I want to share my VPN connection over wifi using Internet Sharing, but something doesn't work.

My current setup is:

  • Macbook Pro: macOS Mojave 10.14.6
  • VPN client: CheckPoint Endpoint Security for Mac

enter image description here

I've tried the steps described here but something doesn't work.

Some of the NAT rules that I've tried:

nat on utun1 from bridge100:network to any -> (utun1)

nat on utun1 from to any -> (utun1)

nat on en6 from to any -> (en6)
nat on utun1 from to any -> (utun1)

#and many more...

My script looks like this:

sysctl -w net.inet.ip.forwarding=1
sysctl -w net.inet.ip.fw.enable=1
sysctl -w net.inet6.ip6.forwarding=1

#disables pfctl
pfctl -d
sleep 1

#flushes all pfctl rules
pfctl -F all
sleep 1

#starts pfctl and loads the rules from the nat-rules file
pfctl -f ./nat-rules -e

The Internet Sharing works without VPN enabled, but after I enable it, I get Connected, no internet....

Is something wrong with my NAT rule or is the VPN, being through CheckPoint Endpoint Security?

  • There appears to be something broken with DNS. I have a similar experience, except that I can connect, I just cannot look up sites. If I manually change the DNS server in the device sharing the connection (iPhone), I can reach sites. However, I cannot get the iPhone to use the DNS server that the Mac uses after starting CheckPoint VPN. apple.stackexchange.com/questions/125372/… has some info about DNS issues, but seems to merely explain what you and I are seeing, i.e. VPN is breaking the Mac DNS lookup. – Matt Nov 5 '20 at 4:43
  • In other words, I cannot reach sites via the VPN, which is the whole point of using Internet Sharing with the VPN. – Matt Nov 5 '20 at 4:46

You must log in to answer this question.

Browse other questions tagged .