Questions tagged [dns]
Domain Name System (DNS) translates word-based domain and host names to numerical IP addresses.
81
questions
3
votes
1
answer
7k
views
Torsocks vs Proxychains?
I often alternate between torsocks/proxychains when using wget, youtube-dl, gpg2, ssh, pacman and more [non-multithreading] applications. If torsocks breaks or seems abnormally slow, I'll likely try ...
- 105
0
votes
1
answer
127
views
Tor on Linux. DNAT port 53 DNS requests to TOR DNS listener port set to 9041 on 127.0.0.1 with iptables. tcpdump shows my def gateway replies. strange
Tor on Linux. DNAT port 53 DNS requests to TOR DNS listener port set to 9041 on 127.0.0.1 with iptables. tcpdump shows my default gateway answers to same client port.
[root@localhost memyself]# ...
- 1
1
vote
1
answer
150
views
Local DNS for SOCKS5
I want to use dnscrypt proxy for queries, but it's not working on tor.
Same question as this
I found this solution
Firefox is working properly.
I also tried privoxy over tor but not working as I ...
- 190
0
votes
1
answer
468
views
How to use torsocks with python urllib3 and along a domain name where ipv6 is availaible ? Or rather disable ɪᴘᴠ6 in that case?
Simply trying to access en.wikipedia.org with a python script where a huge stack of dependencies prevents configuring a proxy (would take a year in order to rewrite dependencies for getting proxy ...
- 101
0
votes
2
answers
517
views
Tor error "DNS resolving failed"
Tor is last version. When paste any .onion address I see this:
ERROR: Not Found
While trying to retrieve the URL http://site.onion/ (normal onion address, that actually works fine):
DNS resolving ...
CommunityBot
- 1
0
votes
3
answers
408
views
Can DNS be tracked in tor?
can DNS be tracked if I am using TOR without using more protection like VPN? For example, If someone tries to target me and have a DNS lookup, it will show my original DNS or I need to change it?
...
CommunityBot
- 1
2
votes
1
answer
1k
views
Checking for DNS leak on TOR router
I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
- 1
0
votes
1
answer
726
views
Can I use DNS over TLS or DNS over HTTPS in Tor Browser, executed from Tails?
There has long been an effort to encrypt DNS queries between the client and the recursive server to increase privacy. Firefox already supports DNS-over-HTTPS. But is Tor Browser, executed from Tails, ...
CommunityBot
- 1
1
vote
1
answer
439
views
Tor over VPN with DNS leak
Lets say i'm using a vpn that have a DNS leak (and it shows my ISP ip for example), then I use the tor browser to browse the clear net (even HTTP sites, not only HTTPS) over that VPN.
Does ISP know ...
CommunityBot
- 1
0
votes
1
answer
148
views
Tor Browser's "new circuit": SSL session, DNS cache, and other details
If I understand correctly Tor Browser's "new circuit" attaches new connections to a new circuit while letting old connections finish in the old circuit. It does not clear out cookies, so ...
- 5,900
1
vote
2
answers
248
views
Are .onion sites decentralized?
Blockchain technology has given rise to something called "decentralized domains" like .crypto that cannot be censored, nor rented (in the case of namebase.io), unlike DNS domains like .com
...
- 21
0
votes
1
answer
297
views
make a TOR url act like Alias in DNS
I have a onion domain private key and registered a clearnet website hosting on namecheap.com
Now I want to make the onion domain work like alias to the clearnet url like the Alias DNS record.
How ...
CommunityBot
- 1
7
votes
1
answer
572
views
Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?
I use Whonix.
I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...
CommunityBot
- 1
4
votes
1
answer
1k
views
Set a tor server behind http proxy
I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine.
Log output:
$ cat /var/log/tor/log
Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
CommunityBot
- 1
0
votes
1
answer
317
views
How to prevent DNS Spoofing attacks with Tor?
This question is an extension of How does Tor handle DNS poisoning.
After having read Introducing DNS Resolver for Tor and DNS security issues, I am a bit concerned about the riscs of using Tor (...
- 326
1
vote
0
answers
2k
views
How is a .onion URL resolved?
I am interested in how a .onion url is resolved to a server in the Tor network. In the normal internet there is DNS, which is not used on the Tor network. How does the name resolution work there?
0
votes
1
answer
730
views
tor doesn't open dns port
I try to create a middlebox to redirect tor trafic but i have a problem. Tor doesn't create dns port 5353 as i configured in /etc/tor/torrc
VirtualAddrNetworkIPv4 10.192.0.0/10
AutomapHostsOnResolve ...
CommunityBot
- 1
1
vote
1
answer
138
views
Autodiscovery of Hidden Services Given a Domain or a Website
IPFS has DNSLink and Dat has .well-known/dat for the autodiscovery of the content on their networks given a domain name (or a website in Dat's case).
So for instance, when a user visits http://...
- 3,112
0
votes
0
answers
306
views
Temporary failure in name resolution
I keep getting dns errors when running scripts in the terminal.
Normal dns resolving in the tor browser (and chromium) works as it is supposed to though.
user@host:~$ ping google.de
ping: google.de:...
9
votes
2
answers
6k
views
Why does Tor publish IP addresses of exit nodes?
I am new to Tor and currently trying to understand the architecture of onion routing. However, I came across this TorDNSEL which makes it possible (for a tool using TorDNSEL) to detect whether ...
- 1
0
votes
1
answer
286
views
How to find onion address?
Hello I'm newbie to onion protocol.
Tor(Onion) protocol is basically consist of three nodes for my anonymity connection.
However, in this point, we have to clarify HOW TO FIND ENTRY GUARD before ...
- 562
4
votes
1
answer
2k
views
DNS over HTTPS and Tor
Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...
- 562
1
vote
1
answer
9k
views
DNS in Tor and Tor Browser
If I look for DNS leaks when using Tor Browser, I find none. For example, if I connect to https://dnsleaktest.com in Tor Browser, using even the most lax of the security settings, the DNS servers that ...
- 764
3
votes
1
answer
689
views
Is it possible to have "use[email protected]" addresses and FULLY avoid DNS with email?
I'm only just starting to look into email on Tor - and so far I'm only finding either email hosts whose sites (including webmail login) are hosted on .onion addresses, or whose POP, IMAP and SMTP ...
CommunityBot
- 1
1
vote
1
answer
753
views
Cloudflare's new .onion DNS resolver?
Cloudflare recently announced their new "hidden DNS resolver".
https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/
I'm wondering if it can be used with the tor browser or the ...
2
votes
1
answer
3k
views
What is up with these longer onion addresses?
Some number of years ago, I heard that one of the reasons that Tor does not allow anything longer than a 1024-bit RSA key as an onion service's private key is because the address would be a lot longer,...
- 125
0
votes
1
answer
597
views
DNS resolution on tor proxy
I have a short question regarding name resolution using the tor network.
Why is the name resolution not done by the proxy, but instead by the exit node?
The traffic is encrypted and anonymized either ...
- 179
16
votes
3
answers
2k
views
Register .onion as gTLD?
For some weeks in 2012, "arbitrary" gTLDs could be applied for at ICANN:
On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 ...
CommunityBot
- 1
3
votes
1
answer
811
views
Signal NEWNYM vs Stream isolation
Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
- 173
1
vote
1
answer
335
views
Clearing the client side DNS cache provides privacy improvement?
Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
- 173
0
votes
1
answer
655
views
Specify custom DNS server
Is it possible to specify a custom DNS server so that the targeted website can see it? Otherwise ExitNodes {us} is useless if the website is geoblocking by DNS flag which is not shown clearly most of ...
- 10.9k
4
votes
1
answer
446
views
Tor exit operators: What DNS do you use?
I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another ...
- 5,900
4
votes
1
answer
1k
views
What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?
I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
- 181
12
votes
4
answers
1k
views
Good DNS services for exit nodes
Open DNS and others hijack failed DNS lookups. Some DNS services censor or block access to sites due to government or corporate coercion. Is there a list of preferred DNS servers, ones that don't ...
53
votes
3
answers
73k
views
How does Tor route DNS requests?
Tor can only handle TCP connections, but DNS is a UDP protocol. How does Tor route DNS requests over its TCP based network? Why can the same approach not be used to route all UDP traffic over Tor?
0
votes
1
answer
83
views
Effects of CVE-2017-9445?
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445
http://openwall.com/lists/oss-security/2017/06/27/8
https://www.ubuntu.com/usn/usn-3341-1/
What does this mean for tor browser users? How ...
- 8,561
5
votes
3
answers
5k
views
How do I resolve DNS using Tor?
I don't want my traffic to be proxied though Tor, but I want to anonymize DNS requests. How do I use Tor as a DNS server?
- 111
26
votes
1
answer
25k
views
.onion Domains DNS lookup
How does Tor resolve .onion Domains? Are there also some central DNS servers in the Tor network that store these records? Is there a chance that two hidden services generate the same domain name?
CommunityBot
- 1
1
vote
0
answers
239
views
Tor failed to establish a Tor network connection. Establishing an encrypted directory connection failed (done - 0.0.2.0:3) [duplicate]
Can anyone help me out. My Tor Browser was working perfectly fine until I did an update for my windows 7 laptop. Now i keep getting an error message mentioning failing to establish connection.
I have ...
- 8,561
2
votes
2
answers
69
views
Using ddclient in Whonix?
Can we use ddclient with noip.com (or other ddns services) inside a Whonix VM to connect with our media servers or SSH ports?
I know pointing an .onion at our local server makes more sense, but I'm ...
- 5,900
2
votes
1
answer
2k
views
Does tor hide traffic from DNS servers? [duplicate]
I am wondering if when using Tor my requests are hidden from my DNS servers.
For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing?
I am ...
- 5,900
1
vote
2
answers
478
views
Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?
This my second question is a continuation of my first one.
Setup is default Kali 2 and configured anonymous user from TransparentProxy manual on it.
While I'm using nameserver 127.0.0.1 in /etc/...
CommunityBot
- 1
2
votes
2
answers
273
views
How is tor traffic exempt from censorship/a country's DNS servers?
This is my understanding around how Tor may be used to circumvent a country's censorship of particular sites:
John lives in a country that has blocked traffic to a particular server (via DNS, I ...
- 5,900
0
votes
2
answers
529
views
Why I test dns servers with tor and always show google dns or open dns
Why I test dns servers with tor and always show google dns or open dns? is it mean tor is not anonymous any more?
- 10.9k
1
vote
1
answer
4k
views
torrc DNSPort 53 - Tor browser will not start / Ubuntu 15
I try to set up a local redirection through tor as described here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy
My system is Ubuntu 15.04. Fresh Tor installation works fine. ...
- 8,561
1
vote
1
answer
955
views
resolving onion domains partially fails
Init:
For user anonymous configured transpared proxy.
Wireshark sniffing lo...
Trying to use console network-tools torified.
anonymous@kali:/tmp$ time strace -s6000 -t -f dig facebookcorewwwi....
- 5,900
1
vote
0
answers
316
views
Use .onion with iPhone
I've successfully setup a way to access the tor network via my iPhone. The only thing that's missing is .onion links. I assume that the DNS lookup fails because its not a real world valid domain ...
- 11
3
votes
1
answer
728
views
Is it a better practise to use DNSCrypt over Tor or is it useless?
DNSCrypt already gives you a protection layers against Man-in-the-middle attacks and should obscure your the traffic your ISP sees.. is it, combined with Tor, a good extra protection or does Tor ...
- 305
3
votes
1
answer
1k
views
How to only use Tor to resolve DNS queries
I use want to anonymize my DNS requests ;
I've tried to put DNSPort 53 in torrc, restarting the tor daemon and polipo, even restarting my computer.
By using nestat -atop I can't see any daemon ...
- 33
2
votes
1
answer
289
views
Using TorBrowser with MadMAC's and DNS Crypt products?
Has anyone here used the TorBrowser with either the products MadMAC's or DNS Crypt?
I'm currently testing or rather trying out both to determine if they offer me any added anonymity to my web ...
CommunityBot
- 1