4 ms·
Downvote? I'm confused. This whole "Apple gets to bypass firewalls" thing is IMO a huge deal. Whoever figures out how to make a system-wide firewall that can b
by joshspankit 6y ago
Downvote? I'm confused. This whole "Apple gets to bypass firewalls" thing is IMO a huge deal.
Whoever figures out how to make a system-wide firewall that can block everything including "unblockable" Apple network traffic likely deserves (again: IMO) all the attention we can give them.
- _rend 6y agoThis already exists. Apple processes can bypass app-specific filters (NEFilterDataProvider), but not system-wide firewalls (like the built-in BPF), VPN configurations, etc.
- m463 6y agoI thought they DID bypass vpn connections. Also, apple will routinely clear your pf rules when installing stuff.
- _rend 6y agoNo, they only avoid being filtered by per-process filters. They can't bypass packet filters, by design; system-wide VPN connections work the same way, and cannot be bypassed.
- joshspankit 6y agoI’m marking this to remind myself to update my research. If anyone has references they are appreciated.