Hi L.R. D.S.,
Stating your opinion on a controversial topic and announcing to leave
the list in the same message feels like someone shouting their opinion
into a room full of people and slamming the door from the outside before
anyone can react. Also, doing so after someone pointed out to you why
your criticism was probably unjustified makes this behavior even more
sad, I'd say.
I'm sure nobody here thinks that criticism has to be perfect, and I also
don't think that - even after your first angry reaction - a calm,
objective explanation of the reasons for the criticized current behavior
is "dodging" at all.
About the PS, Tails already makes use of iptables to prevent (nearly)
any non-Tor traffic from happening. However, using a firewall to block
specific web pages will probably not work in the way you might expect it
to do - if there is the legitimate site
http://example.org/information, and the advertisement banner
http://example.org/advertisement.png, then you can't remove that banner
by denying access to the IP behind example.org. As far as I know, you
could, if the traffic is unencrypted (fails for Tor and even HTTPS
itself), use some special iptables rules to intercept all text and block
connections that contain what you're looking for. Add 1000 of these
rules, and network performance becomes horrible, I guess. DNS solutions
additionally fail whenever advertisement hosts are referenced using
their IP address instead of their hostname.
http://192.0.2.1/advertisement.png evades DNS solutions.
For Tails/Tor specifically, there's another huge problem with your
suggestion: DNS lookups are performed by the exit node, not your own
computer. Else, your DNS provider could easily see which hostnames you
look up, breaking anonymity. Connections in general are not made
directly to the web hosts, but instead to the Tor entry node, which
forwards your request. The only place to implement firewall/DNS
adblocking would be the exit node, not the computer running Tails. I'm
pretty sure you don't want the exit node operator to decide which hosts
you and all other Tor users are allowed to connect to. ;D
Without any "dodging" at all, I hope, this explains why neither firewall
nor DNS solutions can be "more effective and efficient" than a browser
addon for blocking advertisements on web pages. After all, use cases
like this one are what browser addons exist for.
Have a nice day, and feel free to come back whenever you want to. ^.^
Best regards,
Tobias Frei
[just yet another guest; not an official list admin statement or
whatever it might look like.]
Am 17.05.2015 um 01:42 schrieb L.R. D.S.:
>> basic guideline: Be excellent to each other.
>
> I do not agree with this. I should interpret better these 'sjw' guideline before
> enter here. By the way, I think you folks are using it to dodge the critic.
> If you think that a critic need to be "excellent" in all ways, then you'll never have
> a real critic here after all.
> I'll just remove myself from this list to evite more "non-excellent" mails.
>
>
> ps: A pf firewall or dns filtering would be more effective and efficient then a addon.
> _______________________________________________
> Tails-dev mailing list
> Tails-dev@???
> https://mailman.boum.org/listinfo/tails-dev
> To unsubscribe from this list, send an empty email to Tails-dev-unsubscribe@???.
>
%0A>%20any%20non-Tor%20traffic%20from%20happening.%20However,%20using%20a%20firewall%20to%20block%0A>%20specific%20web%20pages%20will%20probably%20not%20work%20in%20the%20way%20you%20might%20expect%20it%0A>%20to%20do%20-%20if%20there%20is%20the%20legitimate%20site%0A>%20http://example.org/information,%20and%20the%20advertisement%20banner%0A>%20http://example.org/advertisement.png,%20then%20you%20can't%20remove%20that%20banner%0A>%20by%20denying%20access%20to%20the%20IP%20behind%20example.org.%20As%20far%20as%20I%20know,%20you%0A>%20could,%20if%20the%20traffic%20is%20unencrypted%20(fails%20for%20Tor%20and%20even%20HTTPS%0A>%20itself),%20use%20some%20special%20iptables%20rules%20to%20intercept%20all%20text%20and%20block%0A>%20connections%20that%20contain%20what%20you're%20looking%20for.%20Add%201000%20of%20these%0A>%20rules,%20and%20network%20performance%20becomes%20horrible,%20I%20guess.%20DNS%20solutions%0A>%20additionally%20fail%20whenever%20advertisement%20hosts%20are%20referenced%20using%0A>%20their%20IP%20address%20instead%20of%20their%20hostname.%0A>%20http://192.0.2.1/advertisement.png%20evades%20DNS%20solutions.%0A>%20%0A>%20For%20Tails/Tor%20specifically,%20there's%20another%20huge%20problem%20with%20your%0A>%20suggestion:%20DNS%20lookups%20are%20performed%20by%20the%20exit%20node,%20not%20your%20own%0A>%20computer.%20Else,%20your%20DNS%20provider%20could%20easily%20see%20which%20hostnames%20you%0A>%20look%20up,%20breaking%20anonymity.%20Connections%20in%20general%20are%20not%20made%0A>%20directly%20to%20the%20web%20hosts,%20but%20instead%20to%20the%20Tor%20entry%20node,%20which%0A>%20forwards%20your%20request.%20The%20only%20place%20to%20implement%20firewall/DNS%0A>%20adblocking%20would%20be%20the%20exit%20node,%20not%20the%20computer%20running%20Tails.%20I'm%0A>%20pretty%20sure%20you%20don't%20want%20the%20exit%20node%20operator%20to%20decide%20which%20hosts%0A>%20you%20and%20all%20other%20Tor%20users%20are%20allowed%20to%20connect%20to.%20;D%0A>%20%0A>%20Without%20any%20%22dodging%22%20at%20all,%20I%20hope,%20this%20explains%20why%20neither%20firewall%0A>%20nor%20DNS%20solutions%20can%20be%20%22more%20effective%20and%20efficient%22%20than%20a%20browser%0A>%20addon%20for%20blocking%20advertisements%20on%20web%20pages.%20After%20all,%20use%20cases%0A>%20like%20this%20one%20are%20what%20browser%20addons%20exist%20for.%0A>%20%0A>%20%0A>%20Have%20a%20nice%20day,%20and%20feel%20free%20to%20come%20back%20whenever%20you%20want%20to.%20%5E.%5E%0A>%20%0A>%20Best%20regards,%0A>%20Tobias%20Frei%0A>%20%0A>%20%5Bjust%20yet%20another%20guest;%20not%20an%20official%20list%20admin%20statement%20or%0A>%20whatever%20it%20might%20look%20like.%5D%0A>%20%0A>%20Am%2017.05.2015%20um%2001:42%20schrieb%20L.R.%20D.S.:%0A>%20>>%20basic%20guideline:%20Be%20excellent%20to%20each%20other.%0A>%20>%20%0A>%20>%20I%20do%20not%20agree%20with%20this.%20I%20should%20interpret%20better%20these%20'sjw'%20guideline%20before%0A>%20>%20enter%20here.%20By%20the%20way,%20I%20think%20you%20folks%20are%20using%20it%20to%20dodge%20the%20critic.%0A>%20>%20If%20you%20think%20that%20a%20critic%20need%20to%20be%20%22excellent%22%20in%20all%20ways,%20then%20you'll%20never%20have%0A>%20>%20a%20real%20critic%20here%20after%20all.%20%0A>%20>%20I'll%20just%20remove%20myself%20from%20this%20list%20to%20evite%20more%20%22non-excellent%22%20mails.%0A>%20>%20%0A>%20>%20%0A>%20>%20ps:%20A%20pf%20firewall%20or%20dns%20filtering%20would%20be%20more%20effective%20and%20efficient%20then%20a%20addon.%0A>%20>%20_______________________________________________%0A>%20>%20Tails-dev%20mailing%20list%0A>%20>%20Tails-dev@???%0A>%20>%20https://mailman.boum.org/listinfo/tails-dev%0A>%20>%20To%20unsubscribe%20from%20this%20list,%20send%20an%20empty%20email%20to%20Tails-dev-unsubscribe@???.%0A>%20>%20%0A>%20%0A>%20 "Reply to this message")
