diff --git a/main.c b/main.c
index 6ad1998..cba5d7b 100644
--- a/main.c
+++ b/main.c
@@ -597,7 +597,8 @@ main(int argc, char *argv[])
 		}
 	}
 #ifdef __APPLE__
-	if (opts->dropuser && nat_used("pf")) {
+	if (opts->dropuser && !!strcmp(opts->dropuser, "root") &&
+	    nat_used("pf")) {
 		fprintf(stderr, "%s: cannot use 'pf' proxyspec with -u due "
 		                "to Apple bug\n", argv0);
 		exit(EXIT_FAILURE);