Skip to content

Instantly share code, notes, and snippets.

@vitaly
Created November 30, 2016 14:20
Show Gist options
  • Save vitaly/10b9f4cd467370c226daf78424f02816 to your computer and use it in GitHub Desktop.
Save vitaly/10b9f4cd467370c226daf78424f02816 to your computer and use it in GitHub Desktop.
PF state w/o corectld
r scrub-anchor "com.apple/*" all fragment reassemble
r anchor "com.apple/*" all
n nat-anchor "com.apple/*" all
n nat-anchor "custom" all
n rdr-anchor "com.apple/*" all
n rdr-anchor "custom" all
A com.apple
A com.apple.internet-sharing
A corectl-dns-forwarding
A custom
com.apple r anchor "200.AirDrop/*" all
com.apple r anchor "250.ApplicationFirewall/*" all
com.apple A com.apple/200.AirDrop
com.apple A com.apple/250.ApplicationFirewall
com.apple/200.AirDrop A com.apple/200.AirDrop/Bonjour
com.apple/200.AirDrop/Bonjour r pass in on p2p0 inet6 proto udp from any to any port = 5353 keep state
com.apple/200.AirDrop/Bonjour r pass out on p2p0 proto tcp all flags any keep state
com.apple.internet-sharing n nat-anchor "shared_v4" all
com.apple.internet-sharing n rdr-anchor "shared_v4" all
com.apple.internet-sharing A com.apple.internet-sharing/shared_v4
com.apple.internet-sharing/shared_v4 n nat on en0 inet from 192.168.64.0/24 to any -> (en0:0) extfilter ei
com.apple.internet-sharing/shared_v4 n no nat on bridge100 inet from 192.168.64.1 to 192.168.64.0/24
corectl-dns-forwarding n rdr pass on bridge100 inet proto tcp from any to any port = 53 -> 192.168.64.1 port 15353
corectl-dns-forwarding n rdr pass on bridge100 inet proto udp from any to any port = 53 -> 192.168.64.1 port 15353
custom n rdr pass inet proto tcp from any to 127.0.0.1 port = 80 -> 127.0.0.1 port 12439
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment