Karl,

A kernel extension that uses sflt_register to register a socket filter that has the socket filter’s sf_data_in callback set usually works fine. But on OS X Yosemite, as soon as an IPSec VPN connection is established (using OS X’s built–in client configured via System Preferences > Network), data transmitted via the VPN does not cause that sf_data_in function to be called on OS X Yosemite. This problem applies to incoming packages of any protocol: TCP, UDP, ICMP, …

Everything works fine on OS X Mavericks and earlier, but OS X Yosemite has that problem. Has anybody else encountered this problem and is there any known workaround?

I can’t specifically answer but 10.10 has several bugs related to VPN. For example, it is impossible to open a PPTP VPN if your computer has a fixed IP address. It only works when DHCP is on. I think it might be worth filing a radar, so that all VPN related issues get worked on at the same time. Viel Grüß and Spaß! Vincent _______________________________________________ Do not post admin requests to the list. They will be ignored. Darwin-kernel mailing list (Darwin-kernel@lists.apple.com) Help/Unsubscribe/Update your Subscription: https://lists.apple.com/mailman/options/darwin-kernel/site_archiver%40lists.... This email sent to site_archiver@lists.apple.com