Use cases
Intranet or VPN names not loading on macOS: Always Real IP
List company intranet or VPN domains in Antify’s Always Real IP so a proxied app resolves them with the current network’s DNS and connects directly.
Once an app has a Proxy rule, it may fail to open domains on your company intranet or VPN. Add those domains to Always Real IP in Settings → General.
When you need it
By default, when a proxied app looks up a domain, Antify first gives it a placeholder address and later hands the domain to the proxy to resolve. If the proxy sits outside your company network, it cannot resolve intranet domains or reach the servers behind them, so the app cannot open them.
- It only affects apps that have a Proxy rule. Apps without a rule already connect directly and are not affected.
- An intranet service you reach by IP address is not affected either.
Add the domains
- 1
Open Always Real IP
In Settings → General, find Always Real IP and click the field.
- 2
Enter the intranet domains
For example *.corp.example.com; intranet.example.com. Separate several domains with semicolons, commas, or new lines.
- 3
Save
Press Return, click outside the field, or click Save on the right. New lookups take effect right away and you do not need to stop the proxy. Then reopen the intranet address that would not load.
- intranet.example.com covers that one domain only.
- *.corp.example.com covers corp.example.com and all of its subdomains.
- Domains only. An IP address, a network range, or a lone * is not accepted: the field shows red text and does not save.
What changes once they are listed
- For listed domains, the app asks the DNS server it originally asked (for example the one your company or VPN pushed) for the real address, instead of getting a placeholder. Those lookups reach the current network’s DNS directly, not through the proxy.
- Once it gets a private address (192.168.x.x, 10.x.x.x and the like), the connection goes straight to the intranet, not through the proxy. If you turned on Can reach private networks for the proxy, those connections go through that proxy instead.
- The list applies to every configuration and every network; it does not follow the configuration. On a network without that intranet, the listed intranet domains simply cannot be resolved.