Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

  7. current community

    your communities

    more stack exchange communities

    company blog
Ask Different

Questions tagged [pfctl]

Ask Question

The tag has no usage guidance.

17 questions
Info Newest Frequent Votes Active Unanswered
1
vote
0answers
17 views

Charles Proxy -

I installed charles Proxy on my Mac. When I connect my other device / laptop, it was connecting, but none of the data was seen on Charles proxy. So I ran pfctl command: no nat on bridge100 inet ...
3
votes
1answer
46 views

pf redirect rules don't work logging

TL;DR: On Mojave (haven't tested on others), when creating rdr rules in pf, the rules work for a while (with some issues accessing the target port directly), but after a while the rules stop working, ...
1
vote
1answer
32 views

Where can i find the source code for the pfctl utility?

I have looked here: https://github.com/apple/darwin-xnu But all i can find is the 'back end' for the pfctl tool, but i am interested in the command-line pfctl tool itself, the option parser and so on....
0
votes
1answer
40 views

How to do IP masquerading on MacOS (10.14+)?

I am looking for the equivalent Macos command to the linux: sudo iptables -t nat -A POSTROUTING -o en0 -j MASQUERADE I notice there are some very very old solutions using the ancient ipfw firewall, ...
0
votes
1answer
44 views

How to route traffic out a non-standard interface using pfctl?

I have a VPN which has setup a default route, which is (of course) different to my gateway. All my traffic therefore gets routed through the tunnel. however i would like to exempt certain apps from ...
0
votes
2answers
90 views

PF Firewall : Every time I use `pfctl`, I get errors about ALTQ support

I have a slightly elaborate firewall setup where my server usually has between 400 and 800 ip addresses firewalled. It switches back and forth between two different pf tables. Every day it rebuilds ...
1
vote
1answer
95 views

Routing localhost traffic to external IP address

I have a host with Mac OS and another machine (192.168.100.50) in the same LAN. I would like to configure Mac OS in that way if I access localhost:443 it will redirect to 192.168.100.50:443. I'm able ...
2
votes
1answer
197 views

Redirect IP traffic with 'pfctl' on macOS

I'm working on a mac with OS 10.13.6. I want to redirect all requests to 10.20.154.24:1111 made from my computer go to localhost:8080. I read about pf and pfctl, but could not make this work. I ...
0
votes
0answers
152 views

`pf` - No ALTQ support in kernel - ALTQ related functions disabled

I'm using pf on my server, and it's working great. So much easier to use than ipfw (after some initial config confusion). But there is one thing that is driving me nuts.... I'm sure you probably ...
1
vote
0answers
196 views

use `pf` to allow TCP traffic on specific port (from specific subnet)

So, I've read various posts about how to use both the Application Firewall (apf or socketfilterfw) and the Packet Filter (pf) at the same time. I thought this would be straightfoward since I'm not a ...
2
votes
0answers
18 views

Getting notification when firewall settings have changed

I'm using packet filter engine to setup my Firewall connection. However, there might be other entities that may override my firewall settings on the same way (processes running with 'root' privileges ...
0
votes
0answers
85 views

Passing L2TP over IPSec VPN through a `pf` Firewall

I am trying to set up some custom firewall rules in the pf firewall in macOS (10.11 in this case). These are traditional network-based rules, not application-specific rules. I'm having some issues: ...
1
vote
1answer
438 views

Mapping port 80 to 8080 but maintain explicit 8080 access

I followed the instructions in this answer to map port 8080 to 80 on my mac. This works a treat, except for the fact that I can no-longer access http://localhost:8080 explicitly through Chrome (it ...
1
vote
1answer
255 views

Is the firewall really pfctl, or another instance of pfctl?

I was mucking around with pfctl a while back, didn't get very far and forgot about it. Yesterday, I couldn't ssh into a remote machine. I disabled the firewall in system preferences but still had the ...
2
votes
1answer
479 views

pfctl to add rules at runtime WITHOUT editing /etc/pf.conf?

I have an app that (while it is running and only while it is running) needs to make changes to the packet filter (pf) so that it blocks or allows certain traffic. These rules should be in addition to ...
4
votes
1answer
610 views

Redirect Local Port through bridge to Internet Shared static IP

I have my cable modem (10.0.0.1) to my iMac (10.0.0.36), and my iMac (10.0.0.36) with a (bridge100 192.168.2.1) Internet Shared IP to my debian machine (192.168.2.34), and all of that is working ...
6
votes
1answer
3k views

pfctl - howto add an anchor and make it active / load it

So i can add an anchor to the already enabled firewall by doing something like this: $ pfctl -a anchor_name -f /etc/anchor_rules.txt the file "anchor_rules.txt" might contain something like this: ...