Mac OS X Leopard
Problems were uncovered in the way Leopard classifies its 'block all incoming connections' setting

Apple fixes Leopard firewall

New update addresses security issues

Shaun Nichols in California

Apple has issued an update for its newly-released MacOS 10.5.1, better known as Leopard.

The update addresses Leopard's firewall, the most highly-publicised shortcoming in the operating system.

Advertisement

Shortly after Leopard's public release in October, researchers claimed that the firewall was not doing its job.

Heise Security researcher Jurgen Schmidt said that users would not be able to rely on the firewall to block potentially harmful traffic, even at its most secure setting.

Apple explained that the issues Schmidt had highlighted were down to the way Leopard classifies its 'block all incoming connections' setting.

When users select the option to block all incoming connections, processes running at the root level are not blocked by the firewall.

"The 'block all incoming connections' setting for the firewall is misleading, " Apple admitted.

Apple is changing the option from 'block all incoming connections' to 'allow only essential services' in an effort to provide a more accurate description.

Among the processes not blocked under the setting are components for DHCP network configurations, IPsec security protocols and Bonjour networking software.

The update will also provide the option to further enhance Leopard's firewall protection by allowing users to block all connections for a specific application, including root-level connections which had previously been allowed.

Apple also corrected an issue in which some firewall preferences would not take effect until certain process had been restarted.

The update only effects OS X Leopard. Users can obtain the update through the Apple Downloads site or through the OS X Software Update component.

  • Have your say
  • Send to a friend
  • Print
  • Digg
  • Reddit
  • Share

Tags:

Do you agree?

Related whitepapers

Related jobs

Most watched

eu flag

V3.co.uk weekly debrief, 6 Nov 09

This week, Europe decides what to do with illegal file sharers

Intel unveils its micro server platform

Small-enclosure systems take aim at hosting market

IT white papers

Search white papers

Top categories

Poll

Impact of Information Overload poll

Impact of Information Overload poll

What is the biggest problem your firm faces as a result of the data explosion?

View poll results

Advertisement

Advertisement

Newsletter signup

Sign up for our range of FREE newsletters:

Existing User

Newsletter user login:

Enter email address to edit your newsletter preferences

Job of the week

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Hiring now on ComputingCareers:

Related IT jobs

Search thousands of IT jobs :

Search thousands of IT jobs:

Advanced search

Spotlight

Piracy, privacy and processing power set to be hot topics for V3.co.uk Summit

Have you got a burning desire to quiz experts from...

iPhone

World's first iPhone virus surfaces

Images of 80s icon Rick Astley spell trouble

Airvana HubBub

Airvana debuts 3G femtocell for offices

HubBub improves indoor network coverage for businesses

shopping key

E-commerce on brink of SaaS revolution

Figleaves founder argues platform-as-a-service vendor will emerge to shake up...

Primary Navigation