{
  system.defaults.alf = {
    allowdownloadsignedenabled = 0;
    allowsignedenabled = 1;
    globalstate = 0;
    loggingenabled = 0;

    # Apple menu > System Preferences > Security and firewall
    # Drops incoming requests via ICMP such as ping requests. Default is 0.
    stealthenabled = 1;
  };
}
