Omnitun 0.4.0 (2d617f0)

New

• Routes by domain (dynamic split tunneling): a list of networks may also hold domains, *.corp-saas.com for every name under it. Their addresses go through the VPN as soon as they are resolved, even when they change. A VPN that takes all traffic can keep domains outside it ("Outside the VPN", excluded_domains): video calls, say.
  • Only a VPN with such domains runs the small DNS proxy that does it, unprivileged and sandboxed. It relays to the DNS servers already in place, so DNS filtering (an antivirus) keeps working, and if it fails, the DNS goes back to how it was.
  • omnitunctl status counts the addresses routed by domain. See README, "Routes by domain", for the limits (browsers' own encrypted DNS, IPv4 only).
• Notes on networks and domains: every network and domain list of the editor is now a table, with a note per entry to remember what it is for, and Paste Lines to add several at once. Notes show in the split mode menu, in a received profile and in omnitunctl import file.

Notes

• Profiles with notes or domains cannot be read by an older version: update the app and omnitunctl together (the package does).

Signed with a Developer ID and notarized by Apple. macOS 14 or later.