Hacker News new | ask | show | jobs
by darwingr 1769 days ago
But can it ignore your firewall settings?
1 comments

My understanding is if you change firewall settings using PF let's you have total control, unlike network extensions.
Correct, though both layers remain active. The application-level firewall in the macOS GUI and the packet-based pf layer work on top of each other (I believe pf is on top of the application layer one but not 100% sure).

So if you have the application firewall on, opening ports in pf won't help.

I'm kinda surprised pf is still in there to be honest. I know some security solutions like McAfee Firewall use it under the hood. But they could do similar things with network extensions. I have expected them to drop it for years now.