这个是从其它网站复制的，打开Mac OS X 10.4, 10.5, 10.6内置的防火墙。

!/bin/sh# enable_firewall.sh## Patrick Gallagher# http://macadmincorner.com # Stealth Mode - Set to 0 to disable# Stealth mode prevents machine from responding to ping requestst# Be aware that this would prevent tools such as ARD from discovering# the machine, though bonjour on the same subnet will still work osversionlong=sw_vers -productVersionosvers=${osversionlong:3:1} # Check if this is being run by rootif [ "$(whoami)" != "root" ] ; then echo "Must be root to run this command." >&2 exit 1fi # Enable firewall for Tigerif [ $osvers -eq 4 ]; then echo "Setting firewall on a ${osversionlong} machine" /usr/bin/defaults write /Library/Preferences/com.apple.sharing.firewall state -bool YES # UDP, change to 0 to disable /usr/bin/defaults write /Library/Preferences/com.apple.sharing.firewall udpenabled -int 1 # Stealth, change to 0 to disable /usr/bin/defaults write /Library/Preferences/com.apple.sharing.firewall stealthenabled -int 1 /usr/libexec/FirewallToolfi # Enable firewall for Leopard or Snow Leopardif [ $osvers -ge 5 ]; then echo "Setting firewall on a ${osversionlong} machine" # Globalstate - Set to 0 for off, 1 for on, 2 for "Block all incoming access" /usr/bin/defaults write /Library/Preferences/com.apple.alf globalstate -int 1 /usr/bin/defaults write /Library/Preferences/com.apple.alf stealthenabled -int 1fi