macOS: “No route to host” after launching from Finder

AGYNAMIX® Invoicer may report “No route to host” when macOS Local Network privacy blocks a connection to a local server. The reported problem appeared after upgrading to macOS Golden Gate. These are temporary workarounds until we find a better solution or Apple resolves the issue; the cause remains under investigation.

Invoicer launches, but a connection to a local server may fail. In the reported case, an S3 connection failed when launching Invoicer from Finder but worked when launching its executable from Terminal. Choose between a Terminal launch and a persistent server exception.

Check the connection and permission

This guide applies to local servers, such as a NAS or local S3 archive, with errors like:

Unable to execute HTTP request: No route to host

First check server availability, address, and port. The same error can indicate a network or VPN problem. If another app connects from this Mac, check Invoicer’s permission.

Open System Settings → Privacy & Security → Local Network and enable AGYNAMIX Invoicer, or the entry for your Internal or Insiders edition. Quit Invoicer completely, reopen it from Finder, and retry.

Certificate errors, incorrect bucket names, and HTTP “403 Forbidden” responses require different solutions. These workarounds do not change certificates, credentials, or bucket permissions.

Alternative 1 Start Invoicer from Terminal

macOS exempts command-line tools launched from Terminal, including their child processes, from Local Network permission checks. You can use this to start Invoicer without changing system settings. Apple’s guidance

Quit Invoicer first. Open Terminal using Spotlight, paste this command, and press Return:

"/Applications/AGYNAMIX Invoicer.app/Contents/MacOS/AGYNAMIX Invoicer"

This replaces the Finder double-click and uses the application’s normal defaults. No app-data directory, recovery-key directory, or additional arguments are needed. Keep Terminal open while using Invoicer; quit Invoicer before closing the window.

The command assumes the normal edition is installed in Applications. If installed elsewhere or using another edition, adjust the application path and executable name. Execute the program directly as shown; open -a uses the normal application-launch mechanism and does not provide this exemption.

Alternative 2 Exempt one server address

This option requires macOS 15.5 or later, an administrator password, and a restart. It allows you to continue launching from Finder.

Every application on your Mac can access the exempted address regardless of its Local Network permission. Server authentication and other network controls still apply. Use one server address, not an entire network. This bypasses the check rather than repairing the saved permission. On a managed Mac, ask your administrator. Apple’s documented exception

Record the existing settings

Run these commands separately in Terminal and save their output for restoration:

sudo defaults read com.apple.network.local-network AllowedEthernetLocalNetworkAddresses
sudo defaults read com.apple.network.local-network AllowedWiFiLocalNetworkAddresses

Enter your administrator password when prompted; Terminal displays no characters while you type. If a domain or key does not exist, record that the corresponding setting was absent.

Add the server and restart

Replace 192.168.1.50 with your server’s IPv4 address in both commands. Keep /32 to restrict the exception to that address. For https://192.168.1.50:8010, use only 192.168.1.50/32, without the protocol, port, bucket, or path. Ask your administrator if you only know a hostname.

sudo defaults write com.apple.network.local-network AllowedEthernetLocalNetworkAddresses -array-add "192.168.1.50/32"
sudo defaults write com.apple.network.local-network AllowedWiFiLocalNetworkAddresses -array-add "192.168.1.50/32"

Run each once. They append to the Ethernet and Wi-Fi lists, preserving existing entries. Restart your Mac, launch Invoicer from Finder, and retry. If the server’s IP changes, the old exception no longer covers it.

Remove the exception

Once a better solution or Apple fix is available, quit Invoicer and restore your recorded settings.

Only for a key originally absent, delete it with the corresponding command:

sudo defaults delete com.apple.network.local-network AllowedEthernetLocalNetworkAddresses
sudo defaults delete com.apple.network.local-network AllowedWiFiLocalNetworkAddresses

For a pre-existing list, restore the original quoted addresses with -array. Example for an Ethernet list previously containing only 10.20.30.40/32:

sudo defaults write com.apple.network.local-network AllowedEthernetLocalNetworkAddresses -array "10.20.30.40/32"

Use your saved values. If an administrator changed the lists meanwhile, ask them to remove your entry while preserving their changes. Restart, then test with the normal permission.

If access still fails

Contact Invoicer support with your macOS and Invoicer versions, exact error, launch method, and workaround attempted. Never send credentials.

tccutil reset All does not reset Local Network permissions. Apple provides no supported per-app reset to the initial state. Do not delete NetworkExtension preference files. Apple Developer Support