the Security Pane) to properly harden my network. This is especially important now that I will be running an XAMPP server (for local development only).

What changes should be made to the default settings on the Apple firewalls in order to properly secure your computer/server?

share|improve this question
up vote 1 down vote accepted

Apple have very comprehensive hardening guides for OSX, which they publish at so you should go through that first.

XAMPP is not meant for production use, so out of the box it is deliberately very insecure. You're not meant to use it for anything serious, so they turn lots of security features off to make it easy to use. You can reverse these deliberate weaknesses by running the lampp security command.

Because it's not for production, there isn't much in the way of hardening guides for it. I see one at you could take a look at.

Otherwise you're going to have to look at hardening guides for the specific components (Apache, MySQL, etc.)

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.