OS X ’s built - in firewall is good enough to protect most Mac users from hack attack . But it does n’t have many bells and whistles and is n’t very leisurely to customize . So to find out whether you’re able to get better protective covering from third - political party firewall applications , Macworldteamed up withAV - Testto tryout Intego ’s NetBarrier X3 10.3 , Pliris ’s FireWalk X2 , Symantec ’s Norton Personal Firewall 3.0 ( NPF ) , Sustainable Softworks ’ IPNetSentry X , and OS X ’s built - in firewall ( see “ Firewall Software equate ” for particular ) .
None of these third - party programs was a huge melioration over OS X ’s build - in firewall option . But NetBarrier , while dear , provided the greatest protection , as well as an easy - to - configure user interface .
Hacker-Proof Protection
With the exclusion of NPF and FireWalk X2 , each program stealthed all ports , efficaciously hiding the Mac from assaulter . NPF closed but did not stealth porthole 0 and 1 ; that did n’t change even when the program was set to maximum security measures . While those two port could n’t be hacked into , they did tolerate the computer to be seen . By default , FireWalk X2 allow for both port 427 and port 548 open — these are porthole used by AppleShare — but we were able-bodied to manually incapacitate them .
Of the five program , only NetBarrier alerted us to potential extraneous attack . But the program was sometimes a number fanatic . For example , it spread a dialog corner and release a loud bombilation every clock time a Telnet server on the connection seek to determine whether a session we ’d open was still animated . Fortunately , it was gentle to tote up the server to awhite inclination , or lean of acceptable waiter , and cease the alerts .
During port scan , all the firewall told the digital scanner which operating system was being used — a likely clew as to how to attack the computer . None of the applications alerted us when the computer unite a new internet , changed dial - up accounts , or switched to an insecure wireless connection .
AV-Testtested these firewalls using Mac OS X 10.3.6 on a Power Mac, a PowerBook, and an iBook with LAN, wireless, and dial-up connections. Read the full test report here .
Only NetBarrier was able to detect package that was illegally undertake to connect to the Internet , which many malware syllabus do . NetBarrier also detected when a program ’s name had been changed in edict to gain ground access to lawfully open port . NPF was able-bodied to find applications set about to open closed ports .
With the exception of NPF and IPNetSentry X , all the applications evade attempts to deactivate them while they were combat-ready . All but IPNetSentry X could n’t be deleted from the hard drive .
Ease of Use
It ’s well-fixed enough to turn on OS X ’s built - in firewall : all you have to do is chatter on a clit . However , you ca n’t get at some features except through Terminal or by using a third - party program such asBrian Hill ’s BrickHouse .
NPF and NetBarrier are by far the easy programs to configure . Each runs you through a elementary apparatus process , and lets you easy adapt setting . FireWalk X2 also had an well-off setup cognitive operation , but changing and defend firewall setting after the fact is much less straightforward and may be restrain for user with niggling or no noesis of firewalls . As for IPNetSentry X , its retarding force - and - drop curtain installation is easy enough , but only a dedicated gearhead could love its hard drug user user interface .
Firewall Software Compared
AV - Testtested these firewalls using Mac OS X 10.3.6 on a Power Mac , a PowerBook , and an iBook with LAN , radio , and dial - up connexion . translate the full trial run news report here .
Macworld’s Buying Advice
If you ’re looking to spare a dime bag and are willing to forgo extras and constellation ease , OS X ’s built - in firewall can handle most of your firewall needs . Although well more expensive , at $ 60 , Intego ’s NetBarrier X3 offers a more exploiter - well-disposed interface , importantly more thinking intrusion detection , and good overall trade protection than any of the other firewall applications presently being offered .
