Apple Drops Controversial Firewall-bypass Feature on macOS

Apple removed a controversial feature in its macOS operating system that allowed more than 50 of its apps to fully bypass third-party security tools like firewalls and virtual private networks (VPNs).

The ContentFilterExclusionList, implemented in macOS 11 Big Sur, was classified as a possible security risk by the security community and developers late last year. This list in macOS meant that a firewall socket filter could not block traffic created by Apple applications such as Maps and iCloud.

The Little Snitch firewall tool developer, Norbert Heger, described this action as "a hole in the wall."

Patrick Wardle, a security researcher with Jamf software company, also showed how it could be possible for malware to abuse "excluded" web traffic apps to circumvent firewalls.

Those who initially sounded the alarm, including Heger, Wardle, and others, have now accepted Apple's decision to drop ContentFilterExclusionList with the release of macOS 11.2 beta 2.

The exclusion list first arose as part of Apple's move away from third-party kernel extensions, including network kernel extensions (NKEs), which allowed developers to load code directly into the macOS operating system. However, these NKEs have been used by a range of third-party security platforms, including firewalls such as LuLu and Little Snitch.

To continue supporting such products on modern macOS iterations, Apple introduced the User Mode Network Extension Framework (NEF) that developers could use instead to preserve macOS compatibility for their firewalls and VPNs.

Apple then exempted more than 50 of its applications and daemons from being routed through the NEF by implementing the ContentFilterExclusionList. This meant that third-party firewalls that used this new system were unable to block traffic from them.

"Many (rightly) asked, "What good is a firewall if it can't stop all traffic?" Wardle said in a blog post. "Well, after a lot of bad press and a lot of feedback/bug reports from developers like myself, the Cupertino mind seems to have prevailed."

"The list of ContentFilterExclusionLists has been deleted (in macOS 11.2 beta 2). This means (socket filter) firewalls such as LuLu can now completely filter/block all network traffic."

Researchers also speculated that Apple had removed its software from third-party firewalls' supervision in the name of overall security. For example, if excluded, these services can continue to receive updates until all web traffic has been blocked.

107 comments

  1. slonned
  2. Ifeyyf

    Vufgkk - cheap erectile dysfunction Zryfjq

  3. Dyozkr

    priligy 60mg - priligy 90mg online cialis com

  4. Figmqq

    erectile dysfunction drugs - over the counter ed pills cvs generic ed pills

  5. Veeddd

    prednisone 10mg pills - prednisone 2.5 mg price prednisone 1 mg

  6. Wadpef

    provigil cost - modafinil online provigil schedule

  7. Cpcaiq

    accutane prescription online - accutane pharmacy online accutane 60 mg daily

  8. Xwqcyu

    amoxicillin price - gnamoxicill.com amoxicilin brand name

  9. Mcauua

    when to take vardenafil - what is generic vardenafil online vardenafil

  10. Ktepix

    stromectol for human - stromectol tablets for humans stromectol for lice

  11. Rzgita

    800 mg cialis - tadalafil black buy cialis using paypal

  12. Lawmke

    where to buy ivermectin - stromectol 6mg buy ivermectin stromectol

  13. Wppqus

    accutane 2009 - accutane how to get accutane canada 40mg

  14. Wrefgj

    lyrica 125 mg - pharmacy online walmart pharmacy

  15. Cbnplc

    amoxil 500mg - amoxicillin price without insurance walmart buy amoxicilin 500 mg online

  16. Ileojh

    sildenafil for sale uk - 200mg viagra best price for sildenafil 50 mg

  17. Ytuyxx

    where can i buy cialis uk - tadalafil online paypal cialis soft tabs 40mg

  18. Ebxgjy

    ivermectin stromectol - buy ivermectin stromectole online

  19. Gkzbpu

    prednisone 80 mg daily - prednisone 5mg pack buy prednisone online paypal

  20. Brvmxm

    modafinil dosage - modafinil 200 mg buy provigil online

  21. Williamsmesk

    personal ads free
    [url="http://onlinedatinglook.com/?"]facebook dating[/url]

  22. Bonlrd

    what is azithromycin used to treat - zithromax for sale uk zithromax 500mg online

  23. Xajtoc

    furosemide tablets uk - order lasix online no prescription furosemide 40 mg buy online uk

  24. Gbntnd

    buy clomid 25mg online - generic clomiphene 50mg generic clomid 25mg online

  25. Ryvtxc

    generic viagra to buy - how to buy sildenafil online usa viagra for females

  26. Mjfaxo

    tadalafil generic cialis - cialis buying online cheap tadalafil 60 mg

  27. KevinLig

    pr gay dating site
    " gay dating sites"
    [url="http://freegaychatnew.com?"]gay dating italian mem[/url]

  28. Eraguu

    ivermectin lotion - ivermectina 6 mg cost stromectol

  29. Sajjpf

    best real casino online - parx casino online gambling games

  30. Nexarm

    best place to buy ed pills online - dr phil and steve harvey ed pill buy ed pills with paypal

  31. KevinLig

    gay dating radar site
    free gay dating sites and sites
    [url="http://gaydatingzz.com?"]gay guy dating amanda joke[/url]

  32. Epznjm

    prednisone 20 mg over the counter - 10mg prednisone 20 mg prednisone generic

  33. Tyobsg

    buy viagra now - viagra cream price in india generic viagra online india

  34. KevinLig

    dating site gay interracial
    gay smell dating
    [url="http://gaychatrooms.org?"]gay dating scam format[/url]

  35. Pedwwh

    generic cialis soft gel - Buy generic cialis tadalafil cost usa

  36. KevinLig

    taimi gay dating
    best gay dating hornet
    [url="http://freegaychatnew.com?"]gay and bi dating[/url]

  37. Rlhntz

    stromectol online canada - stromectol for humans stromectol price

  38. Chjjag

    home remedies for erectile dysfunction - help for ed ed treatment

  39. Mworvl

    cost of ventolin in usa - ventolin uk price ventolin cost

  40. Nnrbvn

    cytotec 100 mcg tablet - cytotec mexico how to buy cytotec in singapore

  41. Korvhz

    order doxycycline without prescription - doxycycline 20 mg coupon doxycycline 1000 mg best buy

  42. Krmjeh

    neurontin prices generic - neurontin 50 mg where can you get levothyroxine

  43. viagra indiana

    Kamagra Acheter En Belgique

  44. Scarlett

    If some one wants expert view regarding blogging afterward i suggest him/her to visit this web hosting where site, Keep up the good work.

  45. itewhex
  46. Cialis

    Donde Comprar Cialis Farmacia

  47. NoffAnend
  48. Msanfg

    cialis professional price - cialis daily prescription

  49. Tawanna

    If some one wants to be updated with most recent technologies afterward he
    must be go to see this quest bars (http://j.mp/3zuTMxD) site and be up to date all the time.

  50. Cialis

    Propecia Generic 5mg

  51. Viagra

    Lasix No Prescription Needed

  52. sefeanaps
  53. Mae

    Greetings from Ohio! I'm bored to death at work so I decided to
    browse your blog on my iphone during lunch break. I
    enjoy the information you present here and can't wait to take a look when I get home.

    I'm surprised at how fast your blog loaded on my mobile
    .. I'm not even using WIFI, just 3G .. Anyhow, awesome site!

    My blog post: an quest bars (http://bitly.com/)

  54. poidayrap
  55. Maroweawl
  56. traitly
  57. Titismles
  58. Stromectol

    Priligy De 30

  59. Swsghh

    stromectol uk - stromectol how much it cost covid ivermectin

  60. Arthur

    I visit every day some sites and websites to read articles,
    but this web site offers feature based writing.

    Look into my homepage ... asmr when

  61. Sqhdge

    how much is prednisone cost - best pharmacy prednisone prednisone pak

  62. Isaac

    Thanks on your marvelous posting! I certainly enjoyed reading it, you will be
    a great author. I will be sure to bookmark your blog and definitely will
    come back very soon. I want to encourage that you
    continue your great writing, have a nice evening!

    Here is my web-site :: scoliosis surgery why

  63. PatrickSix

    site for gay chubby dating
    gay muscle dating
    [url="http://freegaychatnew.com?"]gay dating simulator[/url]

  64. Chong

    I will immediately grab your rss feed as I can not in finding your e-mail subscription hyperlink or newsletter service.
    Do you've any? Please allow me know so that I may just subscribe.
    Thanks.

    Here is my site :: asmr it

  65. Athaaw

    accutane pills online - where to get accutane without prescription how much is accutane prescription

  66. Irene

    Thank you for another informative site. Where else may just I get that type of
    info written in such an ideal manner? I've a project that I am simply now operating on, and I have been at the glance out for such information.

    My web-site this asmr

  67. Hkerxi

    bulk order amoxicillin in usa - buy amoxicilin 500 mg from canada amoxicillin price at cvs

  68. itewhex

    https://buypropeciaon.com/ - buy cheap propecia

  69. PatrickSix

    gay asian men dating
    gay sex dating game
    [url="http://gaychatgay.com?"]gay dating av[/url]

  70. Jaime

    At this moment I am going away to do my breakfast, later than having my breakfast coming
    again to read more news.

    Take a look at my page: in asmr

  71. Rich

    Hello there! I know this is somewhat off topic but I was wondering if you knew scoliosis surgery where I
    could find a captcha plugin for my comment form?
    I'm using the same blog platform as yours and I'm having
    difficulty finding one? Thanks a lot!

  72. Udvkdr

    medrol medicine - medrol price price for lyrica 75 mg

  73. Propecia

    Viagra Prescription Nhs

  74. Zswxnb

    best essay service - helping others essay websites for essay writing

  75. Michaelnix

    gay dating long island
    gay man dating service
    [url="gay-singles-dating.com?"]fake dating gay movie[/url]

  76. Xeckbv

    sildenafil online canadian pharmacy - Us pharmacy viagra buy viagra online cheap usa

  77. Oscineded

    https://buysildenshop.com/ - viagra discount card

  78. Xutvus

    cialis pills 20mg - Buy cialis in us best pharmacy buy tadalafil

  79. sefeanaps
  80. poidayrap
  81. Maroweawl
  82. Zagdfr

    stromectol tablets buy online - stromectol stromectol can you buy stromectol over the counter

  83. Henrybrura

    black gay thug dating
    military gay dating site
    [url="http://datinggayservices.com/?"]reddit gay dating tips[/url]

  84. Ngskti

    can i buy prednisone online without a prescription - prednisone 5mg over the counter buy prednisone without prescription paypal

  85. Oncdoc

    furosemide 60 mg - generic clomid lasix tablets australia

  86. how fast does lasix work

    viagra barata comprar

  87. Henrybrura

    gay speed dating logo
    gay hawaiian dating site
    [url="http://gay-singles-dating.com/?"]gay professional dating[/url]

  88. icolladia
  89. CoahPhoda
  90. Tkvmem

    cytotec for sale usa - buy cytotec pills online cheap cytotec cost in india

  91. Baimame

    http://buypriligyhop.com/ - priligy where to buy

  92. icolladia
  93. Wopixj

    doxycycline coupon - prednisolone 5mg brand name prednisolone rx cost

  94. Priligy

    Mononucleosis Amoxicillin Rash

  95. Nwhadm

    stromectol price - ivermectin 3mg dose cost of ivermectin medicine

  96. Axiotolal
  97. Dcldtb

    stromectol price - ivermectin generic cream ivermectin where to buy for humans

  98. Zithromax

    Mejor Que Priligy

  99. Bnbteg

    sildenafil canada - generic sildenafil india sildenafil price

  100. addibly
  101. Hxetwi

    tadalafil 5mg - tadalafills.com tadalafil vs sildenafil

  102. twilsOm
  103. Hyglre

    accutane online australia - how to buy accutane online accutane capsule

  104. suepext
  105. Uaquwx

    research paper editing - essaywrb.com help with term papers

  106. FrauffLup
  107. Dmgoqe

    ivermectina online - stromectol stromectol tablets stromectol us

Comment

Your email address will not be disclosed. The required fields are marked with*.

Related recommendation

No related articles!

微信扫一扫,分享到朋友圈

Apple Drops Controversial Firewall-bypass Feature on macOS