socketfilterfw(8) BSD System Manager's Manual socketfilterfw(8)NAME
socketfilterfw -- Application Firewall daemon
SYNOPSIS
socketfilterfw [-hdlk] [--getglobalstate] [--setglobalstate on | off] [--getblockall] [--setblockall on | off] [--listapps]
[--getappblocked path] [--blockapp path] [--unblockapp path] [--add path] [--remove path] [--getallowsigned]
[--setallowsigned] [--setallowsignedapp] [--getstealthmode] [--setstealthmode on | off] [--getloggingmode]
[--setloggingmode on | off] [--getloggingopt] [--setloggingopt throttled | brief | detail]
DESCRIPTION
socketfilterfw is a daemon that gets launched on demand when the Application Firewall is enabled. There are also command-line options to
change the Application Firewall behavior.
OPTIONS
The command line options are as follows:
-h Display this help and exit.
-d Turn on debugging.
-l Do logging and run in daemon mode.
-k Kill daemon.
--getglobalstate
Display if the firewall is enabled or not.
--setglobalstate on | off
Turn the firewall on or off.
--getblockall
Show whether block all is enabled or not.
--setblockall on | off
Enable or disable block all option.
--listapps
Display a list of paths of added applications.
--getappblocked path
Show whether connections are blocked or not for the application at the indicated path.
--blockapp path
Block the application at the indicated path.
--unblockapp path
Unblock the application at the indicated path.
--add path
Add the application at the indicated path to the firewall.
--remove path
Remove the application at the indicated path from the firewall.
--getallowsigned
Show whether built-in and downloaded signed applications are to automatically receive incoming connections.
--setallowsigned
Set whether built-in signed applications are to automatically receive incoming connections or not.
--setallowsignedapp
Set whether downloaded signed applications are to automatically receive incoming connections or not.
--getstealthmode
Show whether stealth mode is on or not.
--setstealthmode on | off
Set stealth mode on or off.
--getloggingmode
Show whether logging is on or not.
--setloggingmode on | off
Set logging to on or off.
--getloggingopt
Show logging option.
--setloggingopt throttled | brief | detail
Set logging option.
Mac OS November 10, 2016 Mac OS