adding exceptions to the Firewall

[nobrainer]

So, I figured out how to make a pkg that included firewall exceptions (Java for SAV and CIFSD for AdmitMac), but going on in the future, as the end user comes back to me with needed exceptions for their apps – is there a script I can do to append the exception to the list or do I need to create another pkg that includes all the previous exceptions + the new ones?

[Rusty Myers]

Your asking if there is a script in the package? If it’s not a flat package, you should be able to open it up and modify the postflight script.

[nobrainer]

No, I wanted to know if there was a way to script out FW exceptions. The only thing I have found was to setup all the exceptions then copy the file to every box. However, that won’t merge the 2 files, that will overwrite them, so if user has a couple custom apps they won’t be retained.

[Rusty Myers]

OK, I’ve not got much experience with it, as you could probably tell. =)

If it’s a text file, I like to manipulate them with perl:

Replace abc with def:
perl -i~ -pe ‘s/abc/def/g’ filename

If its a plist, which I think it is (not sure, is it the /Library/Preferences/com.apple.alf.plist?)

Then I would try to use PlistBuddy or defaults to add additional exceptions.

Hope that helps!

[knowmad]

there is some excellent info here:
[url]http://hints.macworld.com/article.php?story=20050405142113281[/url]
this can all be done through a bash script.

[Author]

Posts