macos-network-diagnostics

Diagnose macOS DNS, firewall, Tailscale, mDNS, and SSH tunneling issues.

13|3|Updated Mar 2, 2026
One-click install
npx skills add https://github.com/phrazzld/spellbook --skill macos-network-diagnostics
Or copy as Structured Prompt for Agent
Please help me install this Agent Skill.
Skill: macos-network-diagnostics
Source: https://github.com/phrazzld/spellbook/tree/main/skills/macos-network-diagnostics
Command: npx skills add https://github.com/phrazzld/spellbook --skill macos-network-diagnostics

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve?

macOS network debugging sequences that illuminate DNS resolution paths, firewall layers, Tailscale connectivity, mDNS/Bonjour, and SSH tunneling. Designed to go beyond man pages, it provides structured, repeatable checks for common network issues.

Core Features & Use Cases

  • Diagnoses DNS and mDNS resolution paths, including split-DNS scenarios, to identify resolver misconfigurations.
  • Verifies firewall and packet-filter states (ALF and PF) and pinpoints blocks affecting connectivity.
  • Checks Tailscale health, magic DNS, and SSH tunneling patterns to facilitate secure remote access.
  • Real-world use: quickly triage a machine that cannot reach an internal service by following guided steps and validating each layer.

Quick Start

Run the diagnostic sequence with the default command to begin troubleshooting your macOS network stack.

Frequently Asked Questions about macos-network-diagnostics

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I run macOS network diagnostics for DNS resolution failures?

To run macOS network diagnostics for DNS resolution failures, follow a structured sequence of checks that identify resolver misconfigurations. The process illuminates DNS and mDNS resolution paths, including split-DNS scenarios, to pinpoint exact layer failures.

Why does my macOS firewall block specific ports and how can I check it?

Your macOS firewall might block specific ports due to active ALF or PF packet-filter states. You can check these firewall layers by verifying their current states through guided diagnostic steps to pinpoint the exact connectivity blocks.

How do I troubleshoot Tailscale connectivity issues on a Mac?

To troubleshoot Tailscale connectivity issues on a Mac, execute diagnostic sequences that check Tailscale health and Magic DNS. This verifies your VPN overlay status and facilitates secure remote access validation.

Can I use these macOS network troubleshooting steps across multiple machines?

Yes, you can use these macOS network troubleshooting steps across multiple machines. The diagnostic sequences apply to scenarios from single-host debugging to fleet-wide troubleshooting for misconfigured DNS, blocked ports, and cross-service name resolution.

What is the best way to debug SSH tunneling and mDNS on macOS?

The best way to debug SSH tunneling and mDNS on macOS is to use structured, repeatable checks that go beyond man pages. This approach validates each network layer sequentially, ensuring secure remote access and local service discovery function correctly.