Occasionally it complains about packets inside a netns, although not configured to.

Include the following information:
- 1.6.0rc5
- Version Ubuntu 23.04
- Window Manager kde
- Kernel version: Linux 6.2.0-20-generic SMP PREEMPT_DYNAMIC Thu Apr 6 07:48:48 UTC 2023 x86_64 x86_64 x86_64 GNU/Linux

**Occasionally** it intercepts packets inside a netns.

I manually `nsenter`ed the process according to its reported PID, and checked that it's inside the netns.

I don't know why It would intercept the DNS request inside the netns. I didn't configure it to catch netns traffic. It should NOT.

The DNS inside netns is handled by Adguard/dnsproxy, and it just sends the request to upstream like 8.8.8.8.

```
time,node,action,protocol,src_ip,src_port,dst_ip,dst_host,dst_port,uid,pid,process,process_args,process_cwd,rule
2023-06-03 13:11:17.277406,unix:/local,deny,udp,127.0.0.1,39906,127.0.0.53,ajax.aspnetcdn.com,53,1000,10198,/space/Apps/mullvad-browser/Browser/mullvadbrowser.real,./mullvadbrowser.real --class Mullvad Browser --name Mullvad Browser -p base_p,/space/Apps/mullvad-browser/Browser,deny-once-list-space-apps-mullvad-browser-browser-mullvadbrowser-real-ajax-aspnetcdn-com
```

| time | node | action | protocol | src_ip | src_port | dst_ip | dst_host | dst_port | uid | pid | process | process_args | process_cwd | rule |
|--|--|--|--|--|--|--|--|--|--|--|--|--|--|--|
| 2023-06-03 13:11:17.277406 | unix:/local | deny | udp | 127.0.0.1 | 39906 | 127.0.0.53 | ajax.aspnetcdn.com | 53 | 1000 | 10198 | /space/Apps/mullvad-browser/Browser/mullvadbrowser.real | ./mullvadbrowser.real --class Mullvad Browser --name Mullvad Browser -p base_p | /space/Apps/mullvad-browser/Browser | deny-once-list-space-apps-mullvad-browser-browser-mullvadbrowser-real-ajax-aspnetcdn-com |

process is checked to be inside netns by `sudo nsenter --target 10198 --net fish`. output of `ip link`

```
1: lo: mtu 65536 qdisc noqueue state UNKNOWN mode DEFAULT group default qlen 1000
link/loopback 00:00:00:00:00:00 brd 00:00:00:00:00:00
2: s_tun: mtu 1500 qdisc pfifo_fast state UP mode DEFAULT group default qlen 500
link/none
8: base_p_vn@if9: mtu 1500 qdisc noqueue state UP mode DEFAULT group default qlen 1000
link/ether de:89:fa:b5:10:34 brd ff:ff:ff:ff:ff:ff link-netnsid 0
```

netns is configured by https://github.com/planetoryd/netns-proxy

the only traffic that goes out should be the connection to socks proxy. no other stuff should go out, though not blackholed by firewall for now. the netns has default route to TUN.