How do you set up OS X so it's secure on the internet?

sc_markt · October 19, 2003 8:16PM

I've only started using OS X in the last 10 days or so and I was noticing (from a shareware app) that I have constant data entering my computer. I've turned on the firewall and turned off file sharing from day 1.

Are there other software switches I need to set?

And what data could be entering my machine?

Thanks in advance to all who answer.

pensieve · October 19, 2003 9:38PM

What shareware app?

sc_markt · October 19, 2003 9:52PM

Quote:

Originally posted by penseive

What shareware app?

Menumeters (and someother shareware app that expires after 3 hours).

pensieve · October 19, 2003 10:06PM

Does it tell you how much information is coming in? Just being connected to a network will cause some traffic to come in and out of your computer. If it's not a great deal of data, I wouldn't be too concerned. And if you've turned on your firewall and not started any services (web/file/printer sharing, etc.) that allow incoming traffic, you're more than likely completely safe.

code master · October 19, 2003 11:00PM

On my cable internet, I get about 4-6K/sec on the downstream. Most of it is ARP chatter from the cable network itself (I don't know much about it). Now and then will be people doing scans looking for servers to try and attack (on my network, that's easily half a dozen to a dozen times a day, for example, there have been three rounds in the last half hour against my webserver).

But X is really safe and all that activity is normal. What you want to watch is your upstream. If you are trasnmitting data when frequently when you don't think you should be, that's time to start looking for something misbehaving. Note that things like network time server updates, auto software update, IM clients, webbrowsers, programs like photoshop and some other network serial apps, weather checkers, etc all periodically send requests and will show up.

With the firewall up, services down and no nasty software running, you've got a pretty rock solid system going for you!

smircle · October 20, 2003 9:20AM

If you have a web hosting plan somewhere else, turn off Apache (web sharing).

If you do not need to access your machine from remote or if you are not Terminal.app savvy, turn off sshd (remote login).

Those are two services that are known to have a lot of vulnerabilities (and new ones are found on a monthly basis).

Additionally, turn off samba (windows sharing), ftp and any other service you do not absolutely need.

Additional security points for putting a NAT router between you and the net. Additional points for putting a NAT router/firewall combination between you and the net.

thuh freak · October 20, 2003 9:33AM

Steps to secure Mac OS X:

step 1: turn it on

step 2: ???

step 3: profit

but seriously, even without the firewall on, there is little or nothing an evil hacker can do to your computer, with your services/servers off.

rogue27 · October 20, 2003 11:43AM

Right out of the box, all potentially vunlerable services are off by default. Unless you turn on some services like filesharing, web server, ftp, remote login, etc, nobody could do anything to your computer. Even with those services on, you're not too likely to have a problem if you keep your software updated.

Remote login is the most dangerous, for there tends to be a security hole found (and patched) every few months.

johnq · October 20, 2003 12:28PM

Are you running any file sharing apps like BitTorrent? (Don't)

BitTorrent is horrendous in that it requires you to pull down data then it allows others to search and download that data from your computer, mostly unbeknowst to the casual user.

voxapps · October 20, 2003 12:55PM

Try turning on your firewall to the default settings and then running the Shields Up test here. It tests all the ports on your system for visibility from the Internet.

On my Mac, the result reported is complete invisibility to the Internet from external probes. This doesn't mean you're secure from some worm or other software that might already be on your Mac, but it does mean there's almost no chance that someone outside your network can connect to your computer without your permission (opening a port or installing specific software).

sc_markt · October 20, 2003 6:18PM

To the above posters, thank you for your suggestions and comments.

It looks like the data I'm seeing is just internet chatter since it's not that much. My firewall is turned on and file sharing is turned off. I may try the link that tests your system since I'm getting ready to wipe this drive and install 10.3.

gardenofearthlydelights · October 21, 2003 11:53AM

Quote:

Originally posted by thuh Freak

Steps to secure Mac OS X:

step 1: turn it on

step 2: ???

step 3: profit

I"ll try— gadzooks! My boxer shorts are missing!

aldo · October 21, 2003 2:10PM

Quote:

Originally posted by johnq

Are you running any file sharing apps like BitTorrent? (Don't)

BitTorrent is horrendous in that it requires you to pull down data then it allows others to search and download that data from your computer, mostly unbeknowst to the casual user.

Uh, that's completley wrong.

BitTorrent allows others to 'see' parts of the file you are downloading at the time. It only has access to the file system to allocated and resume downloads at the start. That's all. It isn't some trojan.

Think of Kazaa, winMX or eDonkey. They let people access your 'shared files' directory, or unless you are really stupid and think it's a good idea to share the whole of C: (or /)

.

But seriously, don't spread FUD. bittorrent is a great great program and system.

How do you set up OS X so it's secure on the internet?

Comments