Skip to main content

Questions tagged [dns]

Domain Name System (DNS) translates word-based domain and host names to numerical IP addresses.

Filter by
Sorted by
Tagged with
53 votes
3 answers
75k views

How does Tor route DNS requests?

Tor can only handle TCP connections, but DNS is a UDP protocol. How does Tor route DNS requests over its TCP based network? Why can the same approach not be used to route all UDP traffic over Tor?
3 votes
1 answer
7k views

Torsocks vs Proxychains?

I often alternate between torsocks/proxychains when using wget, youtube-dl, gpg2, ssh, pacman and more [non-multithreading] applications. If torsocks breaks or seems abnormally slow, I'll likely try ...
0 votes
1 answer
192 views

Tor on Linux. DNAT port 53 DNS requests to TOR DNS listener port set to 9041 on 127.0.0.1 with iptables. tcpdump shows my def gateway replies. strange

Tor on Linux. DNAT port 53 DNS requests to TOR DNS listener port set to 9041 on 127.0.0.1 with iptables. tcpdump shows my default gateway answers to same client port. [root@localhost memyself]# ...
1 vote
1 answer
197 views

Local DNS for SOCKS5

I want to use dnscrypt proxy for queries, but it's not working on tor. Same question as this I found this solution Firefox is working properly. I also tried privoxy over tor but not working as I ...
0 votes
1 answer
625 views

How to use torsocks with python urllib3 and along a domain name where ipv6 is availaible ? Or rather disable ɪᴘᴠ6 in that case?

Simply trying to access en.wikipedia.org with a python script where a huge stack of dependencies prevents configuring a proxy (would take a year in order to rewrite dependencies for getting proxy ...
0 votes
2 answers
570 views

Tor error "DNS resolving failed"

Tor is last version. When paste any .onion address I see this: ERROR: Not Found While trying to retrieve the URL http://site.onion/ (normal onion address, that actually works fine): DNS resolving ...
0 votes
3 answers
505 views

Can DNS be tracked in tor?

can DNS be tracked if I am using TOR without using more protection like VPN? For example, If someone tries to target me and have a DNS lookup, it will show my original DNS or I need to change it? ...
2 votes
1 answer
1k views

Checking for DNS leak on TOR router

I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
0 votes
1 answer
764 views

Can I use DNS over TLS or DNS over HTTPS in Tor Browser, executed from Tails?

There has long been an effort to encrypt DNS queries between the client and the recursive server to increase privacy. Firefox already supports DNS-over-HTTPS. But is Tor Browser, executed from Tails, ...
1 vote
1 answer
519 views

Tor over VPN with DNS leak

Lets say i'm using a vpn that have a DNS leak (and it shows my ISP ip for example), then I use the tor browser to browse the clear net (even HTTP sites, not only HTTPS) over that VPN. Does ISP know ...
0 votes
1 answer
159 views

Tor Browser's "new circuit": SSL session, DNS cache, and other details

If I understand correctly Tor Browser's "new circuit" attaches new connections to a new circuit while letting old connections finish in the old circuit. It does not clear out cookies, so ...
1 vote
2 answers
284 views

Are .onion sites decentralized?

Blockchain technology has given rise to something called "decentralized domains" like .crypto that cannot be censored, nor rented (in the case of namebase.io), unlike DNS domains like .com ...
0 votes
1 answer
322 views

make a TOR url act like Alias in DNS

I have a onion domain private key and registered a clearnet website hosting on namecheap.com Now I want to make the onion domain work like alias to the clearnet url like the Alias DNS record. How ...
7 votes
1 answer
579 views

Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?

I use Whonix. I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...
4 votes
1 answer
1k views

Set a tor server behind http proxy

I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine. Log output: $ cat /var/log/tor/log Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
0 votes
1 answer
397 views

How to prevent DNS Spoofing attacks with Tor?

This question is an extension of How does Tor handle DNS poisoning. After having read Introducing DNS Resolver for Tor and DNS security issues, I am a bit concerned about the riscs of using Tor (...
1 vote
0 answers
2k views

How is a .onion URL resolved?

I am interested in how a .onion url is resolved to a server in the Tor network. In the normal internet there is DNS, which is not used on the Tor network. How does the name resolution work there?
0 votes
1 answer
817 views

tor doesn't open dns port

I try to create a middlebox to redirect tor trafic but i have a problem. Tor doesn't create dns port 5353 as i configured in /etc/tor/torrc VirtualAddrNetworkIPv4 10.192.0.0/10 AutomapHostsOnResolve ...
1 vote
1 answer
140 views

Autodiscovery of Hidden Services Given a Domain or a Website

IPFS has DNSLink and Dat has .well-known/dat for the autodiscovery of the content on their networks given a domain name (or a website in Dat's case). So for instance, when a user visits http://...
0 votes
0 answers
337 views

Temporary failure in name resolution

I keep getting dns errors when running scripts in the terminal. Normal dns resolving in the tor browser (and chromium) works as it is supposed to though. user@host:~$ ping google.de ping: google.de:...
9 votes
2 answers
6k views

Why does Tor publish IP addresses of exit nodes?

I am new to Tor and currently trying to understand the architecture of onion routing. However, I came across this TorDNSEL which makes it possible (for a tool using TorDNSEL) to detect whether ...
0 votes
1 answer
308 views

How to find onion address?

Hello I'm newbie to onion protocol. Tor(Onion) protocol is basically consist of three nodes for my anonymity connection. However, in this point, we have to clarify HOW TO FIND ENTRY GUARD before ...
4 votes
1 answer
2k views

DNS over HTTPS and Tor

Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...
1 vote
1 answer
10k views

DNS in Tor and Tor Browser

If I look for DNS leaks when using Tor Browser, I find none. For example, if I connect to https://dnsleaktest.com in Tor Browser, using even the most lax of the security settings, the DNS servers that ...
3 votes
1 answer
717 views

Is it possible to have "[email protected]" addresses and FULLY avoid DNS with email?

I'm only just starting to look into email on Tor - and so far I'm only finding either email hosts whose sites (including webmail login) are hosted on .onion addresses, or whose POP, IMAP and SMTP ...
1 vote
1 answer
792 views

Cloudflare's new .onion DNS resolver?

Cloudflare recently announced their new "hidden DNS resolver". https://dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion/ I'm wondering if it can be used with the tor browser or the ...
2 votes
1 answer
3k views

What is up with these longer onion addresses?

Some number of years ago, I heard that one of the reasons that Tor does not allow anything longer than a 1024-bit RSA key as an onion service's private key is because the address would be a lot longer,...
0 votes
1 answer
628 views

DNS resolution on tor proxy

I have a short question regarding name resolution using the tor network. Why is the name resolution not done by the proxy, but instead by the exit node? The traffic is encrypted and anonymized either ...
16 votes
3 answers
2k views

Register .onion as gTLD?

For some weeks in 2012, "arbitrary" gTLDs could be applied for at ICANN: On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 ...
3 votes
1 answer
862 views

Signal NEWNYM vs Stream isolation

Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
1 vote
1 answer
359 views

Clearing the client side DNS cache provides privacy improvement?

Context. In my quest on figuring out if I must use NEWNYM signal or stream isolation is enough for me I dig into the code and narrowed down the possible privacy improvements that NEWNYM can bring over ...
0 votes
1 answer
677 views

Specify custom DNS server

Is it possible to specify a custom DNS server so that the targeted website can see it? Otherwise ExitNodes {us} is useless if the website is geoblocking by DNS flag which is not shown clearly most of ...
4 votes
1 answer
457 views

Tor exit operators: What DNS do you use?

I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another ...
4 votes
1 answer
2k views

What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?

I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
12 votes
4 answers
1k views

Good DNS services for exit nodes

Open DNS and others hijack failed DNS lookups. Some DNS services censor or block access to sites due to government or corporate coercion. Is there a list of preferred DNS servers, ones that don't ...
0 votes
1 answer
83 views

Effects of CVE-2017-9445?

https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-9445 http://openwall.com/lists/oss-security/2017/06/27/8 https://www.ubuntu.com/usn/usn-3341-1/ What does this mean for tor browser users? How ...
5 votes
3 answers
6k views

How do I resolve DNS using Tor?

I don't want my traffic to be proxied though Tor, but I want to anonymize DNS requests. How do I use Tor as a DNS server?
26 votes
1 answer
26k views

.onion Domains DNS lookup

How does Tor resolve .onion Domains? Are there also some central DNS servers in the Tor network that store these records? Is there a chance that two hidden services generate the same domain name?
1 vote
0 answers
239 views

Tor failed to establish a Tor network connection. Establishing an encrypted directory connection failed (done - 0.0.2.0:3) [duplicate]

Can anyone help me out. My Tor Browser was working perfectly fine until I did an update for my windows 7 laptop. Now i keep getting an error message mentioning failing to establish connection. I have ...
2 votes
2 answers
72 views

Using ddclient in Whonix?

Can we use ddclient with noip.com (or other ddns services) inside a Whonix VM to connect with our media servers or SSH ports? I know pointing an .onion at our local server makes more sense, but I'm ...
2 votes
1 answer
2k views

Does tor hide traffic from DNS servers? [duplicate]

I am wondering if when using Tor my requests are hidden from my DNS servers. For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing? I am ...
1 vote
2 answers
485 views

Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?

This my second question is a continuation of my first one. Setup is default Kali 2 and configured anonymous user from TransparentProxy manual on it. While I'm using nameserver 127.0.0.1 in /etc/...
2 votes
2 answers
279 views

How is tor traffic exempt from censorship/a country's DNS servers?

This is my understanding around how Tor may be used to circumvent a country's censorship of particular sites: John lives in a country that has blocked traffic to a particular server (via DNS, I ...
0 votes
2 answers
543 views

Why I test dns servers with tor and always show google dns or open dns

Why I test dns servers with tor and always show google dns or open dns? is it mean tor is not anonymous any more?
1 vote
1 answer
4k views

torrc DNSPort 53 - Tor browser will not start / Ubuntu 15

I try to set up a local redirection through tor as described here: https://trac.torproject.org/projects/tor/wiki/doc/TransparentProxy My system is Ubuntu 15.04. Fresh Tor installation works fine. ...
1 vote
1 answer
989 views

resolving onion domains partially fails

Init: For user anonymous configured transpared proxy. Wireshark sniffing lo... Trying to use console network-tools torified. anonymous@kali:/tmp$ time strace -s6000 -t -f dig facebookcorewwwi....
1 vote
0 answers
339 views

Use .onion with iPhone

I've successfully setup a way to access the tor network via my iPhone. The only thing that's missing is .onion links. I assume that the DNS lookup fails because its not a real world valid domain ...
3 votes
1 answer
792 views

Is it a better practise to use DNSCrypt over Tor or is it useless?

DNSCrypt already gives you a protection layers against Man-in-the-middle attacks and should obscure your the traffic your ISP sees.. is it, combined with Tor, a good extra protection or does Tor ...
3 votes
1 answer
1k views

How to only use Tor to resolve DNS queries

I use want to anonymize my DNS requests ; I've tried to put DNSPort 53 in torrc, restarting the tor daemon and polipo, even restarting my computer. By using nestat -atop I can't see any daemon ...
2 votes
1 answer
292 views

Using TorBrowser with MadMAC's and DNS Crypt products?

Has anyone here used the TorBrowser with either the products MadMAC's or DNS Crypt? I'm currently testing or rather trying out both to determine if they offer me any added anonymity to my web ...