What is adguard-tcpkill and why does it want to connect via the RAW port?

Discussion in 'Technical Support (AdGuard for Mac)' started by xx_, Apr 9, 2018.

  1. xx_

    xx_ New Member

    Joined:
    Jul 21, 2017
    Messages:
    10
    What does adguard-tcpkill do and why does it seem to randomly want to establish outgoing connections via the RAW port?

    Also, unlike AgGuard itself, aguard-tcpkill is not signed. Why?
     
  2. TheHasagi

    TheHasagi Quality Assurance / Support Commando Staff Member Administrator Moderator

    Joined:
    Mar 26, 2018
    Messages:
    1,405
    @xx_
    Hello!
    Adguard-tcpkill is closing needed browser connections to filter it all.
    About signed, as I can see:
    codesign --verbose -v adguard-tcpkill
    adguard-tcpkill: valid on disk
    adguard-tcpkill: satisfies its Designated Requirement

    What actually did you use to check in signed status?
     
  3. xx_

    xx_ New Member

    Joined:
    Jul 21, 2017
    Messages:
    10
    Never mind, it does appear to have a code signature by Performiks OOO. I use Little Snitch alongside AdGuard, so this is the information it provided me on AdGuard trying to connect via adguard-tcpkill.

    You mention: "Adguard-tcpkill is closing needed browser connections to filter it all." However, I am not sure I still don't understand what it does or why it is needed. Can you please elaborate? Since I initially didn't know what it was, I blocked it on Little Snitch for any connection, and it still seems AdGuard works fine, so I'm not sure why it's necessary. What is the RAW protocol for?
     
  4. Boo Berry

    Boo Berry Moderator + Beta Tester Moderator

    Joined:
    May 30, 2012
    Messages:
    4,058
    To be able to filter connections, e.g. open ones, it needs to close them first (and then the connections can reopen, with AG for Mac filtering them). As far as I know, this is needed to prevent an issue where some connections might not be filtered (more-or-less fixed in 1.5.5 RC) like YouTube ads slipping through in Safari.
     
  5. xx_

    xx_ New Member

    Joined:
    Jul 21, 2017
    Messages:
    10
    Thank you. I am using 1.5.5 and it seems to be working fine without adguard-tcpkill being granted access to establish connections. Will it cause problems if I leave it like this? Should I really be enabling it, or is it mostly an optional thing. If it's absolutely crucial, then I guess I'll enable it, but so far, it doesn't appear to be giving me problems, but I also don't want to run into problems in the future.
     
  6. TheHasagi

    TheHasagi Quality Assurance / Support Commando Staff Member Administrator Moderator

    Joined:
    Mar 26, 2018
    Messages:
    1,405
    @xx_
    There are no worries for now. If some problems should be, do not hesitate to contact us.