Motivation: User's need an easy way to tunnel all possible traffic, but still be able to fine tune those settings. Safe Passage works with your Tunnel and Domain Targets in one of two modes: "Exclude", and "Include" mode. ![]() In Exclude Mode (the default mode) Safe Passage tunnels all TCP traffic, except traffic to-or-from your local area network (e.g. your current home or office network,) or your SSH host. ![]() To specify additional hosts or networks that should not be tunneled to, add those hosts or networks as Tunnel Targets. This will configure Safe Passage to not tunnel traffic destined to those targets. In Exclude Mode, specifying Domain Filters (any portion of a domain name) determines which DNS queries Safe Passage will not tunnel. For instance: If you specify "abc" as a domain filter, then (in Exclude Mode) Safe Passage will NOT tunnel DNS queries for "abc.org", "anything.abc", and "abc.cbs.gov", but will tunnel "xyz.com" (because it doesn't contain the string "abc".)
|