I’m playing around with the firewall settings on a 10.5.3 Server.

With the firewall enabled, and nothing else changed, other than the default rules, the server is unable to browse the web, connect for software update, etc. The firewall log shows this:

“Jun 5 10:53:24 testserver ipfw[2468]: 65534 Deny TCP 17.149.160.10:80 169.230.117.74:50604 in via en0”

If I uncheck Advanced rule number “65534 deny any to any”, then the above processes work.

If I want to block all incoming connections from outside our network, yet be able to do basic things like surf the web on this xserve, is it safe to uncheck this rule 65534?

What is a good, strong default firewall configuration? We’ll only be connecting to this box using ARD and the campus networks should be able to access a couple of services on it. (filemaker for one)

thanks