Without using ipfw. I wanted to have Personal Web Sharing on, but block access to it on the firewall. When I tried to change it in the Firewall tab in System Preferences I got a sheet saying, “You cannot change the firewall settings for this service.” So I went off and found that the settings are stored in
Once I opened it I discovered I could change the ‘editable’ value:
<key>Personal Web Sharing</key>
I set it to 1, saved it, and re-opened System Preferences Firewall Tab. I could now disable access to port 80 through the firewall, while leaving me free to continue fiddling with my internal website.