Post

Replies

Boosts

Views

Activity

Reply to monterey pfctl issues
Has there been any update on this issue or do we know any workarounds? This issue is having a negative impact on Mac users of the sshuttle tool. See https://github.com/sshuttle/sshuttle/issues/752 This issue can be easily reproduced using the bellow commands: Setup the packet filter to forward packets destined to 10.1.0.1 to 127.0.0.1:12345 pfctl -ef - <<< ' rdr pass on lo0 inet proto tcp from ! 127.0.0.1 to 10.1.0.1/32 -> 127.0.0.1 port 12345 pass out route-to lo0 inet proto tcp to 10.1.0.1/32 keep state pass out inet proto tcp to 127.0.0.1/32 '' Start a netcat server on 127.0.0.1:12345 nc -l 12345 In a different session connect and transfer data (here 700KB) seq -w 6 1 100000 | nc 10.77.0.5 555 You'll see there's an initial burst of traffic and then traffic slows down to bursts of 1448 bytes every ~200ms Mac Version: 13.1
Jan ’23