#!/bin/bash
set -euo pipefail
echo "🛡️ macOS Application Firewall status:"
STATE=$(defaults read /Library/Preferences/com.apple.alf globalstate 2>/dev/null || echo 0)
case "$STATE" in
  0) echo "OFF (0)";;
  1) echo "ON (1) – Block all incoming OFF";;
  2) echo "ON (2) – Block all incoming ON";;
  *) echo "Unknown: $STATE";;
esac
echo "✅ Done."