An open community 
of Macintosh users,
for Macintosh users.

FineTunedMac Dashboard widget now available! Download Here

Previous Thread
Next Thread
Print Thread
Cocktail - Firewall Logs
#8575 02/24/10 05:37 PM
Joined: Aug 2009
Likes: 14
ryck Offline OP
OP Offline

Joined: Aug 2009
Likes: 14
Yesterday I purchased "Cocktail" and today I've been looking at a few of the features. The Files feature - Files/Logs/Firewall - displayed the following information. The third log (Stealth Mode connection attempt) is listed as 23 times yesterday and twice already today.

The Help file unfortunately doesn't have any analytical guides so I'm not sure what to make of this information. Should I be concerned? Or should I be glad my Security software is up to date?

ryck

Feb 23 17:29:20 firstname-lastname-imac Firewall[65]: Deny configd data in from 10.0.1.1:67 to port 68 proto=17

Feb 23 17:29:20 firstname-lastname-imac Firewall[65]: Deny mDNSResponder data in from fe80::223:32ff:fe95:1ec4:5353 to port 5353 proto=17

Feb 23 17:31:24 firstname-lastname-imac Firewall[65]: Stealth Mode connection attempt to UDP 10.0.1.2:60019 from 10.0.1.1:53

UPDATE (16:34:00):

I now appear to have hundreds of the "Stealth Mode connect attempt" and various amounts of the following:

Feb 24 10:02:04 firstname-lastname-imac Firewall[66]: LaunchCFMApp is listening from 0.0.0.0:3324 proto=6

Feb 24 10:02:04 firstname-lastname-imac Firewall[66]: Deny LaunchCFMApp data in from 10.0.1.2:56350 to port 2222 proto=17

Feb 24 10:24:57 firstname-lastname-imac Firewall[66]: Deny mDNSResponder data in from fe80::223:32ff:fe95:1ec4:5353 to port 5353 proto=17

Last edited by ryck; 02/25/10 12:34 AM. Reason: Update Information

ryck

"What Were Once Vices Are Now Habits" The Doobie Brothers

iMac (Retina 5K, 27", 2020), 3.8 GHz 8 Core Intel Core i7, 8GB RAM, 2667 MHz DDR4
OS Sonoma 14.4.1
Canon Pixma TR 8520 Printer
Epson Perfection V500 Photo Scanner c/w VueScan software
TM on 1TB LaCie USB-C
Re: Cocktail - Firewall Logs
ryck #8580 02/25/10 05:21 AM
Joined: Aug 2009
Likes: 1
Offline

Joined: Aug 2009
Likes: 1
What you're seeing is a normal consequence of OS X's UNIX underpinnings. When you see configd accessing the network, that is how the Mac maintains things like lists of network file servers; configd helps maintain the icons you see in the Network window, among other things.

mDNSresponder is part of Bonjour, the part of OS X that maintains local no-configuration network connections. iChat, network printers, iTunes shared libraries, file servers, iPhoto libraries, and so on.

LaunchCFMapp is a part of the operating system responsible for loading and running programs that are based on Carbon. You will see network connection attempts from LaunchCFMapp when you run a Carbon program that requests network access, such as iTunes Helper.

In other words, all these network access attempts are normal, ordinary parts of OS X activity. If you use a firewall to block configd, you may have trouble accessing file servers on the network. If you block mDNSresponder, you may have trouble accessing shared iTunes libraries or remote iPhoto libraries on other servers. If you blick LaunchCFMapp, then programs like iTunes and the Microsoft Office automatic updater may not work correctly.


Photo gallery, all about me, and more: www.xeromag.com/franklin.html

Moderated by  alternaut, dianne, dkmarsh 

Link Copied to Clipboard
Powered by UBB.threads™ PHP Forum Software 7.7.4
(Release build 20200307)
Responsive Width:

PHP: 7.4.33 Page Time: 0.017s Queries: 18 (0.012s) Memory: 0.5730 MB (Peak: 0.6244 MB) Data Comp: Zlib Server Time: 2024-04-18 18:41:54 UTC
Valid HTML 5 and Valid CSS