We have discovered that macOS may leak traffic after system updates. A reboot seems to resolve this issue. We are investigating further and will provide updates as we learn more.
The Current State
The macOS firewall appears to malfunction, ignoring firewall rules. Most traffic is routed through the VPN tunnel, but some apps, including Apple’s own apps and services, can bypass this and send traffic outside the tunnel. This issue has been observed since macOS 14.6, continuing through the recent 15.1 beta.
Image Description: A visual representation of macOS firewall settings with potential vulnerabilities.
What’s Next?
We’ve reported the issue to Apple and hope for a fix soon. Meanwhile, we continue to investigate and explore potential workarounds.
Check if You Are Affected
To determine if you are affected, follow these steps:
- Add a firewall rule to block all traffic.
- Attempt to send traffic outside the tunnel.
To clear the setup, disable the firewall and remove all rules. To check if our app is leaking: - Disconnect from any VPN.
- Identify the default interface using terminal commands.
- Connect to a VPN server using our app.
Run a command to test the connection (replace “<interface>” with the identified interface).
If the request times out, your setup is secure. A response indicates a leak.
- Image Description: A user checking VPN connection status on macOS.
For more on effective remote work practices, explore ways to replicate the office in a remote work setting.
Key Ideas for Your Startup
- Stay Informed on Security Updates: Regularly update and patch your systems to prevent data leaks and maintain integrity.
- Implement Additional Security Measures: Consider third-party security solutions for added protection beyond macOS's built-in firewall.
- Educate Your Team: Train your team to recognize vulnerabilities and respond swiftly to potential breaches.
For startups looking to enhance productivity, Edworking offers a comprehensive suite of tools, including task management, chat, video calls, and file management, all in one place. Discover how task automation can streamline your workflow.
For more details, see the original source.
