Redirection of pfctl on OSX gets error

mac-osxpfport-forwardingredirect

I want all my traffics are redirected to SOCKS proxy on 127.0.0.1:1080. I added the rule below to the end of /etc/pf.conf according to this tutorial:

pass on en3 proto tcp from any to any rdr-to 127.0.0.1 port 1080

When I load this configuration file, error is reported:

pfctl: Syntax error in config file: pf rules not loaded

My operating system is OSX 10.11 El captain. Where am I wrong?

Best Answer

My operating system is OSX 10.11 El captain. Where am I wrong?

— In expectance that this syntax should work.

Pf's version ported to MacOS from its first emerging till to Mojave (including) is kept frozen, Apple®'s doesn't update it. Still man pf.conf has proper examples of rdr rules.

Related Solutions

Iptables – http request via iptables –to-destination ip redirect results in no response

It sounds like you could have a routing problem. Check using tcpdump on both servers and pointing tcpdump with the -i option to the correct ethX device to check if packets are being sent through the right network device on server1 and these packets also arrive at server2.

tcpdump -i ethX host 1.1.1.1 and port 80

Could it be that the packets arrive at server2 but server2 doesn't know where to send the replies to? Does server2 have a correct default gateway configured?

Check it with

route -n

Firewall – How to filter TCP packets based on flags using Packet Filter

This means that you're looking at two flags S & A but you match if and only if S is "on" AND A is "off".

flags S/SA

 ---------------
| S | A | Match |
 ---|---|-------
| 0 | 0 | No    |
| 0 | 1 | No    |
| 1 | 0 | Yes   |
| 1 | 1 | No    |
 ---------------

If you want to match when both SA flags are "on", you'll use flags SA/SA.

flags SA/SA

 ---------------
| S | A | Match |
 ---|---|-------
| 0 | 0 | No    |
| 0 | 1 | No    |
| 1 | 0 | No    |
| 1 | 1 | Yes   |
 ---------------

Best Answer

Related Solutions

Iptables – http request via iptables –to-destination ip redirect results in no response

Firewall – How to filter TCP packets based on flags using Packet Filter

Related Topic