This is fine if the post is something insanely low effort.

But I do worry if this ends up being too aggressive.

One of the things that made reddit so awful is how over moderated it was.

I don’t really take issue with dozens of posts by newbies asking the same basic question over and over. I used to be one and am occasionally back there again if I start a new hobby. Hopefully newcomers don’t get pushed off by overly sensitive moderation.

It would be helpful if you could provide a hypothetical example of what is considered a “low effort” post.

Your first suggestion is a clever one.

I can imagine writing a small script on the host machine to listen for subdomains, forward them to pfsense to update the aliases, and possibly set them to expire after a few days for security reasons.

Surely something like this exists. How to find it…?

There’s a few apps I need to split out. Top priority is the signiant app which according to their documentation requires various AWS subdomains as well as their own. Specific subdomains are not specified and are implied to change regularly/on demand.

In an ideal world I would do my split tunneling on the device itself, but I don’t trust Windows and thus I run my VPN at the router level.

This isn’t a problem for most things, but I need to utilize my full bandwidth to transfer large files to clients in a timely manner, and a VPN becomes a massive bottleneck.

Pfsense lets you alias by domain name (I believe it regularly resolves down to an IP and uses that for filtering), but again, you need to supply the exact subdomain.

Just wondering if there’s an alternative solution to this issue. If it’s external to pfsense that’s not the end of the world.

Worst case scenario, I would set up a dedicated Linux box or maybe even a VM which could share access to the file transfer NAS and split tunnel the entire box around the VPN. Definitely less convenient.

This looks promising. I’m going to investigate further. Thanks!