Enable macOS firewall stealth mode to ignore ping requests

Turn on the macOS firewall and enable stealth mode if you do not need your Mac to answer network discovery probes. According to Apple, stealth mode prevents responses to ping requests and to connection attempts against closed TCP or UDP ports.

This makes simple network discovery more difficult, but it does not make the Mac invisible and does not block connections that the firewall already allows.

How to fix it

Current macOS versions

  1. Choose Apple menu > System Settings.
  2. Open Network > Firewall. You may need to scroll down.
  3. If the firewall is off, turn it on first.
  4. Click Options.
  5. Turn on Enable stealth mode, then click OK.
macOS firewall options with Enable stealth mode turned on

macOS 10.11–12

  1. Choose Apple menu > System Preferences > Security & Privacy > Firewall.
  2. Click the lock and authenticate if macOS asks you to make changes.
  3. Click Firewall Options or Advanced.
  4. Select Enable stealth mode, then confirm the dialog.
Legacy macOS firewall options with Enable stealth mode selected

What stealth mode does not do

  • It does not replace the macOS application firewall, router firewall, software updates, or secure service configuration.
  • It does not hide the Mac’s IP address or prevent all network traffic.
  • It can make legitimate ping-based troubleshooting and monitoring fail. If your organization relies on those checks, confirm the requirement before enabling it.

For the related prerequisite, see Turn on the macOS firewall.

Apple sources

You might also be interested in

Check your security settings

SimpleumCheck Screenshot

SimpleumCheck checks the security settings on your Mac in three stages and gives you recommendations on how you can improve your security even further.

For Free

Protect and encrypt your data

SimpleumSafe Screenshot


Protect your data with SimpleumSafe App for Mac, iPhone and iPad. Don’t compromise when it comes to protecting your data.

Other security setting to check

PLEASE READ THE FOLLOWING TIP AND DISCLAIMER!

Keep in mind: not every security and privacy setting is suitable for everyone. Enhancing the security can lead in losing functionality and/or comfort.
Before making changes, please backup your Mac! Do not make too many change at once. After changing your Mac, check if your normal usage of your Mac has changed in a way which fits to you. Are your really willing to loose some functionality and/or comfort?
Most important is, that you learn and understand what are the advantages and disadvantages of the security settings and that you are aware about the capabilities and risks of your Mac configuration.

To skip this result message from your next security scan, you can deactivate this check. FAQ: How to deactivate a check.

CHECK RESULTS BY SIMPLEUMCHECK DO NOT COVER ALL ASPECTS OF POSSIBLE SECURITY CHECKS OR MAYBE INCORRECT OR INCOMPLETE. THE RESULTS ARE ONLY CLUES FOR RECOMMENDATIONS TO IMPROVE SECURITY AND PRIVACY ON THE MAC.

The use of SimpleumCheck, the checks and FAQ articles are provided under the SimpleumCheck End User License Agreement (EULA).