Web site: http://www.hanynet.com/icefloor/
MAC OSX is delivered with 2 firewalls:
- ALF (Application Level Firewall). Configuration is performed via the Control Panel "System Preferences", and by default hides almost all of the gory details of the configuration to the end-user.
- PF (Packet Filter). A network firewall of the OpenBSD project. Configuration is performed via the command line (shell), and/or via a configuration script (pf.conf).
Both can run at the same time. Note that IceFloor will not touch any of the default OSX firewalls configuration files and it runs fine on OSX 10.8 (Mountain Lion).
If your version of OSX is Mavericks, Yosemite or later, then head to the new http://www.murusfirewall.com ; the "Lite" version is free, but a bit limited. if cost is an issue, or if you are addicted to the FOSS model, then man pfctl is your friend.
If I had to attempt a security conference like DEFCON or Black Hat with my MAC, I'd certainly add pf to the existing ALF firewalling (but the best is to use a dedicated machine for this purpose, freshly imaged, and use an OS like Tails, avoiding by all means to work on job related stuff, or private emails picking etc).
- Nice blog post: http://blog.scottlowe.org/2013/05/15/using-pf-on-os-x-mountain-lion/
- Using the Emerging Threats ETOpen ruleset with pf: http://ikawnoclast.com/security/mac-os-x-pf-firewall-avoiding-known-bad-guys/
