socketfilterfw(8) System Manager's Manual socketfilterfw(8)

socketfilterfw — Application Firewall daemon

socketfilterfw [-hdlk] [--getglobalstate] [--setglobalstate on | off] [--getblockall] [--setblockall on | off] [--listapps] [--getappblocked path] [--blockapp path] [--unblockapp path] [--add path] [--remove path] [--getallowsigned] [--setallowsigned] [--setallowsignedapp] [--getstealthmode] [--setstealthmode on | off] [--getloggingmode] [--setloggingmode on | off] [--getloggingopt] [--setloggingopt throttled | brief | detail]

socketfilterfw is a daemon that gets launched on demand when the Application Firewall is enabled. There are also command-line options to change the Application Firewall behavior.

The command line options are as follows:

Display this help and exit.
Turn on debugging.
Do logging and run in daemon mode.
Kill daemon.
Display if the firewall is enabled or not.
on | off
Turn the firewall on or off.
Show whether block all is enabled or not.
on | off
Enable or disable block all option.
Display a list of paths of added applications.
path
Show whether connections are blocked or not for the application at the indicated path.
path
Block the application at the indicated path.
path
Unblock the application at the indicated path.
path
Add the application at the indicated path to the firewall.
path
Remove the application at the indicated path from the firewall.
Show whether built-in and downloaded signed applications are to automatically receive incoming connections.
Set whether built-in signed applications are to automatically receive incoming connections or not.
Set whether downloaded signed applications are to automatically receive incoming connections or not.
Show whether stealth mode is on or not.
on | off
Set stealth mode on or off.
Show whether logging is on or not.
on | off
Set logging to on or off.
Show logging option.
throttled | brief | detail
Set logging option.
November 10, 2016 Mac OS X