Prevent outgoing traffic unless OpenVPN connection is active using pf.conf on Mac OS

i've been able deny connections external networks unless openvpn connection active using pf.conf

etc/pf.conf in end add

quote

#
# allow connection via viscosity only
#
wifi=en1 #change en0 on macbook airs , other macs without ethernet ports
vpn=tun0
vpn2=tap0

block all

set skip on lo # allow local traffic

pass on p2p0 #allow airdrop
pass on p2p1 #allow airdrop
pass on p2p2 #allow airdrop
pass quick proto tcp port 631 #allow airprint

pass on $wifi proto udp # allow udp packets on unprotected wi-fi
pass on $vpn # allow else through vpn (tun interface)
pass on $vpn2 # allow else through vpn (tap interface)

click expand...

enable packet filter service sudo pfctl -e , load new rules sudo pfctl -f /etc/pf.conf

works great, but, can't connect internet via vpn
have no connection internet(
os - mac os x 10.9.4

p.s. think problem in last 2

quote

pass on $vpn # allow else through vpn (tun interface)
pass on $vpn2 # allow else through vpn (tap interface)

click expand...

because

quote

pass on $wifi proto udp # allow udp packets on unprotected wi-fi

click expand...

works great, clock updated time automatic

can me that?

 

anybody know?

 

Forums Macs Mac Basics and Help

• iPhone
• Mac OS & System Software
• iPad
• Apple Watch
• Notebooks
• iTunes
• Apple ID
• iCloud
• Desktop Computers
• Apple Music
• Professional Applications
• iPod
• iWork
• Apple TV
• iLife
• Wireless