Topic '[OS X] Needing to flush the Firewall rules before Lion will conn' in forum 'All Things Macintosh' - dslreports.com http://www.dslreports.com/forum/OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-conn-26129052 en Sat, 25 May 2013 22:42:45 EDT Sat, 25 May 2013 22:42:45 EDT Re: [OS X] Needing to flush the Firewall rules before Lion will http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26130053
Glad you are up and running again. ]]> http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26130053 Mon, 25 Jul 2011 19:41:05 EDT Re: [OS X] Needing to flush the Firewall rules before Lion will http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129956
Much obliged folks, Thanks for the knowledge and insight.]]> http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129956 Mon, 25 Jul 2011 19:17:05 EDT Re: [OS X] Needing to flush the Firewall rules before Lion will http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129881
Very interesting

It's got the following in there:

net.waterroof.rules.plist

This is whats causing the problem.

Do I just trash it?]]> http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129881 Mon, 25 Jul 2011 18:59:49 EDT Re: [OS X] Needing to flush the Firewall rules before Lion will http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129872 said by Thinkdiff:

Can you post the ipfw list output while your connection is not working?

01000 allow ip from any to any via lo*
01100 check-state
01200 deny log tcp from any to any established
01300 allow tcp from me to any setup keep-state
01400 allow udp from me to any keep-state
65534 deny log ip from any to any
65535 allow ip from any to any]]> http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129872 Mon, 25 Jul 2011 18:58:06 EDT Re: [OS X] Needing to flush the Firewall rules before Lion will http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129096 http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129096 Mon, 25 Jul 2011 16:00:52 EDT Re: [OS X] Needing to flush the Firewall rules before Lion will http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129086
Have you looked in any of the LaunchDaemon or startup item folders to see if anything unusual is starting up?

What exactly stops working? Can you ping your router? Can you ping an external website?

Need some more info to help.
--
University of Southern California - Fight On!]]> http://www.dslreports.com/forum/Re-OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-26129086 Mon, 25 Jul 2011 15:58:30 EDT [OS X] Needing to flush the Firewall rules before Lion will conn http://www.dslreports.com/forum/OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-conn-26129052
I need to run the following command before it will allow me to connect: sudo /sbin/ipfw -f flush

sudo /sbin/ipfw list produces the following: 65535 allow ip from any to any which is the normal, healthy state for the Unix firewall, I think; it should not prevent me from connecting to the web.

Little Snitch is running again (just re-installed it a few minutes ago). At first I thought it was the culprit so I uninstalled it for a while using the Little Snitch uninstaller. Doing so made no difference; the problem remained; it's not Little Snitch.

I had NoobProof running in SL but I was very careful while getting rid of it (before the Lion upgrade) and I don't think it's the problem.

Airport is constantly dropping the connection so I switched to Ethernet. The problem remains; I still have to flush the firewall rules.

My modems (I have two, one is brand new) seem to have trouble finding an ip address unless I flush the rules.

Any suggestions?]]> http://www.dslreports.com/forum/OS-X-Needing-to-flush-the-Firewall-rules-before-Lion-will-conn-26129052 Mon, 25 Jul 2011 15:51:31 EDT