04 · Hardening area
Network & Firewall
The macOS firewall ships disabled. This area explains the per-application firewall and stealth mode, when the BSD packet filter (pf) is the better tool, which sharing services to switch off and how to enforce encrypted DNS with a profile.
socketfilterfwpfStealth mode
- macOS Firewall and pf: Application Firewall, pf and Sharing
Harden macOS networking with the Application Firewall, pf packet filter rules, disabled sharing services and managed encrypted DNS profiles.