Questions tagged [dns]
Domain Name System (DNS) translates word-based domain and host names to numerical IP addresses.
81
questions
53
votes
3
answers
73k
views
How does Tor route DNS requests?
Tor can only handle TCP connections, but DNS is a UDP protocol. How does Tor route DNS requests over its TCP based network? Why can the same approach not be used to route all UDP traffic over Tor?
- 2,590
26
votes
1
answer
25k
views
.onion Domains DNS lookup
How does Tor resolve .onion Domains? Are there also some central DNS servers in the Tor network that store these records? Is there a chance that two hidden services generate the same domain name?
- 363
16
votes
3
answers
2k
views
Register .onion as gTLD?
For some weeks in 2012, "arbitrary" gTLDs could be applied for at ICANN:
On June 20, 2011 ICANN's board voted to end most restrictions on the generic top-level domain names (gTLD) from the 22 ...
- 398
14
votes
1
answer
4k
views
How are domain names created in the Tor network? [duplicate]
I wonder how the .onion domain names can be created? I mean, I don't assume that there is any central domain name provider. So how and where are those addresses created?
- 141
12
votes
4
answers
1k
views
Good DNS services for exit nodes
Open DNS and others hijack failed DNS lookups. Some DNS services censor or block access to sites due to government or corporate coercion. Is there a list of preferred DNS servers, ones that don't ...
- 465
10
votes
3
answers
2k
views
How can I test an application for proxy leaks?
If I have an application that supports a SOCKS proxy, and I point it at a running Tor instance, how can I be sure that all traffic the application sends (including DNS requests) are sent through the ...
- 681
10
votes
1
answer
402
views
How would a registration of the .onion gtld impact the Tor network?
The title pretty much says it all.
What effects would a gtld registration of .onion domain have on the Tor network, is this something to worry about? Or is it something to welcome and slap a web2tor ...
- 231
9
votes
2
answers
6k
views
Why does Tor publish IP addresses of exit nodes?
I am new to Tor and currently trying to understand the architecture of onion routing. However, I came across this TorDNSEL which makes it possible (for a tool using TorDNSEL) to detect whether ...
- 105
9
votes
5
answers
6k
views
DNSSEC & DNSCrypt over Tor
I want to use DNSSEC and DNSCrypt with Tor. I wonder which configuration is more secure and better?
SOCKS4 + dnscrypt-proxy:
Forward the DNS traffic to a DNS server which I choose. Although the DNS ...
- 239
7
votes
1
answer
4k
views
Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?
I'm reading here about Tor's 'DNS' resolving mechanisms (for both clearnet and hidden services) .
The mechanism for connecting to a hidden service itself (via a rendezvous point in a 7-hop circuit ...
- 145
7
votes
1
answer
572
views
Is (provider rotating) DNSCrypt inside Whonix superior privacy-wise to defaulting to Tor exit nodes' DNS?
I use Whonix.
I am interested in making clearnet traffic as private from third parties other than the sites I visit, as possible. This not only includes the NSA, but also third-party DNS providers ...
- 145
6
votes
1
answer
1k
views
Does hosting a Tor hidden service also on clearnet DNS reduce privacy/security for the Tor user?
I am wondering about the anonymity and security differences in visiting an .onion site, from the user's perspective, between one that is ONLY a hidden service, and one that also points the same ...
user1006
6
votes
1
answer
3k
views
transparent proxy .onion firewall rules
I am configuring a tor hardware router as an anonymizing transparent proxy using the info here and the good news is everything is working as it should; I can connect and browse sites, dns is forwarded ...
- 350
6
votes
2
answers
795
views
How does Tor handle DNS poisoning?
Tor uses an exit node to resolve DNS as per How does Tor route DNS requests?. Isn't it very easy for the exit node to serve a fake website by DNS poisoning? How does Tor handle this threat?
- 61
5
votes
3
answers
5k
views
How do I resolve DNS using Tor?
I don't want my traffic to be proxied though Tor, but I want to anonymize DNS requests. How do I use Tor as a DNS server?
- 91
5
votes
1
answer
970
views
Tor-resolve resolve dns only once per minute for github.com
I'm trying to clone project from github via Tor.
# torsocks git clone http://github/project/project.git
: Could not resolve host: github.com
I'm going to catch a failure of resolving of IP.
Next, ...
- 141
4
votes
1
answer
1k
views
What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?
I am experimenting with different ways to Torify DNS requests for applications that do not support SOCKS5's RESOLVE or SOCKS4a, themselves. One simple way to do this is to configure Tor itself to ...
- 181
4
votes
3
answers
2k
views
No-ip alongside Tor
Is there a way to resolve Dynamic DNS with Tor so that I can connect to my computer who is behind a NAT ? Do I have to enable the "no-ip" service on my router or do I have to make a port forward ?
- 41
4
votes
1
answer
2k
views
DNS over HTTPS and Tor
Mozilla Firefox has added the ability to use Trusted Recursive Resolver within Firefox. This means that it's now possible to route DNS queries over HTTPS without additional software. It was included ...
user23257
4
votes
1
answer
1k
views
Set a tor server behind http proxy
I'm trying to make a tor relay server over a http proxy on a ubuntu 14.04 lts machine.
Log output:
$ cat /var/log/tor/log
Aug 17 18:19:06.000 [notice] Tor 0.2.4.27 (git-412e3f7dc9c6c01a) opening new ...
- 41
4
votes
1
answer
446
views
Tor exit operators: What DNS do you use?
I was reading a couple articles on identity and information leaks from DNS. I was just curious to know how many TOR exit node operators run their own DNS servers as opposed to going through another ...
4
votes
2
answers
2k
views
Tor, Bridges, and DNS Leaks
Recently I've been looking to follow good-practices while browsing the internet (e.g 50%+ of my browsing in through a VPN, 10%+ is through Tor). Now, I am looking to increase my regiment by tinkering ...
- 141
4
votes
1
answer
257
views
Same DNS server for many different Tor 'idenitities'
In my browser (Iceweasel), which is running with Tor via proxychains, I changed my IP address a good few times, by restarting Tor. Each time, I did the standard test at dnsleaktest.com and, the result ...
- 143
4
votes
1
answer
590
views
Finding the IP address of a hostname on a given circuit
I want the Tor to just find the address of a hostname (just give me the IP) on a given circuit without be connected to that hostname. I find that the RELAY_CONNECTED cell includes the IP address of ...
- 441
3
votes
1
answer
7k
views
Torsocks vs Proxychains?
I often alternate between torsocks/proxychains when using wget, youtube-dl, gpg2, ssh, pacman and more [non-multithreading] applications. If torsocks breaks or seems abnormally slow, I'll likely try ...
- 31
3
votes
1
answer
728
views
Is it a better practise to use DNSCrypt over Tor or is it useless?
DNSCrypt already gives you a protection layers against Man-in-the-middle attacks and should obscure your the traffic your ISP sees.. is it, combined with Tor, a good extra protection or does Tor ...
- 31
3
votes
2
answers
1k
views
Host List Blocking
If I have a host list here:C:\WINDOWS\system32\drivers\etc\hosts for blocking malicious,& ad websites/servers.
How do I make it work with Tor?
- 31
3
votes
1
answer
1k
views
How to only use Tor to resolve DNS queries
I use want to anonymize my DNS requests ;
I've tried to put DNSPort 53 in torrc, restarting the tor daemon and polipo, even restarting my computer.
By using nestat -atop I can't see any daemon ...
- 33
3
votes
1
answer
811
views
Signal NEWNYM vs Stream isolation
Resources. This answer explains well what happens at NEWNYM request, and I also dig into the code, yet my lack of knowledge on low level networking prevents me to make a proper design decision if ...
- 173
3
votes
1
answer
3k
views
Orbot DNS leak problem
I tried to use Orbot on my Android phone in VPN mode (no extra settings added or anything). It turned out that it leaks DNS with Chrome browser (I checked it with dnsleak.com). Is it possible to fix ...
- 31
3
votes
1
answer
689
views
Is it possible to have "use[email protected]" addresses and FULLY avoid DNS with email?
I'm only just starting to look into email on Tor - and so far I'm only finding either email hosts whose sites (including webmail login) are hosted on .onion addresses, or whose POP, IMAP and SMTP ...
user1006
3
votes
0
answers
58
views
DNS for Tor hidden services [duplicate]
I have just discovered that DNS cannot be used by Tor hidden services, is that true?
Also is it possible to use DNS services of multiple servers to prevent server down time for Tor hidden service? I ...
- 141
2
votes
5
answers
320
views
How do I revoke a .onion address?
Can I revoke a .onion address, to "open it" back up for registration?
It is possible, in the world of certificate authorities, to maintain revocation lists for keys that have been compromised or are ...
- 135
2
votes
2
answers
273
views
How is tor traffic exempt from censorship/a country's DNS servers?
This is my understanding around how Tor may be used to circumvent a country's censorship of particular sites:
John lives in a country that has blocked traffic to a particular server (via DNS, I ...
- 123
2
votes
1
answer
233
views
Can I run a Tor relay with Norton ConnectSafe DNS?
I am trying to contribute to Tor Network by running a non-exit relay on my PC. Via the status window, I already received the comment saying that my relay is reachable:
Jan 17 01:32:13.420 [Notice] ...
- 535
2
votes
1
answer
329
views
How to get IP address
I want Tor to just resolve a DNS and return the IP address before any connection to the destination server. I know that the Tor client sends a request to the exit node and the exit node does the DNS ...
- 441
2
votes
1
answer
3k
views
What is up with these longer onion addresses?
Some number of years ago, I heard that one of the reasons that Tor does not allow anything longer than a 1024-bit RSA key as an onion service's private key is because the address would be a lot longer,...
- 125
2
votes
1
answer
399
views
Tor Connecting to Randomly Generated Domains
I have a whole bunch of these Bro SSL logs:
ts uid id.orig_h id.orig_p id.resp_h id.resp_p version cipher server_name session_id subject issuer_subject ...
- 123
2
votes
1
answer
1k
views
Checking for DNS leak on TOR router
I have configured a router to route all traffic from an internal interface through the TOR network. Therefore, every client that uses this router as its Gateway will access the internet through TOR, ...
- 21
2
votes
2
answers
69
views
Using ddclient in Whonix?
Can we use ddclient with noip.com (or other ddns services) inside a Whonix VM to connect with our media servers or SSH ports?
I know pointing an .onion at our local server makes more sense, but I'm ...
- 21
2
votes
1
answer
2k
views
Does tor hide traffic from DNS servers? [duplicate]
I am wondering if when using Tor my requests are hidden from my DNS servers.
For example, I have set up my computer to use google's IPv6 DNS servers, does google see the domains I am accessing?
I am ...
user14025
2
votes
1
answer
2k
views
Debian-based: torsocks + Chromium-browser = DNS Leakage?
System: latest Kali ( Debian-based )
$ torsocks chromium-browser
00:00:00 libtorsocks(1): sendmsg: Connection is a UDP or ICMP stream, may be a DNS request or other form of leak: rejecting.
00:00:00 ...
- 21
2
votes
1
answer
1k
views
What exactly are Tor DNS servers?
I am using Tor for a while and I don't understand what exactly are it's DNS?
I have a few website that can't be open when I use Tor because it's DNS server can't find it's IP! Can't we change it's ...
- 21
2
votes
1
answer
289
views
Using TorBrowser with MadMAC's and DNS Crypt products?
Has anyone here used the TorBrowser with either the products MadMAC's or DNS Crypt?
I'm currently testing or rather trying out both to determine if they offer me any added anonymity to my web ...
- 21
1
vote
2
answers
6k
views
How to prevent DNS leaks? [duplicate]
How do I know if my applications are leaking DNS and what are the methods preventing Tor DNS leaks?
This question is not about all traffic as asked here, and not about testing it, but it's specific ...
- 1,153
1
vote
2
answers
248
views
Are .onion sites decentralized?
Blockchain technology has given rise to something called "decentralized domains" like .crypto that cannot be censored, nor rented (in the case of namebase.io), unlike DNS domains like .com
...
- 264
1
vote
1
answer
138
views
Autodiscovery of Hidden Services Given a Domain or a Website
IPFS has DNSLink and Dat has .well-known/dat for the autodiscovery of the content on their networks given a domain name (or a website in Dat's case).
So for instance, when a user visits http://...
- 115
1
vote
2
answers
176
views
Will Tor work in an "openDNS" system
Will Tor work with an "openDNS" system?
Does openDNS open my (computer) to access and snooping by the openDNS application?
thanks --
- 11
1
vote
1
answer
9k
views
DNS in Tor and Tor Browser
If I look for DNS leaks when using Tor Browser, I find none. For example, if I connect to https://dnsleaktest.com in Tor Browser, using even the most lax of the security settings, the DNS servers that ...
- 764
1
vote
2
answers
478
views
Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?
This my second question is a continuation of my first one.
Setup is default Kali 2 and configured anonymous user from TransparentProxy manual on it.
While I'm using nameserver 127.0.0.1 in /etc/...
- 33