On OS X as noted here:
http://matt.ucc.asn.au/apple/
Setting security-mode to anything other than 'none' puts the firewire controller into secure mode, disabling Firewire DMA. This is effective even without setting a firmware password:
nvram security-mode=NONE