Tri-state probe results, captive portal and DarkWake in the sandbox
Parent: Apple Platform Publishing (Mac App Store) · Topic entry · 16 branches · skill apple-platform-publishing/references/macos-tristate-probes-captive-portal-darkwake.md
A published reference is not available for this topic yet.
Children
- Fake-IP and split-DNS resolvers (benchmark and CGNAT ranges, Tailscale MagicDNS, WARP, Surge) answering public names w (frontier)
- Tunnel-interface (utun) route changes as a likely real source of "TCP down, DNS up" on this Mac (one incident examined) (frontier)
- kIOPMMessageUserIsActiveChanged and IOPMUserIsActive as a full-wake signal (frontier)
- Delivering an SCDynamicStore callback through ctypes on the rumps main run loop (frontier)
- Reading State:/Network/Service/<id>/DHCP Option_114 and DHCPv6 option 103 as a portal hint (frontier)
- RFC 8908 API fetch: certificate validation, seconds-remaining and can-extend-session handling (frontier)
- captive.apple.com allow-listed networks (walled gardens that make Apple's probe pass while the Internet is blocked) (frontier)
- ICMP-only failure display ("ping blocked") versus a network failure in menu-bar copy (frontier)
- ping -6/ping6 behaviour and ICMPv6 heartbeat on a NAT64 network (frontier)
- NAT64 prefix discovery through ipv4only.arpa and nw_nat64_ for the interface prober (frontier)
- Unified-log symptomsd "DNS failure tell health status" lines as corroboration (not available in the sandbox) (frontier)
- Local Network permission errno for BSD connect() and for a spawned /sbin/ping (frontier)
- App Review reading of captive.apple.com traffic in the privacy label and notes (frontier)
- UnicodeError/idna edge cases in user-entered hostnames (IDN, trailing dot, zero-width characters; example.com resolved (frontier)
- Resolver cache hits that make dns_ok True during an outage (mDNSResponder negative and positive TTLs) (frontier)
- NWPathMonitor through ctypes or a Swift helper versus polling scutil --nwi (frontier)
Frontier under this node: App Review reading of captive.apple.com traffic in the privacy label and notes, Delivering an SCDynamicStore callback through ctypes on the rumps main run loop, Fake-IP and split-DNS resolvers (benchmark and CGNAT ranges, Tailscale MagicDNS, WARP, Surge) answering public names w, ICMP-only failure display ("ping blocked") versus a network failure in menu-bar copy, Local Network permission errno for BSD connect() and for a spawned /sbin/ping, NAT64 prefix discovery through ipv4only.arpa and nw_nat64_ for the interface prober, NWPathMonitor through ctypes or a Swift helper versus polling scutil --nwi, RFC 8908 API fetch: certificate validation, seconds-remaining and can-extend-session handling, Reading State:/Network/Service/<id>/DHCP Option_114 and DHCPv6 option 103 as a portal hint, Resolver cache hits that make dns_ok True during an outage (mDNSResponder negative and positive TTLs), Tunnel-interface (utun) route changes as a likely real source of "TCP down, DNS up" on this Mac (one incident examined), UnicodeError/idna edge cases in user-entered hostnames (IDN, trailing dot, zero-width characters; example.com resolved , Unified-log symptomsd "DNS failure tell health status" lines as corroboration (not available in the sandbox), captive.apple.com allow-listed networks (walled gardens that make Apple's probe pass while the Internet is blocked), kIOPMMessageUserIsActiveChanged and IOPMUserIsActive as a full-wake signal, ping -6/ping6 behaviour and ICMPv6 heartbeat on a NAT64 network