#!/bin/bash
# 🔴 高風險防火牆關閉腳本
# 要求 sudo 權限，請在 Terminal 執行

echo "=== 高風險 App 防火牆關閉 ==="
echo ""

# SSH 遠端存取（3個）
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp /usr/libexec/sshd-session
echo "✅ sshd-session 已關閉"

sudo /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp /usr/libexec/sshd-auth
echo "✅ sshd-auth 已關閉"

sudo /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp /usr/libexec/sshd-keygen-wrapper
echo "✅ sshd-keygen-wrapper 已關閉"

# AnyDesk 遠端桌面
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp /Applications/AnyDesk.app
echo "✅ AnyDesk 已關閉"

# traceroute 網路診斷
sudo /usr/libexec/ApplicationFirewall/socketfilterfw --blockapp /usr/sbin/traceroute
echo "✅ traceroute 已關閉"

echo ""
echo "=== 共關閉 5 個高風險 App ==="
echo "Node (OpenClaw) 沒動，連線正常 ✅"
echo ""
echo "=== 額外建議（可選）==="
echo "RemoteMouse 和 Duet 舊版殘留，可一併清除："
echo "  sudo /usr/libexec/ApplicationFirewall/socketfilterfw --removeapp com.remotemouse.remotemouseserver"
echo "  sudo /usr/libexec/ApplicationFirewall/socketfilterfw --removeapp com.kairos.duetMac"