Hot answers tagged

7 votes

How does Tor route DNS requests?

You have to remember, that Tor is a PROXY. Proxies act on behalf of another, and therefore, theoretically you would only need to "resolve" the address of the first node of the circuit. But you don't ...
user avatar
7 votes
Accepted

Do Tor hidden service directories (HSDirs) see the REAL IP of users who visit .onion sites?

No, the HS directory is accessed via Tor. See: https://gitweb.torproject.org/torspec.git/tree/rend-spec.txt#n549 The nodes running HS directories do form a distributed hash table, though it's not ...
user avatar
6 votes

Torsocks vs Proxychains?

You should prefer torsocks over proxychains, since torsocks is intended to block potential leaks. Especially in cases with tools like youtube-dl which might try to pass over execution to programs ...
user avatar
  • 10.8k
5 votes
Accepted

Why does Tor publish IP addresses of exit nodes?

The list of all Tor relays and whether they are exits needs to be public, because Tor clients use this information to build circuits. There is no point in trying to keep this information 'secret' ...
user avatar
  • 3,735
5 votes

Is it a better practise to use DNSCrypt over Tor or is it useless?

DNSCrypt does not give you protection against man-in-the-middle attacks, it just moves where the man-in-the-middle would need to be. For example, if the man-in-the-middle existed between your upstream ...
user avatar
  • 10.8k
4 votes

Does hosting a Tor hidden service also on clearnet DNS reduce privacy/security for the Tor user?

If a user connects to the clearnet webservice with Tor - then the webserver sees the exit node used by the user. If the user connects to the webservice through the .onion domain - the webserver sees ...
user avatar
  • 1,863
4 votes

transparent proxy .onion firewall rules

I found the issue after some reading. The VirtualAddrNetwork setting was the same as the dhcp pool in my network configuration so when .onion domains were returned the browser was attempting to ...
user avatar
4 votes

How do I resolve DNS using Tor?

Use DNSPort 53 setting in torrc and configure nameserver to 127.0.0.1
user avatar
3 votes

How do I revoke a .onion address?

Anyone with the private key can submit HSDir entries for a .onion address. There is no "registration" per se, only deriving the private key and its public key, but creating a private key with a ...
user avatar
3 votes

Can I run a Tor relay with Norton ConnectSafe DNS?

That is an issue in Norton ConnectSafe DNS. It is resolving invalid domain names. What is really happening is that Norton ConnectSafe DNS redirects to a Norton domain (used for advertising) in the ...
user avatar
  • 1,185
3 votes

Host List Blocking

It works normally with Tor and without any configuration.For example, when your browser are trying to find IP of https://en.wikipedia.org/wiki/Domain_Name_System ,it will check hosts(this file in C:\...
user avatar
3 votes
Accepted

Register .onion as gTLD?

Update 2015 IANA added .onion to the list of Special-Use Domain Names. This was based on RFC 7686: The ".onion" Special-Use Domain Name. Tor’s ticket #6116: apply for .onion gTLD at IANA got ...
user avatar
  • 398
3 votes
Accepted

How is tor traffic exempt from censorship/a country's DNS servers?

Yes, that's possible. Note that no serious censorship is done through DNS (alone) though, it's trivially easy to defeat, even without Tor. Exit relays should be censorship free, so people shouldn't ...
user avatar
  • 10.8k
3 votes
Accepted

What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?

Ah, the answer turns out to be "use AutomapHostsOnResolve 1." From the Tor manual for the AutomapHostsOnResolve configuration directive: When this option is enabled, and we get a request to resolve ...
user avatar
  • 181
3 votes
Accepted

Autodiscovery of Hidden Services Given a Domain or a Website

This is now possible in Tor Browser 9.5: https://www.torproject.org/releases/tor-browser-95/ You can set the Onion-Location HTTP header or add a <meta> tag to the HTML. See https://community....
user avatar
  • 2,583
2 votes

DNSSEC & DNSCrypt over Tor

If you enable tcp-upstream: yes in your unbound configuration, the remote DNS server should also be able to reply to TCP requests, in other words, to be listening on port 53 TCP. I couldn't find a ...
user avatar
2 votes
Accepted

DNSSEC & DNSCrypt over Tor

The 3 configuration examples given offer different benefits and drawbacks. Our preference would be towards #1, as this minimizes latency while offering security on the transportation layer (and with a ...
user avatar
2 votes
Accepted

Tor Connecting to Randomly Generated Domains

These requests are meant to detect DNS resolvers that fake answers for non-existant domains. This feature was added for relays in Tor 0.1.2.13 (released 2007-04-24): - Workaround for name servers (...
user avatar
  • 627
2 votes

Do DNS servers know sensitive info about me?

Tor is saying that a program did not use DNS through Tor and instead used DNS through your clearnet IP address. While the DNS server, and those that saw your connection to the DNS server, do not know ...
user avatar
  • 933
2 votes

Will Tor work in an "openDNS" system

Tor is mostly DNS agnostic. Building connections to relays is based on IP, so except for the connections that you make over it there are no DNS lookups. The connections you make over it should be ...
user avatar
  • 10.8k
2 votes

How to prevent DNS leaks?

I do recommend to use an anonymizing routing box and make a tcpdump running on it's internal interface where your device/PC is connected. Every leak will be hard routed to/through Tor via firewall or ...
user avatar
  • 5,361
2 votes
Accepted

How to prevent DNS leaks?

Related question: How can I test an application for proxy leaks? (duplicate?) Viewing the traffic can tell you if they have leaked, nothing short of thorough code review can tell you if it ever will ...
user avatar
  • 10.8k
2 votes
Accepted

How to only use Tor to resolve DNS queries

"-atop", the t stands for TCP. Tor's DNSPort is UDP. Try ss -uln. It's also not a full DNS implementation and it only handles A, AAAA and PTR lookups.
user avatar
  • 10.8k
2 votes

What is up with these longer onion addresses?

After a bit of searching, I did find this article. It seems that I'm a little behind the times, so to make up for asking a silly question, I'll answer it for anyone still wondering: Technical ...
user avatar
2 votes

DNS in Tor and Tor Browser

Yes Tor Browser does a great job of preventing DNS Leaks. Even torsock on the Linux CLI does an admirable job of preventing DNS Leaks for Linux CLI apps. I did some testing on my own with several apps ...
user avatar
  • 2,121
2 votes

Are .onion sites decentralized?

It's decentralized in significantly different fashion than .crypto domain. In blockchain-backed domain system you can claim any name not claimed by anyone else. In .onion all you can do is to generate ...
user avatar
1 vote

No-ip alongside Tor

You can run a hidden service on your computer or any computer inside your local network. You can then add HiddenServicePort directives for all the ports you want reachable. This way you go around NAT ...
user avatar
  • 3,735
1 vote

Orbot DNS leak problem

Chrome browser with as you said no extra settings is not made to connect through Tor. Orbot works through some apps like Orweb, DuckDuckGo Search Engine app, etc Are you sure your Chrome is connecting ...
user avatar
1 vote

How do I resolve DNS using Tor?

Actually the answer of @RichardHorrocks is quite helpful, but IMHO leaves out some of the relevant parts: If you want to resolve a single hostname via Tor, use tor-resolve $hostname and for reverse (...
user avatar
1 vote

How do I resolve DNS using Tor?

Just to add some more information to this (and to provide a source for others), an in-depth set of instructions and alternative solutions can be found in the below wiki entry. https://wiki.archlinux....
user avatar

Only top scored, non community-wiki answers of a minimum length are eligible