Want to help moderate this community? We need more candidates in the ongoing election!

Questions tagged [dns]

Domain Name System (DNS) translates word-based domain and host names to numerical IP addresses.

Filter by
Sorted by
Tagged with
0
votes
1answer
21 views

Can I use DNS over TLS or DNS over HTTPS in Tor Browser, executed from Tails?

There has long been an effort to encrypt DNS queries between the client and the recursive server to increase privacy. Firefox already supports DNS-over-HTTPS. But is Tor Browser, executed from Tails, ...
1
vote
1answer
100 views

DNS in Tor and Tor Browser

If I look for DNS leaks when using Tor Browser, I find none. For example, if I connect to https://dnsleaktest.com in Tor Browser, using even the most lax of the security settings, the DNS servers that ...
0
votes
0answers
38 views

Can't resolve .onion addresses using built in DNS resolver

I am setting up an isolating proxy. Machine 1 is connected to the Internet, runs tor and has SOCKSPort and DNSPort configured to listen on a network interface that is a direct connection to Machine 2. ...
0
votes
0answers
10 views

Which DNS i should setting for my VM in Tor? [duplicate]

Can i set a dns such CloudFlare 1.1.1.1 for Tor using VM? Or Tor have a personal DNS?
0
votes
0answers
27 views

How can I set up DNS server(proxy?) on my Windows 10?

According to Tor DNS guide here I can use Tor to query DNS record. I have installed Tor 32bit service but I can't find "torrc" file. Can someone tell me where is this file?
3
votes
0answers
420 views

DNS over HTTPS and Tor

Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...
1
vote
1answer
664 views

What is up with these longer onion addresses?

Some number of years ago, I heard that one of the reasons that Tor does not allow anything longer than a 1024-bit RSA key as an onion service's private key is because the address would be a lot longer,...
1
vote
1answer
242 views

Cloudflare's new .onion DNS resolver?

Cloudflare recently announced their new "hidden DNS resolver". https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/ I'm wondering if it can be used with the tor browser or the ...
0
votes
1answer
134 views

tor doesn't open dns port

I try to create a middlebox to redirect tor trafic but i have a problem. Tor doesn't create dns port 5353 as i configured in /etc/tor/torrc VirtualAddrNetworkIPv4 10.192.0.0/10 AutomapHostsOnResolve ...
0
votes
1answer
226 views

DNS resolution on tor proxy

I have a short question regarding name resolution using the tor network. Why is the name resolution not done by the proxy, but instead by the exit node? The traffic is encrypted and anonymized either ...
1
vote
1answer
154 views

Clearing the client side DNS cache provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
3
votes
1answer
324 views

Signal NEWNYM vs Stream isolation

Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
0
votes
1answer
239 views

Specify custom DNS server

Is it possible to specify a custom DNS server so that the targeted website can see it? Otherwise ExitNodes {us} is useless if the website is geoblocking by DNS flag which is not shown clearly most of ...
2
votes
1answer
748 views

Checking for DNS leak on TOR router

I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
3
votes
1answer
534 views

What does the logged Tor warning “Onion address foo requested from a port with .onion disabled” mean?

I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
2
votes
1answer
640 views

Set a tor server behind http proxy

I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine. Log output: $ cat /var/log/tor/log Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
4
votes
1answer
325 views

Tor exit operators: What DNS do you use?

I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another ...
0
votes
1answer
76 views

Effects of CVE-2017-9445?

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445 http://openwall.com/lists/oss-security/2017/06/27/8 https://www.ubuntu.com/usn/usn-3341-1/ What does this mean for tor browser users? How ...
1
vote
2answers
51 views

Using ddclient in Whonix?

Can we use ddclient with noip.com (or other ddns services) inside a Whonix VM to connect with our media servers or SSH ports? I know pointing an .onion at our local server makes more sense, but I'm ...
1
vote
0answers
239 views

Tor failed to establish a Tor network connection. Establishing an encrypted directory connection failed (done - 0.0.2.0:3) [duplicate]

Can anyone help me out. My Tor Browser was working perfectly fine until I did an update for my windows 7 laptop. Now i keep getting an error message mentioning failing to establish connection. I have ...
2
votes
1answer
1k views

Does tor hide traffic from DNS servers? [duplicate]

I am wondering if when using Tor my requests are hidden from my DNS servers. For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing? I am ...
2
votes
2answers
192 views

How is tor traffic exempt from censorship/a country's DNS servers?

This is my understanding around how Tor may be used to circumvent a country's censorship of particular sites: John lives in a country that has blocked traffic to a particular server (via DNS, I ...
2
votes
1answer
4k views

Torsocks vs Proxychains?

I often alternate between torsocks/proxychains when using wget, youtube-dl, gpg2, ssh, pacman and more [non-multithreading] applications. If torsocks breaks or seems abnormally slow, I'll likely try ...
0
votes
2answers
315 views

Why I test dns servers with tor and always show google dns or open dns

Why I test dns servers with tor and always show google dns or open dns? is it mean tor is not anonymous any more?
1
vote
2answers
259 views

Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?

This my second question is a continuation of my first one. Setup is default Kali 2 and configured anonymous user from TransparentProxy manual on it. While I'm using nameserver 127.0.0.1 in /etc/...
1
vote
1answer
539 views

resolving onion domains partially fails

Init: For user anonymous configured transpared proxy. Wireshark sniffing lo... Trying to use console network-tools torified. anonymous@kali:/tmp$ time strace -s6000 -t -f dig facebookcorewwwi....
1
vote
0answers
144 views

Use .onion with iPhone

I've successfully setup a way to access the tor network via my iPhone. The only thing that's missing is .onion links. I assume that the DNS lookup fails because its not a real world valid domain ...
3
votes
1answer
254 views

Is it a better practise to use DNSCrypt over Tor or is it useless?

DNSCrypt already gives you a protection layers against Man-in-the-middle attacks and should obscure your the traffic your ISP sees.. is it, combined with Tor, a good extra protection or does Tor ...
3
votes
1answer
707 views

How to only use Tor to resolve DNS queries

I use want to anonymize my DNS requests ; I've tried to put DNSPort 53 in torrc, restarting the tor daemon and polipo, even restarting my computer. By using nestat -atop I can't see any daemon ...
1
vote
2answers
4k views

How to prevent DNS leaks? [duplicate]

How do I know if my applications are leaking DNS and what are the methods preventing Tor DNS leaks? This question is not about all traffic as asked here, and not about testing it, but it's specific ...
1
vote
2answers
134 views

Will Tor work in an “openDNS” system

Will Tor work with an "openDNS" system? Does openDNS open my (computer) to access and snooping by the openDNS application? thanks --
1
vote
1answer
263 views

Internet only works with tor enabled

I installed tor, then wanted to configure my firefox browser to work with tor. I had to do this as to use python/firefox anonymously to scrape data. I was successfully able to use tor through ...
1
vote
1answer
349 views

Is it useful to install DNSCrypt-proxy with Tor?

Is it useful to install DNSCrypt-proxy when we already have Tor? Does the ISP knows my internet queries when I use Tor?
5
votes
2answers
850 views

Tor, Bridges, and DNS Leaks

Recently I've been looking to follow good-practices while browsing the internet (e.g 50%+ of my browsing in through a VPN, 10%+ is through Tor). Now, I am looking to increase my regiment by tinkering ...
1
vote
1answer
2k views

torrc DNSPort 53 - Tor browser will not start / Ubuntu 15

I try to set up a local redirection through tor as described here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy My system is Ubuntu 15.04. Fresh Tor installation works fine. ...
6
votes
2answers
489 views

How does Tor handle DNS poisoning?

Tor uses an exit node to resolve DNS as per How does Tor route DNS requests?. Isn't it very easy for the exit node to serve a fake website by DNS poisoning? How does Tor handle this threat?
1
vote
1answer
114 views

Can I safely log in to google account without an issue?

Google always sends an email if i sign in from a different IP?, Any ideas?
4
votes
3answers
1k views

No-ip alongside Tor

Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer who is behind a NAT ? Do I have to enable the "no-ip" service on my router or do I have to make a port forward ?
3
votes
1answer
1k views

Orbot DNS leak problem

I tried to use Orbot on my Android phone in VPN mode (no extra settings added or anything). It turned out that it leaks DNS with Chrome browser (I checked it with dnsleak.com). Is it possible to fix ...
5
votes
3answers
2k views

How do I resolve DNS using Tor?

I don't want my traffic to be proxied though Tor, but I want to anonymize DNS requests. How do I use Tor as a DNS server?
1
vote
1answer
98 views

DNS have an answer that isn't supposed to exist

I've set up my relay on my PC but I'm trying to create a relay on a raspberry pi that I can leave powered on at all times but when I start the daemon I get: [notice] Your DNS provider gave an ...
2
votes
5answers
179 views

How do I revoke a .onion address?

Can I revoke a .onion address, to "open it" back up for registration? It is possible, in the world of certificate authorities, to maintain revocation lists for keys that have been compromised or are ...
2
votes
1answer
824 views

Debian-based: torsocks + Chromium-browser = DNS Leakage?

System: latest Kali ( Debian-based ) $ torsocks chromium-browser 00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting. 00:00:00 ...
1
vote
1answer
121 views

Do DNS servers know sensitive info about me?

I made a mistake. I used Tor proxy in Firefox settings to access the web through Tor, but I forgot to check the Remote DNS. Tor logs warned me that some of my applications may use their own DNS. The ...
6
votes
1answer
3k views

Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?

I'm reading here about Tor's 'DNS' resolving mechanisms (for both clearnet and hidden services) . The mechanism for connecting to a hidden service itself (via a rendezvous point in a 7-hop circuit ...
5
votes
0answers
342 views

Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?

I use Whonix. I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...
2
votes
0answers
48 views

DNS for Tor hidden services [duplicate]

I have just discovered that DNS cannot be used by Tor hidden services, is that true? Also is it possible to use DNS services of multiple servers to prevent server down time for Tor hidden service? I ...
4
votes
1answer
163 views

Same DNS server for many different Tor 'idenitities'

In my browser (Iceweasel), which is running with Tor via proxychains, I changed my IP address a good few times, by restarting Tor. Each time, I did the standard test at dnsleaktest.com and, the result ...
2
votes
1answer
223 views

Can I run a Tor relay with Norton ConnectSafe DNS?

I am trying to contribute to Tor Network by running a non-exit relay on my PC. Via the status window, I already received the comment saying that my relay is reachable: Jan 17 01:32:13.420 [Notice] ...
5
votes
1answer
754 views

Does hosting a Tor hidden service also on clearnet DNS reduce privacy/security for the Tor user?

I am wondering about the anonymity and security differences in visiting an .onion site, from the user's perspective, between one that is ONLY a hidden service, and one that also points the same ...