Your best friend for file transfer.

Fetch application logoFetch
Fetch Icon Fetch Help > Using Fetch > Allowing Fetch to work with the Mac OS X firewall

If you are having trouble connecting to a server, one of the possible reasons is that it requires active FTP connections, and you have the Mac OS X firewall enabled. Active FTP connections cannot work successfully with any firewall. For more information about active and passive mode connections, see the active and passive FTP help topic.

It is possible to tell the Mac OS X firewall to allow an exception for Fetch while continuing to shield your computer from other network communications.

Note that you do not usually need to change your firewall settings in order for Fetch to work successfully. If you are experiencing problems connecting with a server, you should first check for other, more common causes, such as:

  • Verify that you have the correct hostname, username, and password.
  • Verify that the server is running.
  • Make sure you are trying passive FTP connections first, which are more compatible with firewalls than active FTP connections. Choose to Fetch > Preferences, click the General tab, and make sure the Use passive mode transfers (PASV) checkbox is checked.

If none of these help, then you should see if your Mac OS X firewall could be causing the problem. If your Mac OS X firewall is not turned on, it is not the cause of the problem, and changing its settings will not help.

Configuring the Mac OS X firewall is slightly different on different versions of Mac OS X. Follow the appropriate directions below, depending on which version of Mac OS X you are using.

Mac OS X 10.6 and later

  1. Go to the Apple menu, and choose System Preferences.
  2. On Mac OS X 10.7 and later: Click the Security & Privacy icon (or choose View > Security & Privacy). On Mac OS X 10.6: Click the Security icon (or choose View > Security).
  3. Click the Firewall tab.
  4. If it states Firewall: Off, stop here. Your Mac OS X firewall is not enabled. You should contact the server administrator (the person or people who maintain the server you are trying to connect to) for further advice.

If your firewall is enabled, continue:

  1. Click the Advanced… button. (You may need to first click the lock icon in the lower left of the window and enter your Mac OS X password to make this change.)
  2. If the Block all incoming connections box is checked, uncheck it.
  3. Click the Add (+) button (beneath the list of applications).
  4. A dialog to select an application appears. Find the Fetch application (usually located in your Applications folder), and click Add.
  5. The Fetch icon should now be listed in the Firewall preferences window, saying "Allow incoming connections."
  6. Click OK and close the Firewall System Preferences window.

Mac OS X 10.5

  1. Go to the Apple menu, and choose System Preferences.
  2. Click the Security icon (or choose View > Security).
  3. Click the Firewall tab.
  4. If the Allow all incoming connections button is selected, stop here. Your Mac OS X firewall is not enabled. You should contact the server administrator (the person or people who maintain the server you are trying to connect to) for further advice.

If your firewall is enabled, continue:

  1. Click the Set access for specific services and applications button.
  2. Click the Add (+) button (beneath the large white rectangle).
  3. A dialog to select an application appears. Find the Fetch application (usually located in your Applications folder), and click Add.
  4. The Fetch icon should now be listed in the Firewall preferences window, saying "Allow incoming connections."
  5. Close the Firewall System Preferences window.

From now on, the Mac OS X firewall will allow active FTP connections made by Fetch to succeed.

Note that if there is a firewall elsewhere on your network - for instance, one installed by your company to protect all the computers in your office, or one on your router - changing the settings of the Mac OS X firewall will not help. You will need to talk to your company's network administrator, or consult your router's manual instead.

Related topics: