Deprecated “natd” and “ipfw” in Yosemite – Can someone help

ada-lovelace

Deprecated “natd” and “ipfw” in Yosemite – Can someone help with the workaround pleas
Hi guys,

Tunnelblick/OpenVpn doesn’t play nice with internet connection sharing in mac osx. There was a suggestion on a workaround on how to route all traffic over VPN as per this post:

[broken link]

The script is:

#!/bin/sh

natd -interface tun0
ipfw -f flush
ipfw add divert natd ip from any to any via tun0
ipfw add pass all from any to any
sysctl -w net.inet.ip.forwarding=1

I am not a linux expert – So I am just wondering if anyone can help me with the alternative for the above deprecated commands please?

Many thanks in advance.
ada-lovelace is online now 0 Reply With Quote

jasjeet

Did anyone figure this out?

In my setup, i have OS X doing DHCP for clients. Clients receive the OS X machine IP as their Gateway and DNS servers.
I have my Yosemite machine able to forward packets with Tunnelblick disabled. So all clients get an address and their packets are sent through the OS X machine.

But as soon as i enable Tunnelblick VPN, only OS X can access the internet, all the clients lose their connection to the internet.

I think this is some sort of NAT issue, but i don't know how to fix this =(

Closest I've seen to a solution is this
http://serverfault.com/questions/555594/troubleshoot-broken-tcp-from-openvpn-client-to-server-but-ping-traceroute-work