title: Set up port forwarding for SSLSplit (Supports ipfw fwd only) on OSX Mavericks
body: <p>I am trying to set up <a href="http://www.roe.ch/SSLsplit" rel="nofollow noreferrer">SSLSplit</a> on OSX Mavericks according to this <a href="http://blog.philippheckel.com/2013/08/04/use-sslsplit-to-transparently-sniff-tls-ssl-connections/" rel="nofollow noreferrer">tutorial</a>.</p>
  <p>I got it working on a Ubuntu Machine, so I know SSLSplit works just fine and the issue is only with packets not being forwarded to the port on which SSLSplit is listening on Mavericks. On the SSLSplit homepage it says :</p>
  <blockquote>
  <p>SSLsplit currently supports the following operating systems and NAT engines:</p>
  <p>Mac OS X: ipfw fwd</p>
  </blockquote>
  <p>so I try to set up port forwarding using the following two commands, but I read somewhere that ipfw has been dropped in OSX 10.9 Mavericks.</p>
  <pre><code>sudo sysctl -w net.inet.ip.forwarding=1
  sudo ipfw add fwd 127.0.0.1,8080 tcp from 192.168.2.2 to any 443 in via bridge100
  </code></pre>
  <p>I even tried this in OSX 10.8.5, the commands don't give any error on either operating systems but traffic is not being forwarded.</p>
  <p>I also tried the pfctl approach as mentioned <a href="https://gist.github.com/kujohn/7209628" rel="nofollow noreferrer">here</a>. But with this method, I don't think SSLSplit is too happy, since I think the packet loops around, I get too many files open error and SSLSplit crashes. Can SSLSplit work with pfctl? Does it really care how traffic is forwarded to the port on which it is listening? Or does the error occur because of some misconfiguration on my part?</p>
  <p>Has someone been able to use SSLSplit on OSX Mavericks? Can you guide me with the port forwarding part? It would be better if you could explain the entire process.</p>
  <p>I am not using tools such as mitmproxy since I have to decrypt the SSL Layer over non-HTTP Traffic.</p>