VPN, proxy and filters

A content filter blocks websites on a Mac

A content filter examines web traffic and blocks some sites. On a Mac, the filter can come from Screen Time, from an app or from your organization.

Applies to: macOS 13 Ventura and later. The Screen Time pane names come from the current Apple guide and are different in earlier versions.Checked: 29 October 2026

Symptoms

  • Safari shows a page that says the site is restricted or blocked.
  • A site loads on your phone but not on the Mac, on the same network.
  • Sites fail on every network, also on a phone hotspot.
  • The problem started after you installed a security, VPN or parental control app.

Likely causes

  • Screen Time web limits. The Limit Adult Websites or Allowed Websites Only setting blocks sites for a user.
  • A filter app. Security, antivirus and parental control apps can add a network extension that filters content.
  • A profile from your organization. A school or company can manage the Mac and install a web content filter.
  • A firewall rule. A firewall app can block one domain for one app or for all apps.

How to check

  1. Try the site on a different network, such as a phone hotspot. If it still fails, the filter is on the Mac.

  2. Choose Apple menu > System Settings > Screen Time. Select the user, then click Content & Privacy.

  3. Click App Store, Media, Web, & Games. Look at the Safari setting.

  4. Choose Apple menu > System Settings > General > Login Items & Extensions. Click the Info button for Network Extensions.

  5. In current macOS versions, choose Apple menu > System Settings > General > Device Management. Look for profiles from your organization.

How to fix it

  1. If Screen Time blocks the site, click Customize next to Limit Adult Websites. Add the site to the Allowed list.

  2. To remove the limit, choose Unrestricted Access.

  3. If an app filters content, open that app. Allow the site, or turn off its filter.

  4. If your organization manages the Mac, ask your IT team. Do not try to remove its profile.

  5. Test the site again in a new Safari window.

With Kilobat

  1. If Kilobat's filter is on, its connection check says whether a Kilobat rule blocks the host.

    kilobat why example.com

  2. List the hosts and IP ranges that Kilobat blocks for every app.

    kilobat rules --json

  3. Remove a host from Kilobat's blocklist. Blocking needs Pro and the network filter.

    kilobat unblock-host example.com

Questions

Can a filter block sites in every browser?

Yes. A network extension filter works below the browser. It can block traffic from all apps.

Why does the site work on my phone?

The filter is on the Mac, not on the network. Your phone does not use it.

Sources

Sources checked on 29 October 2026. Man pages are the ones installed with macOS; open one with man <name> in Terminal.