{"id":34677,"date":"2016-01-12T11:31:07","date_gmt":"2016-01-12T17:31:07","guid":{"rendered":"https:\/\/eshop.macsales.com\/blog\/?p=34677"},"modified":"2017-08-23T14:55:58","modified_gmt":"2017-08-23T19:55:58","slug":"tech-tip-how-to-view-the-os-x-firewall-log","status":"publish","type":"post","link":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/","title":{"rendered":"Tech Tip: How To View The OS X Firewall Log"},"content":{"rendered":"

\"ElCapitan\"<\/p>\n

Before the holidays, I was running into an odd problem with my new iMac, and when I mean “odd”, I mean that it was acting as if someone was trying to access my Mac from somewhere else. Now, I’m one of those people who always enables the OS X firewall, so the chances of a hacker attack actually occurring were probably pretty slim. But after a few days of perplexing symptoms I decided I’d better see whether someone or something was<\/i> actually attempting an attack. To do this, I watched the OS X firewall log to see what was happening each time the symptoms occurred. Here’s how to do the same if you’re feeling as paranoid as I was…<\/p>\n

OS X Firewall<\/strong>
\nTo start with, what’s a firewall? Simply stated, it’s an application that closes all or specific internet protocol (IP) ports on  your internet connection, allowing only incoming connections that are necessary to the regular operation of your Mac. For example, things like email, information coming into a web browser via the http protocol, and video streaming connections all have specific ports assigned to them, and your Mac — even with the firewall turned on — lets those services work normally.<\/p>\n

To enable the OS X firewall, go to System Preferences > Security & Privacy and then click on the Firewall tab. You’ll know immediately if the firewall is turned on or not; if it’s on, there’s a green light and a text notification that the firewall is on (see image below).<\/p>\n

\"The Security & Privacy ” width=”640″ height=”217″><\/a><\/p>\n

If it isn’t enabled and you’d like to turn it on, simply click the Turn On Firewall button that is in the same location as the Turn Off Firewall button in the image. You shouldn’t need to change options for the firewall, but if you do, there’s a Firewall Options button for just that purpose. Clicking it displays something similar to the following:<\/p>\n

\"Firewall-2\"<\/a><\/p>\n

You can choose to block all incoming connections, which provides the highest level of security from intruders, just by checking the top checkbox. You can add specific applications to the “open” connection list by clicking the plus ” + ” sign below the list of allowed connections, then selecting the apps from your Applications folder. The second check box allows software that is signed by a valid certificate authority to provide services to your computer (this should be checked), and the last check box makes it impossible for malicious users to even know that your computer exists by turning off responses to test applications that make use of ICMP (Internet Control Message Protocol).<\/p>\n

At this point, let’s assume that your OS X firewall has been enabled since you first turned on the computer and you’re still seeing some odd things happening. Your next step is to look at the OS X firewall log, and there are two different ways to do that.<\/p>\n

View the Firewall Log in Console<\/strong>
\nThe Console utility in OS X is used to view log files that are created by most system services for the purposes of troubleshooting problems. It can be found in the Utilities folder that’s located in the Applications folder, or easily accessed from the Finder by selecting Go > Utilities.<\/p>\n

Once you’ve launched Console, go to the left sidebar of the app, look under Files, and then find appfirewall.log under \/var\/log. Clicking on that log file displays a list of all actions that have occurred. The following image shows a fairly clean log file, with just the iTunes app “listening” and “connecting” through the firewall:<\/p>\n

\"Viewing<\/a><\/p>\n

What you want to look for are repeated blocked attempts from or to specific apps or services on your Mac. In addition, if you see connections that are taking place with an app or service you’re not familiar with or do not have installed, you might have cause for concern.<\/p>\n

To see whether that service or app is indeed causing the issue that you’re experiencing with your Mac, see if you can find it in the list of allowed connections in the Firewall settings and then click on the toggle on the far right of the list (see image below). Select “Block incoming connections” to see if the problem is resolved. You may need to do this for various apps or services listed in the firewall connections list.<\/p>\n

\"The<\/a><\/p>\n

View the Firewall Log in Real Time in Terminal<\/strong>
\nIf things are really getting weird,  you can always choose to watch the firewall log in real time in the Terminal app. It’s also found in Applications > Utilities. Once launched, type in the following command:<\/p>\n

tail -f \/var\/log\/appfirewall.log<\/code><\/p>\n

That command lists the entire firewall log up to this point in time, then lists any new entries as they are added (see image below). This is very useful in identifying apps that are constantly attempting to connect and disconnect.<\/p>\n

\"Viewing<\/a><\/p>\n

If you’re not familiar with Terminal, note that you will need to type Control-C to quit the live logging and then type exit to log out of the terminal session.<\/p>\n

\n

Fortunately for me, all of my troubleshooting was for naught, as I found out that it was a setup issue with my Wi-Fi router that was causing the odd problems I was seeing. But it’s always worth knowing a few tricks that may help you in the future.<\/p>\n

Be sure to check out the Rocket Yard’s Tech Tips section<\/a> for more tips and tricks for OS X and iOS.<\/p>\n","protected":false},"excerpt":{"rendered":"

Before the holidays, I was running into an odd problem with my new iMac, and when I mean “odd”, I mean that it was acting as if someone was trying to access my Mac from somewhere else. Now, I’m one of those people who always enables the OS X firewall, so the chances of a hacker […]<\/p>\n","protected":false},"author":81,"featured_media":34683,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"spay_email":"","footnotes":""},"categories":[4],"class_list":["post-34677","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-tech-tips"],"yoast_head":"\nTech Tip: How To View The OS X Firewall Log<\/title>\n<meta name=\"description\" content=\"Watching the OS X firewall log can help shed light on your Mac's issues when the symptoms occur.\" \/>\n<meta name=\"robots\" content=\"index, follow, max-snippet:-1, max-image-preview:large, max-video-preview:-1\" \/>\n<link rel=\"canonical\" href=\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/\" \/>\n<meta property=\"og:locale\" content=\"en_US\" \/>\n<meta property=\"og:type\" content=\"article\" \/>\n<meta property=\"og:title\" content=\"Tech Tip: How To View The OS X Firewall Log\" \/>\n<meta property=\"og:description\" content=\"Watching the OS X firewall log can help shed light on your Mac's issues when the symptoms occur.\" \/>\n<meta property=\"og:url\" content=\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/\" \/>\n<meta property=\"og:site_name\" content=\"Rocket Yard\" \/>\n<meta property=\"article:author\" content=\"https:\/\/facebook.com\/stevensande\" \/>\n<meta property=\"article:published_time\" content=\"2016-01-12T17:31:07+00:00\" \/>\n<meta property=\"article:modified_time\" content=\"2017-08-23T19:55:58+00:00\" \/>\n<meta property=\"og:image\" content=\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2016\/01\/Firewall-2-e1452618727874.jpg\" \/>\n\t<meta property=\"og:image:width\" content=\"640\" \/>\n\t<meta property=\"og:image:height\" content=\"502\" \/>\n\t<meta property=\"og:image:type\" content=\"image\/jpeg\" \/>\n<meta name=\"author\" content=\"Steve Sande\" \/>\n<meta name=\"twitter:card\" content=\"summary_large_image\" \/>\n<meta name=\"twitter:label1\" content=\"Written by\" \/>\n\t<meta name=\"twitter:data1\" content=\"Steve Sande\" \/>\n\t<meta name=\"twitter:label2\" content=\"Est. reading time\" \/>\n\t<meta name=\"twitter:data2\" content=\"5 minutes\" \/>\n<script type=\"application\/ld+json\" class=\"yoast-schema-graph\">{\"@context\":\"https:\/\/schema.org\",\"@graph\":[{\"@type\":\"Article\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/#article\",\"isPartOf\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/\"},\"author\":{\"name\":\"Steve Sande\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/1152721d0acb70692858d0f3fcb12e7a\"},\"headline\":\"Tech Tip: How To View The OS X Firewall Log\",\"datePublished\":\"2016-01-12T17:31:07+00:00\",\"dateModified\":\"2017-08-23T19:55:58+00:00\",\"mainEntityOfPage\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/\"},\"wordCount\":941,\"commentCount\":3,\"publisher\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\"},\"keywords\":[\"Console\",\"firewall\",\"How To\",\"TCP\/IP\",\"Tech Tip\",\"Terminal\",\"troubleshooting\"],\"articleSection\":[\"Tech Tips\"],\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"CommentAction\",\"name\":\"Comment\",\"target\":[\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/#respond\"]}]},{\"@type\":\"WebPage\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/\",\"name\":\"Tech Tip: How To View The OS X Firewall Log\",\"isPartOf\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#website\"},\"datePublished\":\"2016-01-12T17:31:07+00:00\",\"dateModified\":\"2017-08-23T19:55:58+00:00\",\"description\":\"Watching the OS X firewall log can help shed light on your Mac's issues when the symptoms occur.\",\"breadcrumb\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/#breadcrumb\"},\"inLanguage\":\"en-US\",\"potentialAction\":[{\"@type\":\"ReadAction\",\"target\":[\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/\"]}]},{\"@type\":\"BreadcrumbList\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/#breadcrumb\",\"itemListElement\":[{\"@type\":\"ListItem\",\"position\":1,\"name\":\"Home\",\"item\":\"https:\/\/eshop.macsales.com\/blog\/\"},{\"@type\":\"ListItem\",\"position\":2,\"name\":\"Tech Tip: How To View The OS X Firewall Log\"}]},{\"@type\":\"WebSite\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#website\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/\",\"name\":\"Rocket Yard\",\"description\":\"Your source for expert tips, special deals, commentary, reviews, and the latest tech news.\",\"publisher\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\"},\"potentialAction\":[{\"@type\":\"SearchAction\",\"target\":{\"@type\":\"EntryPoint\",\"urlTemplate\":\"https:\/\/eshop.macsales.com\/blog\/?s={search_term_string}\"},\"query-input\":\"required name=search_term_string\"}],\"inLanguage\":\"en-US\"},{\"@type\":\"Organization\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#organization\",\"name\":\"OWC\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/\",\"logo\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/\",\"url\":\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png\",\"contentUrl\":\"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png\",\"width\":1024,\"height\":1024,\"caption\":\"OWC\"},\"image\":{\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/\"}},{\"@type\":\"Person\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/1152721d0acb70692858d0f3fcb12e7a\",\"name\":\"Steve Sande\",\"image\":{\"@type\":\"ImageObject\",\"inLanguage\":\"en-US\",\"@id\":\"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/image\/\",\"url\":\"https:\/\/secure.gravatar.com\/avatar\/1ad8e267ec82e12963d9cfe717c9b8e108e1edbb728f5d91fe50c6e7ecd14b15?s=96&d=mm&r=g\",\"contentUrl\":\"https:\/\/secure.gravatar.com\/avatar\/1ad8e267ec82e12963d9cfe717c9b8e108e1edbb728f5d91fe50c6e7ecd14b15?s=96&d=mm&r=g\",\"caption\":\"Steve Sande\"},\"description\":\"Steve has been writing about Apple products since 1986, starting on a bulletin board system, creating the first of his many Apple-related websites in 1994, joining the staff of The Unofficial Apple Weblog in 2008, and founding Apple World Today in 2015. He\u2019s semi-retired, loves to camp and take photos, and is an FAA-licensed drone pilot.\",\"sameAs\":[\"https:\/\/appleworld.today\",\"https:\/\/facebook.com\/stevensande\",\"https:\/\/www.linkedin.com\/in\/stevensande\/\",\"https:\/\/www.youtube.com\/channel\/UCUnDTuaRnXncKQXfQYVNIJA\/\"],\"url\":\"https:\/\/eshop.macsales.com\/blog\/author\/steve-sande\/\"}]}<\/script>\n<!-- \/ Yoast SEO Premium plugin. -->","yoast_head_json":{"title":"Tech Tip: How To View The OS X Firewall Log","description":"Watching the OS X firewall log can help shed light on your Mac's issues when the symptoms occur.","robots":{"index":"index","follow":"follow","max-snippet":"max-snippet:-1","max-image-preview":"max-image-preview:large","max-video-preview":"max-video-preview:-1"},"canonical":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/","og_locale":"en_US","og_type":"article","og_title":"Tech Tip: How To View The OS X Firewall Log","og_description":"Watching the OS X firewall log can help shed light on your Mac's issues when the symptoms occur.","og_url":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/","og_site_name":"Rocket Yard","article_author":"https:\/\/facebook.com\/stevensande","article_published_time":"2016-01-12T17:31:07+00:00","article_modified_time":"2017-08-23T19:55:58+00:00","og_image":[{"width":640,"height":502,"url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2016\/01\/Firewall-2-e1452618727874.jpg","type":"image\/jpeg"}],"author":"Steve Sande","twitter_card":"summary_large_image","twitter_misc":{"Written by":"Steve Sande","Est. reading time":"5 minutes"},"schema":{"@context":"https:\/\/schema.org","@graph":[{"@type":"Article","@id":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/#article","isPartOf":{"@id":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/"},"author":{"name":"Steve Sande","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/1152721d0acb70692858d0f3fcb12e7a"},"headline":"Tech Tip: How To View The OS X Firewall Log","datePublished":"2016-01-12T17:31:07+00:00","dateModified":"2017-08-23T19:55:58+00:00","mainEntityOfPage":{"@id":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/"},"wordCount":941,"commentCount":3,"publisher":{"@id":"https:\/\/eshop.macsales.com\/blog\/#organization"},"keywords":["Console","firewall","How To","TCP\/IP","Tech Tip","Terminal","troubleshooting"],"articleSection":["Tech Tips"],"inLanguage":"en-US","potentialAction":[{"@type":"CommentAction","name":"Comment","target":["https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/#respond"]}]},{"@type":"WebPage","@id":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/","url":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/","name":"Tech Tip: How To View The OS X Firewall Log","isPartOf":{"@id":"https:\/\/eshop.macsales.com\/blog\/#website"},"datePublished":"2016-01-12T17:31:07+00:00","dateModified":"2017-08-23T19:55:58+00:00","description":"Watching the OS X firewall log can help shed light on your Mac's issues when the symptoms occur.","breadcrumb":{"@id":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/#breadcrumb"},"inLanguage":"en-US","potentialAction":[{"@type":"ReadAction","target":["https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/"]}]},{"@type":"BreadcrumbList","@id":"https:\/\/eshop.macsales.com\/blog\/34677-tech-tip-how-to-view-the-os-x-firewall-log\/#breadcrumb","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https:\/\/eshop.macsales.com\/blog\/"},{"@type":"ListItem","position":2,"name":"Tech Tip: How To View The OS X Firewall Log"}]},{"@type":"WebSite","@id":"https:\/\/eshop.macsales.com\/blog\/#website","url":"https:\/\/eshop.macsales.com\/blog\/","name":"Rocket Yard","description":"Your source for expert tips, special deals, commentary, reviews, and the latest tech news.","publisher":{"@id":"https:\/\/eshop.macsales.com\/blog\/#organization"},"potentialAction":[{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https:\/\/eshop.macsales.com\/blog\/?s={search_term_string}"},"query-input":"required name=search_term_string"}],"inLanguage":"en-US"},{"@type":"Organization","@id":"https:\/\/eshop.macsales.com\/blog\/#organization","name":"OWC","url":"https:\/\/eshop.macsales.com\/blog\/","logo":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/","url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png","contentUrl":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2020\/06\/rocket-yard-logo-round.png","width":1024,"height":1024,"caption":"OWC"},"image":{"@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/logo\/image\/"}},{"@type":"Person","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/1152721d0acb70692858d0f3fcb12e7a","name":"Steve Sande","image":{"@type":"ImageObject","inLanguage":"en-US","@id":"https:\/\/eshop.macsales.com\/blog\/#\/schema\/person\/image\/","url":"https:\/\/secure.gravatar.com\/avatar\/1ad8e267ec82e12963d9cfe717c9b8e108e1edbb728f5d91fe50c6e7ecd14b15?s=96&d=mm&r=g","contentUrl":"https:\/\/secure.gravatar.com\/avatar\/1ad8e267ec82e12963d9cfe717c9b8e108e1edbb728f5d91fe50c6e7ecd14b15?s=96&d=mm&r=g","caption":"Steve Sande"},"description":"Steve has been writing about Apple products since 1986, starting on a bulletin board system, creating the first of his many Apple-related websites in 1994, joining the staff of The Unofficial Apple Weblog in 2008, and founding Apple World Today in 2015. He\u2019s semi-retired, loves to camp and take photos, and is an FAA-licensed drone pilot.","sameAs":["https:\/\/appleworld.today","https:\/\/facebook.com\/stevensande","https:\/\/www.linkedin.com\/in\/stevensande\/","https:\/\/www.youtube.com\/channel\/UCUnDTuaRnXncKQXfQYVNIJA\/"],"url":"https:\/\/eshop.macsales.com\/blog\/author\/steve-sande\/"}]}},"jetpack_featured_media_url":"https:\/\/eshop.macsales.com\/blog\/wp-content\/uploads\/2016\/01\/Firewall-2-e1452618727874.jpg","jetpack_shortlink":"https:\/\/wp.me\/pmPaT-91j","_links":{"self":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/34677","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/users\/81"}],"replies":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/comments?post=34677"}],"version-history":[{"count":5,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/34677\/revisions"}],"predecessor-version":[{"id":42051,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/posts\/34677\/revisions\/42051"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/media\/34683"}],"wp:attachment":[{"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/media?parent=34677"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/eshop.macsales.com\/blog\/wp-json\/wp\/v2\/categories?post=34677"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}