Ok, I need to clarify, I had macOS in mind and this note in the mitmproxy documentation: > Note that the rdr rules in the pf.conf given above > only apply

Ok, I need to clarify, I had macOS in mind and this note in the mitmproxy documentation: > Note that the rdr rules in the pf.conf given above > only apply to inbound traffic. This means that > they will NOT redirect traffic coming from the box > running pf itself. We can’t distinguish between an > outbound connection from a non-mitmproxy app, and > an outbound connection from mitmproxy itself - if > you want to intercept your OSX traffic, you should > use an external host to run mitmproxy. Nonetheless, > pf is flexible to cater for a range of creative > possibilities, like intercepting traffic emanating > from VMs. See the pf.conf man page for more. That's for transparent mode only though, maybe that had me confused.