OS X 10.10 Support

[jd.ang...@gmail.com]

Hello,

If I'm not mistaken, neither iptables nor ipfw is included in OS X 10.10 "Yosemite."  I'm on the beta currently and sshuttle is clearly broken.  Are there any plans to support future OS versions?  Anything I can do currently to get sshuttle up and running?  

Apologies for the fairly vague question.

Best,

JDA

[Avery Pennarun]

I don't know how 10.10 works and I'm unlikely to get it until some
time after the final release, as I tend to avoid betas.

The "right" answer is probably to switch from ipfw to pf.

The actual firewalling code in sshuttle is pretty small, so if you (or
someone reading this) are familiar with pf, maybe you can try hacking
it up and submitting a patch. ipfw has been half-broken in MacOS X
for several releases now so it would probably be an overall net
benefit.

> --
> You received this message because you are subscribed to the Google Groups
> "sshuttle" group.
> To unsubscribe from this group and stop receiving emails from it, send an
> email to sshuttle+u...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

[abdussel...@gmail.com]

Since 10.10 officially released, any plans on implementing the change to pf ?

[dr...@drewworthey.com]

I've started working on this a little bit. Will have more updates soon.

[and...@andrewwade.co.uk]

Hey,

I too am interested in getting sshuttle working with pf(ctl). I know Python but not so much about OS X systems programming nor PF.

What's the best way to move forward (collaboratively)? Is this the best place to track progress or could we open a ticket/issue somewhere?

Regards.

[Drew Worthey]

Let's move the conversation to my fork: https://github.com/zabracks/sshuttle

I set up an issues board for the repo there and committed the little I've been able to work on. I'm in the same boat as you -- know python, but have to do my reading on pf.

[msm...@instructure.com]

FWIW 

http://stackoverflow.com/questions/25873329/using-packetfilter-to-transparently-proxy-packets-in-os-x

If someone can solve this I think we can get sshuttle working.