Questions tagged [dns]
Domain Name System (DNS) translates word-based domain and host names to numerical IP addresses.
81 questions
0
votes
1
answer
245
views
Tor on Linux. DNAT port 53 DNS requests to TOR DNS listener port set to 9041 on 127.0.0.1 with iptables. tcpdump shows my def gateway replies. strange
Tor on Linux. DNAT port 53 DNS requests to TOR DNS listener port set to 9041 on 127.0.0.1 with iptables. tcpdump shows my default gateway answers to same client port.
[root@localhost memyself]# ...
- 1
1
vote
1
answer
208
views
Local DNS for SOCKS5
I want to use dnscrypt proxy for queries, but it's not working on tor.
Same question as this
I found this solution
Firefox is working properly.
I also tried privoxy over tor but not working as I ...
- 11
0
votes
1
answer
694
views
How to use torsocks with python urllib3 and along a domain name where ipv6 is availaible ? Or rather disable ɪᴘᴠ6 in that case?
Simply trying to access en.wikipedia.org with a python script where a huge stack of dependencies prevents configuring a proxy (would take a year in order to rewrite dependencies for getting proxy ...
- 101
0
votes
1
answer
164
views
Tor Browser's "new circuit": SSL session, DNS cache, and other details
If I understand correctly Tor Browser's "new circuit" attaches new connections to a new circuit while letting old connections finish in the old circuit. It does not clear out cookies, so ...
1
vote
1
answer
553
views
Tor over VPN with DNS leak
Lets say i'm using a vpn that have a DNS leak (and it shows my ISP ip for example), then I use the tor browser to browse the clear net (even HTTP sites, not only HTTPS) over that VPN.
Does ISP know ...
- 19
0
votes
3
answers
508
views
Can DNS be tracked in tor?
can DNS be tracked if I am using TOR without using more protection like VPN? For example, If someone tries to target me and have a DNS lookup, it will show my original DNS or I need to change it?
...
- 1
0
votes
1
answer
432
views
How to prevent DNS Spoofing attacks with Tor?
This question is an extension of How does Tor handle DNS poisoning.
After having read Introducing DNS Resolver for Tor and DNS security issues, I am a bit concerned about the riscs of using Tor (...
- 15
1
vote
2
answers
291
views
Are .onion sites decentralized?
Blockchain technology has given rise to something called "decentralized domains" like .crypto that cannot be censored, nor rented (in the case of namebase.io), unlike DNS domains like .com
...
- 272
1
vote
0
answers
3k
views
How is a .onion URL resolved?
I am interested in how a .onion url is resolved to a server in the Tor network. In the normal internet there is DNS, which is not used on the Tor network. How does the name resolution work there?
0
votes
0
answers
354
views
Temporary failure in name resolution
I keep getting dns errors when running scripts in the terminal.
Normal dns resolving in the tor browser (and chromium) works as it is supposed to though.
user@host:~$ ping google.de
ping: google.de:...
1
vote
1
answer
142
views
Autodiscovery of Hidden Services Given a Domain or a Website
IPFS has DNSLink and Dat has .well-known/dat for the autodiscovery of the content on their networks given a domain name (or a website in Dat's case).
So for instance, when a user visits http://...
- 115
0
votes
1
answer
329
views
make a TOR url act like Alias in DNS
I have a onion domain private key and registered a clearnet website hosting on namecheap.com
Now I want to make the onion domain work like alias to the clearnet url like the Alias DNS record.
How ...
- 105
0
votes
1
answer
317
views
How to find onion address?
Hello I'm newbie to onion protocol.
Tor(Onion) protocol is basically consist of three nodes for my anonymity connection.
However, in this point, we have to clarify HOW TO FIND ENTRY GUARD before ...
- 103
0
votes
2
answers
585
views
Tor error "DNS resolving failed"
Tor is last version. When paste any .onion address I see this:
ERROR: Not Found
While trying to retrieve the URL http://site.onion/ (normal onion address, that actually works fine):
DNS resolving ...
- 1
0
votes
1
answer
775
views
Can I use DNS over TLS or DNS over HTTPS in Tor Browser, executed from Tails?
There has long been an effort to encrypt DNS queries between the client and the recursive server to increase privacy. Firefox already supports DNS-over-HTTPS. But is Tor Browser, executed from Tails, ...
- 33
1
vote
1
answer
10k
views
DNS in Tor and Tor Browser
If I look for DNS leaks when using Tor Browser, I find none. For example, if I connect to https://dnsleaktest.com in Tor Browser, using even the most lax of the security settings, the DNS servers that ...
- 774
4
votes
1
answer
2k
views
DNS over HTTPS and Tor
Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...
user23257
2
votes
1
answer
3k
views
What is up with these longer onion addresses?
Some number of years ago, I heard that one of the reasons that Tor does not allow anything longer than a 1024-bit RSA key as an onion service's private key is because the address would be a lot longer,...
- 125
1
vote
1
answer
815
views
Cloudflare's new .onion DNS resolver?
Cloudflare recently announced their new "hidden DNS resolver".
https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/
I'm wondering if it can be used with the tor browser or the ...
- 11
0
votes
1
answer
842
views
tor doesn't open dns port
I try to create a middlebox to redirect tor trafic but i have a problem. Tor doesn't create dns port 5353 as i configured in /etc/tor/torrc
VirtualAddrNetworkIPv4 10.192.0.0/10
AutomapHostsOnResolve ...
- 1
0
votes
1
answer
634
views
DNS resolution on tor proxy
I have a short question regarding name resolution using the tor network.
Why is the name resolution not done by the proxy, but instead by the exit node?
The traffic is encrypted and anonymized either ...
- 3
1
vote
1
answer
370
views
Clearing the client side DNS cache provides privacy improvement?
Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
- 173
3
votes
1
answer
873
views
Signal NEWNYM vs Stream isolation
Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
- 173
0
votes
1
answer
687
views
Specify custom DNS server
Is it possible to specify a custom DNS server so that the targeted website can see it? Otherwise ExitNodes {us} is useless if the website is geoblocking by DNS flag which is not shown clearly most of ...
- 101
2
votes
1
answer
1k
views
Checking for DNS leak on TOR router
I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
- 21
4
votes
1
answer
2k
views
What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?
I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
- 181
4
votes
1
answer
1k
views
Set a tor server behind http proxy
I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine.
Log output:
$ cat /var/log/tor/log
Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
- 41
4
votes
1
answer
465
views
Tor exit operators: What DNS do you use?
I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another ...
0
votes
1
answer
83
views
Effects of CVE-2017-9445?
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445
http://openwall.com/lists/oss-security/2017/06/27/8
https://www.ubuntu.com/usn/usn-3341-1/
What does this mean for tor browser users? How ...
2
votes
2
answers
72
views
Using ddclient in Whonix?
Can we use ddclient with noip.com (or other ddns services) inside a Whonix VM to connect with our media servers or SSH ports?
I know pointing an .onion at our local server makes more sense, but I'm ...
- 21
1
vote
0
answers
239
views
Tor failed to establish a Tor network connection. Establishing an encrypted directory connection failed (done - 0.0.2.0:3) [duplicate]
Can anyone help me out. My Tor Browser was working perfectly fine until I did an update for my windows 7 laptop. Now i keep getting an error message mentioning failing to establish connection.
I have ...
2
votes
1
answer
2k
views
Does tor hide traffic from DNS servers? [duplicate]
I am wondering if when using Tor my requests are hidden from my DNS servers.
For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing?
I am ...
user14025
2
votes
2
answers
288
views
How is tor traffic exempt from censorship/a country's DNS servers?
This is my understanding around how Tor may be used to circumvent a country's censorship of particular sites:
John lives in a country that has blocked traffic to a particular server (via DNS, I ...
- 123
3
votes
1
answer
7k
views
Torsocks vs Proxychains?
I often alternate between torsocks/proxychains when using wget, youtube-dl, gpg2, ssh, pacman and more [non-multithreading] applications. If torsocks breaks or seems abnormally slow, I'll likely try ...
- 31
0
votes
2
answers
555
views
Why I test dns servers with tor and always show google dns or open dns
Why I test dns servers with tor and always show google dns or open dns? is it mean tor is not anonymous any more?
- 25
1
vote
2
answers
491
views
Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?
This my second question is a continuation of my first one.
Setup is default Kali 2 and configured anonymous user from TransparentProxy manual on it.
While I'm using nameserver 127.0.0.1 in /etc/...
- 33
1
vote
1
answer
995
views
resolving onion domains partially fails
Init:
For user anonymous configured transpared proxy.
Wireshark sniffing lo...
Trying to use console network-tools torified.
anonymous@kali:/tmp$ time strace -s6000 -t -f dig facebookcorewwwi....
- 33
1
vote
0
answers
341
views
Use .onion with iPhone
I've successfully setup a way to access the tor network via my iPhone. The only thing that's missing is .onion links. I assume that the DNS lookup fails because its not a real world valid domain ...
- 11
3
votes
1
answer
850
views
Is it a better practise to use DNSCrypt over Tor or is it useless?
DNSCrypt already gives you a protection layers against Man-in-the-middle attacks and should obscure your the traffic your ISP sees.. is it, combined with Tor, a good extra protection or does Tor ...
- 31
3
votes
1
answer
1k
views
How to only use Tor to resolve DNS queries
I use want to anonymize my DNS requests ;
I've tried to put DNSPort 53 in torrc, restarting the tor daemon and polipo, even restarting my computer.
By using nestat -atop I can't see any daemon ...
- 33
1
vote
2
answers
6k
views
How to prevent DNS leaks? [duplicate]
How do I know if my applications are leaking DNS and what are the methods preventing Tor DNS leaks?
This question is not about all traffic as asked here, and not about testing it, but it's specific ...
- 1,193
1
vote
2
answers
186
views
Will Tor work in an "openDNS" system
Will Tor work with an "openDNS" system?
Does openDNS open my (computer) to access and snooping by the openDNS application?
thanks --
- 11
1
vote
1
answer
817
views
Internet only works with tor enabled
I installed tor, then wanted to configure my firefox browser to work with tor. I had to do this as to use python/firefox anonymously to scrape data. I was successfully able to use tor through ...
- 121
1
vote
1
answer
683
views
Is it useful to install DNSCrypt-proxy with Tor?
Is it useful to install DNSCrypt-proxy when we already have Tor?
Does the ISP knows my internet queries when I use Tor?
- 63
4
votes
2
answers
2k
views
Tor, Bridges, and DNS Leaks
Recently I've been looking to follow good-practices while browsing the internet (e.g 50%+ of my browsing in through a VPN, 10%+ is through Tor). Now, I am looking to increase my regiment by tinkering ...
- 141
1
vote
1
answer
4k
views
torrc DNSPort 53 - Tor browser will not start / Ubuntu 15
I try to set up a local redirection through tor as described here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy
My system is Ubuntu 15.04. Fresh Tor installation works fine. ...
- 111
6
votes
2
answers
844
views
How does Tor handle DNS poisoning?
Tor uses an exit node to resolve DNS as per How does Tor route DNS requests?. Isn't it very easy for the exit node to serve a fake website by DNS poisoning? How does Tor handle this threat?
- 61
1
vote
1
answer
143
views
Can I safely log in to google account without an issue?
Google always sends an email if i sign in from a different IP?, Any ideas?
- 11
4
votes
3
answers
2k
views
No-ip alongside Tor
Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer who is behind a NAT ? Do I have to enable the "no-ip" service on my router or do I have to make a port forward ?
- 41
3
votes
1
answer
3k
views
Orbot DNS leak problem
I tried to use Orbot on my Android phone in VPN mode (no extra settings added or anything). It turned out that it leaks DNS with Chrome browser (I checked it with dnsleak.com). Is it possible to fix ...
- 31