OSX Lion Firewall Problems

[junomat]

When I turn the Lion firewall off, everything works great!

When I turn it on, then load the Subsonic software I get the "Do you want the application Subsonic.app to accept incoming network connection" I click Allow.

However it won't ever connect on iSub in my iPhone this way.

But when I turn off the firewall again, it works fine in iSub.

Any ideas on a workaround?

Thanks!

[FoxBJK]

I'm also having this problem and would rather not disable my Firewall, is there anything we can do to fix this?

[FoxBJK]

Hopefully this log entry from my firewall sheds some light on the issue. Is this the same Java stub that Subsonic uses?

Jun 29 20:55:21 zoidberg Firewall[76]: Deny JavaApplicationS connecting from 10.70.4.33:54643 to port 4040 proto=6
Jun 29 20:55:21 zoidberg Firewall[76]: Deny JavaApplicationS connecting from 10.70.4.33:54644 to port 4040 proto=6
Jun 29 20:55:37 zoidberg Firewall[76]: Deny JavaApplicationS connecting from 10.70.4.33:54643 to port 4040 proto=6
Jun 29 20:55:38 zoidberg Firewall[76]: Deny JavaApplicationS connecting from 10.70.4.33:54644 to port 4040 proto=6
Jun 29 20:56:10 zoidberg Firewall[76]: Deny JavaApplicationS connecting from 10.70.4.33:54644 to port 4040 proto=6
Jun 29 20:56:10 zoidberg Firewall[76]: Deny JavaApplicationS connecting from 10.70.4.33:54643 to port 4040 proto=6
Jun 29 20:56:17 zoidberg Firewall[76]: Deny JavaApplicationS connecting from 10.70.4.33:54659 to port 4040 proto=6

[FoxBJK]

I found a way around this issue, though I'm not really sure how it works or the implications of it:

1) Quit Subsonic if it's open
2) Shut off the firewall
3) Open Subsonic
4) Turn on the firewall

[jamdox]

Hey just posting the solution to this problem!

Whoever's compiling Subsonic Mac isn't signing their code properly (or something) which causes problems with firewall.

To fix it, open terminal and type the following:

Code: Select all

cd /Applications
sudo codesign -s - Subsonic.app -fv


Then remove subsonic from the firewall list, turn firewall off, turn it back on, and add it again. I'm not sure if this last part is necessary, but it can't hurt

[jaymacke]

Well, I tried that, and it still didn't work. I've tried several different options, including disabling the mac firewall and using a different one. Is anyone else using this behind a NAT?

[jamdox]

What version of OSX are you running? My directions were for 10.7, so 10.8 might be different. I'd read through the codesign man page and see what it says?

[FoxBJK]

The man page that Apple has for codesign doesn't have a 10.8 section. So, if I had to guess, I'd say the app remained unchanged between 10.7 and 10.8 (https://developer.apple.com/library/mac/#documentation/Darwin/Reference/ManPages/man1/codesign.1.html). However, I'm more worried about the "code isn't signed properly" line posted above. Something for the developer to fix, or is this something we'll have to do with each release?

[FoxBJK]

UPDATE - not sure if it's because of an OS X update, Java update, the SS update to 4.7, or some combination of these, but I can no longer replicate the issue