The Inbound Connection Vector
When you connect a MacBook to a public Wi-Fi network at a coffee shop or airport, your machine is suddenly sharing a local network with dozens of unknown, potentially hostile devices. By default, macOS relies heavily on its internal application sandboxing for security, but the native Application Firewall—which acts as a strict border guard blocking unsolicited incoming network connections—is frequently disabled out of the box to ensure seamless file sharing on home networks.
How to Turn On the Mac Firewall
If you travel frequently or use untrusted networks, activating this firewall is an absolute necessity to prevent unauthorized local probing of your system.
1. Click the Apple Logo in the top-left corner of the screen.
2. Select System Settings from the dropdown menu.
3. In the left-hand sidebar, scroll down and click on Network.
4. In the main pane, locate the Firewall section and click on it.
5. Look for the master toggle switch labelled Firewall.
6. Click the toggle to switch it to the On position (it will turn green).
7. To maximize security, click the Options… button below the toggle.
8. In the new window, toggle Block all incoming connections to the On position. This is the strictest setting, ensuring that only core system services can receive data, completely shutting down any potential local network vulnerabilities.
Your Mac is now significantly hardened against local network snooping. If you return to a trusted home network and need to use AirDrop or screen sharing, you must temporarily disable the “Block all incoming connections” option.