The client has a setting that blocks connections unless the VPN is connected.
If you wanted something specifically for unknown networks, you’d have to integrate something like Little Snitch’s Automatic Profile Switching—such that upon connecting to an unfamiliar network, all connections are blocked except for
Those that are required to navigate any captive portal to get connected
Those that are required for Mullvad to establish a secure connection
Then you can allow all connections and carry on with your day.
P.S. Did you know that Mullvad doesn’t run any advertising at all?
I adore Mullvad. They don’t ask for your email address, allow payment via Bitcoin or mailed cash for increased anonymity, and don’t keep logs. They were also an early innovator with Wireguard support.
For me, the only drawback is that Mullvad doesn’t do SmartDNS. So if you want a service to help you access geofenced digital content in other countries, Mullvad isn’t the best choice. I would recommend ExpressVPN for that.
I use NordVPN. It’s based in Panama, if I remember correctly? It has apps for iOS and Mac of course. There’s tons of ways to configure it, and the connection is very fast. If you’re going to use it, make sure you buy it on sale – they have them all the time. Strongly recommend this VPN.