2 ms·
My understanding is if you change firewall settings using PF let's you have total control, unlike network extensions.
by azinman2 5y ago
My understanding is if you change firewall settings using PF let's you have total control, unlike network extensions.
- GekkePrutser 5y agoCorrect, though both layers remain active. The application-level firewall in the macOS GUI and the packet-based pf layer work on top of each other (I believe pf is on top of the application layer one but not 100% sure). So if you have the application firewall on, opening ports in pf won't help. I'm kinda surprised pf is still in there to be honest. I know some security solutions like McAfee Firewall use it under the hood. But they could do similar things with network extensions. I have expected them to drop it for years now.