Want to help moderate this community? We need more candidates in the ongoing election!

Questions tagged [dns]

Domain Name System (DNS) translates word-based domain and host names to numerical IP addresses.

Filter by
Sorted by
Tagged with
42
votes
3answers
46k views

How does Tor route DNS requests?

Tor can only handle TCP connections, but DNS is a UDP protocol. How does Tor route DNS requests over its TCP based network? Why can the same approach not be used to route all UDP traffic over Tor?
21
votes
1answer
15k views

.onion Domains DNS lookup

How does Tor resolve .onion Domains? Are there also some central DNS servers in the Tor network that store these records? Is there a chance that two hidden services generate the same domain name?
15
votes
3answers
1k views

Register .onion as gTLD?

For some weeks in 2012, "arbitrary" gTLDs could be applied for at ICANN: On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 ...
11
votes
4answers
891 views

Good DNS services for exit nodes

Open DNS and others hijack failed DNS lookups. Some DNS services censor or block access to sites due to government or corporate coercion. Is there a list of preferred DNS servers, ones that don't ...
11
votes
3answers
1k views

How can I test an application for proxy leaks?

If I have an application that supports a SOCKS proxy, and I point it at a running Tor instance, how can I be sure that all traffic the application sends (including DNS requests) are sent through the ...
11
votes
1answer
2k views

How are domain names created in the Tor network? [duplicate]

I wonder how the .onion domain names can be created? I mean, I don't assume that there is any central domain name provider. So how and where are those addresses created?
11
votes
1answer
287 views

How would a registration of the .onion gtld impact the Tor network?

The title pretty much says it all. What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
10
votes
5answers
3k views

DNSSEC & DNSCrypt over Tor

I want to use DNSSEC and DNSCrypt with Tor. I wonder which configuration is more secure and better? SOCKS4 + dnscrypt-proxy: Forward the DNS traffic to a DNS server which I choose. Although the DNS ...
6
votes
1answer
3k views

Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?

I'm reading here about Tor's 'DNS' resolving mechanisms (for both clearnet and hidden services) . The mechanism for connecting to a hidden service itself (via a rendezvous point in a 7-hop circuit ...
6
votes
1answer
2k views

transparent proxy .onion firewall rules

I am configuring a tor hardware router as an anonymizing transparent proxy using the info here and the good news is everything is working as it should; I can connect and browse sites, dns is forwarded ...
6
votes
2answers
489 views

How does Tor handle DNS poisoning?

Tor uses an exit node to resolve DNS as per How does Tor route DNS requests?. Isn't it very easy for the exit node to serve a fake website by DNS poisoning? How does Tor handle this threat?
5
votes
3answers
2k views

How do I resolve DNS using Tor?

I don't want my traffic to be proxied though Tor, but I want to anonymize DNS requests. How do I use Tor as a DNS server?
5
votes
1answer
753 views

Does hosting a Tor hidden service also on clearnet DNS reduce privacy/security for the Tor user?

I am wondering about the anonymity and security differences in visiting an .onion site, from the user's perspective, between one that is ONLY a hidden service, and one that also points the same ...
5
votes
1answer
3k views

Why does Tor publish IP addresses of exit nodes?

I am new to Tor and currently trying to understand the architecture of onion routing. However, I came across this TorDNSEL which makes it possible (for a tool using TorDNSEL) to detect whether ...
5
votes
1answer
828 views

Tor-resolve resolve dns only once per minute for github.com

I'm trying to clone project from github via Tor. # torsocks git clone http://github/project/project.git : Could not resolve host: github.com I'm going to catch a failure of resolving of IP. Next, ...
5
votes
2answers
848 views

Tor, Bridges, and DNS Leaks

Recently I've been looking to follow good-practices while browsing the internet (e.g 50%+ of my browsing in through a VPN, 10%+ is through Tor). Now, I am looking to increase my regiment by tinkering ...
5
votes
0answers
341 views

Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?

I use Whonix. I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...
4
votes
3answers
1k views

No-ip alongside Tor

Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer who is behind a NAT ? Do I have to enable the "no-ip" service on my router or do I have to make a port forward ?
4
votes
1answer
325 views

Tor exit operators: What DNS do you use?

I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another ...
4
votes
1answer
162 views

Same DNS server for many different Tor 'idenitities'

In my browser (Iceweasel), which is running with Tor via proxychains, I changed my IP address a good few times, by restarting Tor. Each time, I did the standard test at dnsleaktest.com and, the result ...
4
votes
1answer
370 views

Finding the IP address of a hostname on a given circuit

I want the Tor to just find the address of a hostname (just give me the IP) on a given circuit without be connected to that hostname. I find that the RELAY_CONNECTED cell includes the IP address of ...
3
votes
1answer
252 views

Is it a better practise to use DNSCrypt over Tor or is it useless?

DNSCrypt already gives you a protection layers against Man-in-the-middle attacks and should obscure your the traffic your ISP sees.. is it, combined with Tor, a good extra protection or does Tor ...
3
votes
2answers
906 views

Host List Blocking

If I have a host list here:C:\WINDOWS\system32\drivers\etc\hosts for blocking malicious,& ad websites/servers. How do I make it work with Tor?
3
votes
1answer
531 views

What does the logged Tor warning “Onion address foo requested from a port with .onion disabled” mean?

I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
3
votes
1answer
707 views

How to only use Tor to resolve DNS queries

I use want to anonymize my DNS requests ; I've tried to put DNSPort 53 in torrc, restarting the tor daemon and polipo, even restarting my computer. By using nestat -atop I can't see any daemon ...
3
votes
1answer
1k views

Orbot DNS leak problem

I tried to use Orbot on my Android phone in VPN mode (no extra settings added or anything). It turned out that it leaks DNS with Chrome browser (I checked it with dnsleak.com). Is it possible to fix ...
3
votes
1answer
495 views

Is it possible to have “username@site.onion” addresses and FULLY avoid DNS with email?

I'm only just starting to look into email on Tor - and so far I'm only finding either email hosts whose sites (including webmail login) are hosted on .onion addresses, or whose POP, IMAP and SMTP ...
3
votes
0answers
419 views

DNS over HTTPS and Tor

Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...
3
votes
1answer
324 views

Signal NEWNYM vs Stream isolation

Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
2
votes
5answers
179 views

How do I revoke a .onion address?

Can I revoke a .onion address, to "open it" back up for registration? It is possible, in the world of certificate authorities, to maintain revocation lists for keys that have been compromised or are ...
2
votes
2answers
192 views

How is tor traffic exempt from censorship/a country's DNS servers?

This is my understanding around how Tor may be used to circumvent a country's censorship of particular sites: John lives in a country that has blocked traffic to a particular server (via DNS, I ...
2
votes
1answer
4k views

Torsocks vs Proxychains?

I often alternate between torsocks/proxychains when using wget, youtube-dl, gpg2, ssh, pacman and more [non-multithreading] applications. If torsocks breaks or seems abnormally slow, I'll likely try ...
2
votes
1answer
231 views

How to get IP address

I want Tor to just resolve a DNS and return the IP address before any connection to the destination server. I know that the Tor client sends a request to the exit node and the exit node does the DNS ...
2
votes
1answer
222 views

Can I run a Tor relay with Norton ConnectSafe DNS?

I am trying to contribute to Tor Network by running a non-exit relay on my PC. Via the status window, I already received the comment saying that my relay is reachable: Jan 17 01:32:13.420 [Notice] ...
2
votes
1answer
234 views

Tor Connecting to Randomly Generated Domains

I have a whole bunch of these Bro SSL logs: ts uid id.orig_h id.orig_p id.resp_h id.resp_p version cipher server_name session_id subject issuer_subject ...
2
votes
1answer
746 views

Checking for DNS leak on TOR router

I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
2
votes
1answer
1k views

Does tor hide traffic from DNS servers? [duplicate]

I am wondering if when using Tor my requests are hidden from my DNS servers. For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing? I am ...
2
votes
1answer
820 views

Debian-based: torsocks + Chromium-browser = DNS Leakage?

System: latest Kali ( Debian-based ) $ torsocks chromium-browser 00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting. 00:00:00 ...
2
votes
1answer
984 views

What exactly are Tor DNS servers?

I am using Tor for a while and I don't understand what exactly are it's DNS? I have a few website that can't be open when I use Tor because it's DNS server can't find it's IP! Can't we change it's ...
2
votes
1answer
223 views

Using TorBrowser with MadMAC's and DNS Crypt products?

Has anyone here used the TorBrowser with either the products MadMAC's or DNS Crypt? I'm currently testing or rather trying out both to determine if they offer me any added anonymity to my web ...
2
votes
1answer
640 views

Set a tor server behind http proxy

I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine. Log output: $ cat /var/log/tor/log Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
2
votes
0answers
48 views

DNS for Tor hidden services [duplicate]

I have just discovered that DNS cannot be used by Tor hidden services, is that true? Also is it possible to use DNS services of multiple servers to prevent server down time for Tor hidden service? I ...
1
vote
2answers
4k views

How to prevent DNS leaks? [duplicate]

How do I know if my applications are leaking DNS and what are the methods preventing Tor DNS leaks? This question is not about all traffic as asked here, and not about testing it, but it's specific ...
1
vote
2answers
133 views

Will Tor work in an “openDNS” system

Will Tor work with an "openDNS" system? Does openDNS open my (computer) to access and snooping by the openDNS application? thanks --
1
vote
1answer
94 views

DNS in Tor and Tor Browser

If I look for DNS leaks when using Tor Browser, I find none. For example, if I connect to https://dnsleaktest.com in Tor Browser, using even the most lax of the security settings, the DNS servers that ...
1
vote
1answer
651 views

What is up with these longer onion addresses?

Some number of years ago, I heard that one of the reasons that Tor does not allow anything longer than a 1024-bit RSA key as an onion service's private key is because the address would be a lot longer,...
1
vote
2answers
258 views

Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?

This my second question is a continuation of my first one. Setup is default Kali 2 and configured anonymous user from TransparentProxy manual on it. While I'm using nameserver 127.0.0.1 in /etc/...
1
vote
1answer
120 views

Do DNS servers know sensitive info about me?

I made a mistake. I used Tor proxy in Firefox settings to access the web through Tor, but I forgot to check the Remote DNS. Tor logs warned me that some of my applications may use their own DNS. The ...
1
vote
1answer
239 views

Cloudflare's new .onion DNS resolver?

Cloudflare recently announced their new "hidden DNS resolver". https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/ I'm wondering if it can be used with the tor browser or the ...
1
vote
1answer
152 views

Clearing the client side DNS cache provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...