Skip to content

Haydn Williams Blog

  • Outdoors
  • Photography
  • Travel
  • UK
  • Gigs

Mac firewall blocking SSH?

11th November 2010 Haydn Williams IT

SSH should be relatively easy to set up in OS X, consisting merely of ticking the box marked “Remote Login” in the “Sharing” pane of System Preferences.

Sorry about the wobbly blocking, but it's hard to use a trackpad on a train going full tilt.

Sorry about the wobbly blocking, but it's hard to use a trackpad on a train going full tilt.

That should enable you to log in from any computer on the local network, router considerations aside. I, however, found that I was struggling to connect from a different machine. After checking and double-checking everything, I finally stumbled across a post which suggested that the Mac firewall might be the problem. Sure enough, a quick check of the log showed that requests from the local machine (192.168.1.64) were being denied:

Mac Firewall denying requests from a local machine to connect over SSH.

Mac Firewall denying requests from a local machine to connect over SSH.

When you enable any kind of sharing, Mac OS automatically updates the firewall to let that traffic through. However, it seems that in some cases it doesn’t actually work! Even though “Remote Login (SSH)” was showing as allowed in my Firewall settings, I had to change the firewall to “Allow all incoming connections“, connect from the remote machine, and then set the firewall back to “Set access for specific services and applications“. This did the trick, and I found that everything then immediately worked as it should. That’s worth remembering.

Tags: FirewallMacOS XPort 22Remote LoginSecure ShellSharingSSH

  • Next Seagrave Wolds Challenge 2010
  • Previous MPS Snowdonia

3 Responses

  • Comments2
  • Pingbacks0
  1. hutch says:
    14th July 2012 at 11:06

    You are a scholar and a gentleman. Thank you!

  2. nimdanitro says:
    4th October 2012 at 09:26

    Its not enough to have Remote Login(SSH) to allow incoming connections in the firewall control panel. You have to make sure that also the process “sshd-keygen-wrapper” is set to allow incoming connections!

    Never leave your firewall to Allow all incoming connections!

Working with PDFs in OS X
IT

Working with PDFs in OS X

  • 29th April 2009
PS CS3 on a Case-sensitive Mac
IT Photography

PS CS3 on a Case-sensitive Mac

  • 18th February 2008
Connect to your Mac from an iPhone
IT

Connect to your Mac from an iPhone

  • 19th November 2010
Upgrading PHP with Homebrew
IT

Upgrading PHP with Homebrew

  • 15th September 2013

© Haydn Williams 2014-2025