{"issue":{"milestone":{"title":"1.1.5","open_issues":2,"created_at":"2011-12-30T03:31:01Z","creator":{"login":"dustinrue","id":573953,"url":"https://api.github.com/users/dustinrue","avatar_url":"https://secure.gravatar.com/avatar/c12c847fe5044e06e62e59aa1878bac6?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"c12c847fe5044e06e62e59aa1878bac6"},"state":"open","due_on":null,"closed_issues":1,"number":19,"description":"Issues blocking the release of 1.1.5","url":"https://api.github.com/repos/dustinrue/ControlPlane/milestones/19"},"title":"Toggle FireWall Stealth Mode","created_at":"2011-12-28T14:32:20Z","user":{"login":"johandy","id":1290486,"url":"https://api.github.com/users/johandy","avatar_url":"https://secure.gravatar.com/avatar/e4844407ccbba92193ef674e3860e539?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"e4844407ccbba92193ef674e3860e539"},"labels":[{"name":"Action","url":"https://api.github.com/repos/dustinrue/ControlPlane/labels/Action","color":"0b02e1"},{"name":"Feature Request","url":"https://api.github.com/repos/dustinrue/ControlPlane/labels/Feature+Request","color":"02e10c"},{"name":"Rejected","url":"https://api.github.com/repos/dustinrue/ControlPlane/labels/Rejected","color":"e10c02"}],"updated_at":"2011-12-30T15:59:55Z","state":"closed","id":2671572,"closed_at":"2011-12-30T03:46:23Z","html_url":"https://github.com/dustinrue/ControlPlane/issues/107","pull_request":{"patch_url":null,"html_url":null,"diff_url":null},"body":"It would be great if we could activate/deactivate other sharing options (besides Internet Sharing), like File Sharing, which IMO is the most urgent one. Also, you can't activate/deactivate Stealth Mode without also activating/deactivating Firewall. \r\n\r\nI would like CP to activate File Sharing and deactivate Stealth Mode (but still leave Firewall enabled) when I'm at home and vice-versa when I leave my more or less secure home network . I'm sure I'm not the only one who would benefit from this feature.\r\n\r\nI brought it up in the CP's google group discussion as well: \r\nhttp://groups.google.com/group/controlplane-support/browse_thread/thread/ebc4f5fc4318ae4d","number":107,"url":"https://api.github.com/repos/dustinrue/ControlPlane/issues/107","comments":9,"assignee":{"login":"dustinrue","id":573953,"url":"https://api.github.com/users/dustinrue","avatar_url":"https://secure.gravatar.com/avatar/c12c847fe5044e06e62e59aa1878bac6?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"c12c847fe5044e06e62e59aa1878bac6"}},"comment":{"created_at":"2011-12-30T15:59:55Z","user":{"login":"dustinrue","id":573953,"url":"https://api.github.com/users/dustinrue","avatar_url":"https://secure.gravatar.com/avatar/c12c847fe5044e06e62e59aa1878bac6?d=https://a248.e.akamai.net/assets.github.com%2Fimages%2Fgravatars%2Fgravatar-140.png","gravatar_id":"c12c847fe5044e06e62e59aa1878bac6"},"updated_at":"2011-12-30T15:59:55Z","id":3314328,"body":"I don't understand the part where you want to enable/disable stealth mode.  Under what circumstances would you want to have the firewall enabled but not stealth mode?  Keep in mind that, if you have the 'Automatically allow signed software to receive incoming connections' option checked then OS X will automatically open up ports for file sharing if file sharing is turned on, regardless of the stealth mode setting.  See attached screenshot.\r\n\r\nThe interface says Stealth mode affects how the system responds to pings, but I imagine it goes a step further and causes the system to not respond for closed ports.  There are two ways a system will behave if someone hits a port that is blocked by the firewall.  It can either issue an ICMP port unreachable or it can simply drop the request.  ICMP port unreachable would tell the remote host (or bad guy) that a machine does exist at that IP.  Dropping the packet all together makes it appear that the IP is a blackhole.  This actually doesn't work that well in practice because it is quite easy to find an IP that doesn't exist vs an IP that exists but isn't responding.  In short, stealth mode provides a false sense of security.\r\n\r\nAnyway, I like the idea of enabling and disabling more of the sharing services in System Preferences and honestly I'm not sure why I haven't implemented those already.  I'm going to move ahead with doing that, but I'm going to avoid toggling specific firewall options because I think it is beyond the scope of ControlPlane.  If I start down the path of doing specific firewall options I'm going to get people who want to be able to do custom rules, and I'm really not interested in doing that at all.\r\n\r\nThanks,\r\nOn Dec 30, 2011, at 9:34 AM, johandy wrote:\r\n\r\n> I always want my firewall enabled even when I'm on my home network. I want stealth mode enabled when I'm not home, on a public network somewhere, on the other hand, when I'm at home I want stealth mode disabled to be able to share files with my family etc. At the moment you can only toggle stealth mode by toggling firewall, but that doesn't satisfy people like me who want firewall always enabled. The sharing services are probably more important right now, but I can definitely see why people would like to see this in the future. Also I don't know anything about scripting, how much work this would take etc.\r\n> \r\n> --- \r\n> Reply to this email directly or view it on GitHub:\r\n> https://github.com/dustinrue/ControlPlane/issues/107#issuecomment-3314071","url":"https://api.github.com/repos/dustinrue/ControlPlane/issues/comments/3314328"},"action":"created"}