Skip to main content

OS X: Turn firewall on or off from the command line

10-05-2013 | Remy van Elst | Text only version of this article


Table of Contents


This command lets you turn the build in OS X firewall on and off, on both for specific services or essential services. It works with OS X 10.5, 10.6, 10.7 and 10.8. It also works via Apple Remote Desktop.

To turn the firewall off:

sudo defaults write /Library/Preferences/com.apple.alf globalstate -int 0

To turn the firewall on for specific applications/services:

sudo defaults write /Library/Preferences/com.apple.alf globalstate -int 1

To turn the firewall on for essential services like DHCP and ipsec, block all the rest:

sudo defaults write /Library/Preferences/com.apple.alf globalstate -int 2    

Tags: apple  apple-remote-desktop  ard  firewall  mac  os-x  snippets