How can one tell if DNS is being [on-machine] intercepted

On MacOS it is now possible for applications to insert a DNS proxy provider (i.e. using nednsproxyprovider) which intercepts all DNS requests.

How is it possible to discover, or list, whether such DNS proxy provider(s) is/are present (apart from just comparing a local DNS request with one made to an external DNS server)?


Solution 1:

You should be able to see it in the syslog. There should be a message like this:

NESMDNSProxySession[SESSION CODE HERE]: status changed to connected