Firewall State 2 about m-cli HOT 6 CLOSED

Hey, thanks for filing this issue. I'm not familiar with firewall states, and a cursory investigation reveals that /usr/libexec/ApplicationFirewall/socketfilterfw (what this command uses under the hood) doesn't have an obvious way to set state 2 on. I did notice that if I set block all, then turn it off and on from the commandline, it maintained the setting in Settings.

Do you see the same thing?

from m-cli.

I do not see the same thing.

This is before I disable and re-enable with m:

Then I disable and re-enable with m, using the following command:

m firewall disable && m firewall enable

After I quit out of System Preferences (it doesn't seem to refresh the settings in realtime in System Preferences if you disable/enable with m) and open the firewall tab back up in Security & Privacy, these are my settings:

from m-cli.

So I looked at the command you mentioned and found that I can set State 2 with the following command:

sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setblockall on

You can see what happens when I disable the firewall with m, re-enable the firewall, and then issue that command:

$ m firewall status
Firewall is enabled. (State = 2)

$ m firewall disable
Firewall is disabled. (State = 0)

$ m firewall enable
Firewall is enabled. (State = 1)

$ m firewall status
Firewall is enabled. (State = 1)

$ sudo /usr/libexec/ApplicationFirewall/socketfilterfw --setblockall on
Firewall is set to block all non-essential incoming connections

$ m firewall status
Firewall is enabled. (State = 2)

from m-cli.

Ah well researched! If you feel up to it, feel free to open a PR. Otherwise I'll have a look at the end of the week.

from m-cli.

Done!

#161

from m-cli.

Merged #161 , so I'll close this

from m-cli.