Stack Exchange Network

Stack Exchange network consists of 174 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [dns]

Domain Name System (DNS) translates word-based domain and host names to numerical IP addresses.

0
votes
0answers
43 views

Cloudflare DNS & Tor

Been toying with Cloudflare DNS (IPv4 is 1.1.1.1:1.0.0.1 the IPv6 addresses are 2606:4700:4700::1111,2606:4700:4700::1001) set in my router and had a pretty good experience so far, just wondered ...
0
votes
1answer
30 views

union domain can not resolve [duplicate]

I use gost for create ShadowSocks server and forward all traffic to tor m with this command: gost -L ss://aes-256-cfb:1234@:1212 -F=socks4://127.0.0.1:9050 I can see and open all domain, not problem,...
0
votes
0answers
42 views

Error 1016 - Origin DNS error

since a week now I keep getting an error message when trying to link to support section of a site, and have no idea what the problem is. latest for example: Error 1016 Ray ID: 47927da3eb6551d6 • ...
3
votes
0answers
163 views

DNS over HTTPS and Tor

Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...
0
votes
0answers
64 views

“tor2web” for all protocols

I've started experimenting with tor again, and love the flexibility you get with hidden services (no port forwarding, no messing with firewall rules). However, I'd like to be able to access those ...
0
votes
1answer
249 views

What is up with these longer onion addresses?

Some number of years ago, I heard that one of the reasons that Tor does not allow anything longer than a 1024-bit RSA key as an onion service's private key is because the address would be a lot longer,...
1
vote
1answer
173 views

Cloudflare's new .onion DNS resolver?

Cloudflare recently announced their new "hidden DNS resolver". https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/ I'm wondering if it can be used with the tor browser or the ...
0
votes
0answers
60 views

TOR: Purpose of DNS redirect

I have a machine setup as Gateway which routes all traffic through TOR. Upon reviewing the recommended iptables rules for an anonymizing middlebox I noticed that I do not have the second REDIRECT rule ...
-1
votes
0answers
74 views

Problem with tor service and DNS redirection through it

I have tried to configure my ubuntu machine to resolve DNS queries through the tor network and followed the instructions from the official tor wiki https://trac.torproject.org/projects/tor/wiki/doc/...
0
votes
0answers
239 views

every time I try to open a few sites our work place ISP shows msg below. plus am using Tor browser but my public IP being shown is that of my ISP

Your connection is not secure The owner of www.xxx.com has configured their website improperly. To protect your information from being stolen, Tor Browser has not connected to this website.
0
votes
1answer
67 views

tor doesn't open dns port

I try to create a middlebox to redirect tor trafic but i have a problem. Tor doesn't create dns port 5353 as i configured in /etc/tor/torrc VirtualAddrNetworkIPv4 10.192.0.0/10 AutomapHostsOnResolve ...
0
votes
1answer
120 views

DNS resolution on tor proxy

I have a short question regarding name resolution using the tor network. Why is the name resolution not done by the proxy, but instead by the exit node? The traffic is encrypted and anonymized either ...
-1
votes
0answers
228 views

tor failing to resolve some(specific) dns records

I'm having a strange problem with torsocks and resolving some dns records - one of the example i've managed to replicate on torsocks v2.2.0 and v2.1., tor version 0.2.9.11 (git-aa8950022562be76), ...
1
vote
1answer
115 views

Clearing the client side DNS cache provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
4
votes
1answer
248 views

Signal NEWNYM vs Stream isolation

Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
0
votes
1answer
149 views

Specify custom DNS server

Is it possible to specify a custom DNS server so that the targeted website can see it? Otherwise ExitNodes {us} is useless if the website is geoblocking by DNS flag which is not shown clearly most of ...
2
votes
1answer
592 views

Checking for DNS leak on TOR router

I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
3
votes
1answer
370 views

What does the logged Tor warning “Onion address foo requested from a port with .onion disabled” mean?

I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
2
votes
1answer
506 views

Set a tor server behind http proxy

I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine. Log output: $ cat /var/log/tor/log Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
5
votes
1answer
251 views

Tor exit operators: What DNS do you use?

I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another ...
0
votes
1answer
76 views

Effects of CVE-2017-9445?

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445 http://openwall.com/lists/oss-security/2017/06/27/8 https://www.ubuntu.com/usn/usn-3341-1/ What does this mean for tor browser users? How ...
1
vote
2answers
50 views

Using ddclient in Whonix?

Can we use ddclient with noip.com (or other ddns services) inside a Whonix VM to connect with our media servers or SSH ports? I know pointing an .onion at our local server makes more sense, but I'm ...
1
vote
0answers
238 views

Tor failed to establish a Tor network connection. Establishing an encrypted directory connection failed (done - 0.0.2.0:3) [duplicate]

Can anyone help me out. My Tor Browser was working perfectly fine until I did an update for my windows 7 laptop. Now i keep getting an error message mentioning failing to establish connection. I have ...
1
vote
1answer
785 views

Does tor hide traffic from DNS servers? [duplicate]

I am wondering if when using Tor my requests are hidden from my DNS servers. For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing? I am ...
1
vote
2answers
174 views

How is tor traffic exempt from censorship/a country's DNS servers?

This is my understanding around how Tor may be used to circumvent a country's censorship of particular sites: John lives in a country that has blocked traffic to a particular server (via DNS, I ...
2
votes
1answer
3k views

Torsocks vs Proxychains?

I often alternate between torsocks/proxychains when using wget, youtube-dl, gpg2, ssh, pacman and more [non-multithreading] applications. If torsocks breaks or seems abnormally slow, I'll likely try ...
0
votes
0answers
207 views

DuckDuckGo Becomes Default Search Provider for Tor Browser …but the .onion is gone?

I know we can put it back on there, but we shouldn't have to, https://3g2upl4pq6kufc4m.onion/ should be the default! It was the .onion when it wasn't the default.. But why is it the .com now?? Let ...
0
votes
2answers
288 views

Why I test dns servers with tor and always show google dns or open dns

Why I test dns servers with tor and always show google dns or open dns? is it mean tor is not anonymous any more?
0
votes
2answers
202 views

Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?

This my second question is a continuation of my first one. Setup is default Kali 2 and configured anonymous user from TransparentProxy manual on it. While I'm using nameserver 127.0.0.1 in /etc/...
1
vote
1answer
427 views

resolving onion domains partially fails

Init: For user anonymous configured transpared proxy. Wireshark sniffing lo... Trying to use console network-tools torified. anonymous@kali:/tmp$ time strace -s6000 -t -f dig facebookcorewwwi....
1
vote
0answers
118 views

Use .onion with iPhone

I've successfully setup a way to access the tor network via my iPhone. The only thing that's missing is .onion links. I assume that the DNS lookup fails because its not a real world valid domain ...
3
votes
1answer
196 views

Is it a better practise to use DNSCrypt over Tor or is it useless?

DNSCrypt already gives you a protection layers against Man-in-the-middle attacks and should obscure your the traffic your ISP sees.. is it, combined with Tor, a good extra protection or does Tor ...
3
votes
1answer
600 views

How to only use Tor to resolve DNS queries

I use want to anonymize my DNS requests ; I've tried to put DNSPort 53 in torrc, restarting the tor daemon and polipo, even restarting my computer. By using nestat -atop I can't see any daemon ...
1
vote
2answers
3k views

How to prevent DNS leaks? [duplicate]

How do I know if my applications are leaking DNS and what are the methods preventing Tor DNS leaks? This question is not about all traffic as asked here, and not about testing it, but it's specific ...
1
vote
2answers
121 views

Will Tor work in an “openDNS” system

Will Tor work with an "openDNS" system? Does openDNS open my (computer) to access and snooping by the openDNS application? thanks --
1
vote
1answer
179 views

Internet only works with tor enabled

I installed tor, then wanted to configure my firefox browser to work with tor. I had to do this as to use python/firefox anonymously to scrape data. I was successfully able to use tor through ...
1
vote
1answer
312 views

Is it useful to install DNSCrypt-proxy with Tor?

Is it useful to install DNSCrypt-proxy when we already have Tor? Does the ISP knows my internet queries when I use Tor?
5
votes
2answers
741 views

Tor, Bridges, and DNS Leaks

Recently I've been looking to follow good-practices while browsing the internet (e.g 50%+ of my browsing in through a VPN, 10%+ is through Tor). Now, I am looking to increase my regiment by tinkering ...
1
vote
1answer
2k views

torrc DNSPort 53 - Tor browser will not start / Ubuntu 15

I try to set up a local redirection through tor as described here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy My system is Ubuntu 15.04. Fresh Tor installation works fine. ...
6
votes
2answers
455 views

How does Tor handle DNS poisoning?

Tor uses an exit node to resolve DNS as per How does Tor route DNS requests?. Isn't it very easy for the exit node to serve a fake website by DNS poisoning? How does Tor handle this threat?
1
vote
1answer
112 views

Can I safely log in to google account without an issue?

Google always sends an email if i sign in from a different IP?, Any ideas?
4
votes
3answers
1k views

No-ip alongside Tor

Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer who is behind a NAT ? Do I have to enable the "no-ip" service on my router or do I have to make a port forward ?
3
votes
1answer
1k views

Orbot DNS leak problem

I tried to use Orbot on my Android phone in VPN mode (no extra settings added or anything). It turned out that it leaks DNS with Chrome browser (I checked it with dnsleak.com). Is it possible to fix ...
5
votes
3answers
1k views

How do I resolve DNS using Tor?

I don't want my traffic to be proxied though Tor, but I want to anonymize DNS requests. How do I use Tor as a DNS server?
1
vote
1answer
96 views

DNS have an answer that isn't supposed to exist

I've set up my relay on my PC but I'm trying to create a relay on a raspberry pi that I can leave powered on at all times but when I start the daemon I get: [notice] Your DNS provider gave an ...
2
votes
5answers
158 views

How do I revoke a .onion address?

Can I revoke a .onion address, to "open it" back up for registration? It is possible, in the world of certificate authorities, to maintain revocation lists for keys that have been compromised or are ...
2
votes
1answer
719 views

Debian-based: torsocks + Chromium-browser = DNS Leakage?

System: latest Kali ( Debian-based ) $ torsocks chromium-browser 00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting. 00:00:00 ...
1
vote
1answer
111 views

Do DNS servers know sensitive info about me?

I made a mistake. I used Tor proxy in Firefox settings to access the web through Tor, but I forgot to check the Remote DNS. Tor logs warned me that some of my applications may use their own DNS. The ...
6
votes
1answer
2k views

Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?

I'm reading here about Tor's 'DNS' resolving mechanisms (for both clearnet and hidden services) . The mechanism for connecting to a hidden service itself (via a rendezvous point in a 7-hop circuit ...
5
votes
0answers
308 views

Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?

I use Whonix. I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...