Disable NAT rule creation
-
Dnsbl generates NAT forwarding rules. How can I disable this? Deleting the NAT rules doesn't work.
-
@thisisme
These rules are needed by DNSBL to work. If you don't like it disable DNSBL. -
@viragomann I don't think it is. Redirecting the Ad to a useless response is more harmful than just dropping the request. In my opinion these automatic NAT rules are optional and I think they are unwanted behavior. I could add them by myself or don't use them at all. No need to force add them without consent.
-
@thisisme Without consent is a little harsh. You consented when you installed the package.
-
@thisisme said in Disable NAT rule creation:
Redirecting the Ad to a useless response is more harmful than just dropping the request
If the traffic is simply dropped, pages will take longer to load in the web browser. Therefor it is redirected to a 1 px image.
-
@thisisme It can also render the page much less pleasant, with broken image placeholders (browser-dependent), ALT text, etc.
-
@viragomann said in Disable NAT rule creation:
@thisisme said in Disable NAT rule creation:
Redirecting the Ad to a useless response is more harmful than just dropping the request
If the traffic is simply dropped, pages will take longer to load in the web browser. Therefor it is redirected to a 1 px image.
This can't have a measurable effect. Adaway for Android drops the request too. Works pretty well on my device. If the pfsense rejects the packet instead of dropping it should be fast too.
Anyway I see this as my choice. It will work both ways, so why don't have an option?
-
@derelict said in Disable NAT rule creation:
@thisisme Without consent is a little harsh. You consented when you installed the package.
If it sends my data to China I consented that too?
A nat forwarding rule isn't helpful without a proper firewall entry, but pfsense still gives me the option to add the rules by myself and not force pass everything.
-
@derelict said in Disable NAT rule creation:
@thisisme It can also render the page much less pleasant, with broken image placeholders (browser-dependent), ALT text, etc.
Adaway for Android does the same. Im fine with that. Why am I not allowed to decide this myself?