I basically only want web traffic be to routed through the connected VPN that originates from Chrome and Safari and the rest of my computer to access the internet as if the VPN were not connected. I am using a VPN set up in the network settings of OSX.


1 Answer 1


you can force ALL http (or any other) traffic to go through other than default interface, but you will need to configure pf (packet filter) to do "policy based" routing. ie:

printf "pass in route-to (vpn_interface vpn_gateway_addr) proto tcp from any to any port 80\n" | pfctl -gf-

this command will force to route all http (port 80) traffic to go through

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.