4 ms·
The first firewall to do this should definitely lead with that in the headline.
by joshspankit 6y ago
The first firewall to do this should definitely lead with that in the headline.
- joshspankit 6y agoDownvote? I'm confused. This whole "Apple gets to bypass firewalls" thing is IMO a huge deal. Whoever figures out how to make a system-wide firewall that can block everything including "unblockable" Apple network traffic likely deserves (again: IMO) all the attention we can give them.
- _rend 6y agoThis already exists. Apple processes can bypass app-specific filters (NEFilterDataProvider), but not system-wide firewalls (like the built-in BPF), VPN configurations, etc.
- m463 6y agoI thought they DID bypass vpn connections. Also, apple will routinely clear your pf rules when installing stuff.
- _rend 6y agoNo, they only avoid being filtered by per-process filters. They can't bypass packet filters, by design; system-wide VPN connections work the same way, and cannot be bypassed.
- joshspankit 6y agoI’m marking this to remind myself to update my research. If anyone has references they are appreciated.