6
votes
Torsocks vs Proxychains?
You should prefer torsocks over proxychains, since torsocks is intended to block potential leaks.
Especially in cases with tools like youtube-dl which might try to pass over execution to programs ...
- 10.9k
5
votes
Is it a better practise to use DNSCrypt over Tor or is it useless?
DNSCrypt does not give you protection against man-in-the-middle attacks, it just moves where the man-in-the-middle would need to be. For example, if the man-in-the-middle existed between your upstream ...
- 10.9k
3
votes
Accepted
How is tor traffic exempt from censorship/a country's DNS servers?
Yes, that's possible.
Note that no serious censorship is done through DNS (alone) though, it's trivially easy to defeat, even without Tor.
Exit relays should be censorship free, so people shouldn't ...
- 10.9k
3
votes
Accepted
Register .onion as gTLD?
Update 2015
IANA added .onion to the list of Special-Use Domain Names.
This was based on RFC 7686: The ".onion" Special-Use Domain Name.
Tor’s ticket #6116: apply for .onion gTLD at IANA got ...
- 398
3
votes
Accepted
What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?
Ah, the answer turns out to be "use AutomapHostsOnResolve 1." From the Tor manual for the AutomapHostsOnResolve configuration directive:
When this option is enabled, and we get a request to resolve ...
- 181
3
votes
Accepted
Autodiscovery of Hidden Services Given a Domain or a Website
This is now possible in Tor Browser 9.5: https://www.torproject.org/releases/tor-browser-95/
You can set the Onion-Location HTTP header or add a <meta> tag to the HTML.
See https://community....
- 3,112
2
votes
Accepted
How to only use Tor to resolve DNS queries
"-atop", the t stands for TCP.
Tor's DNSPort is UDP. Try ss -uln. It's also not a full DNS implementation and it only handles A, AAAA and PTR lookups.
- 10.9k
2
votes
Accepted
How to prevent DNS leaks?
Related question: How can I test an application for proxy leaks? (duplicate?)
Viewing the traffic can tell you if they have leaked, nothing short of thorough code review can tell you if it ever will ...
- 10.9k
2
votes
How to prevent DNS leaks?
I do recommend to use an anonymizing routing box and make a tcpdump running on it's internal interface where your device/PC is connected. Every leak will be hard routed to/through Tor via firewall or ...
- 5,915
2
votes
Will Tor work in an "openDNS" system
Tor is mostly DNS agnostic. Building connections to relays is based on IP, so except for the connections that you make over it there are no DNS lookups.
The connections you make over it should be ...
- 10.9k
2
votes
What is up with these longer onion addresses?
After a bit of searching, I did find this article. It seems that I'm a little behind the times, so to make up for asking a silly question, I'll answer it for anyone still wondering:
Technical ...
- 125
2
votes
DNS in Tor and Tor Browser
Yes Tor Browser does a great job of preventing DNS Leaks. Even torsock on the Linux CLI does an admirable job of preventing DNS Leaks for Linux CLI apps. I did some testing on my own with several apps ...
- 2,264
2
votes
Are .onion sites decentralized?
It's decentralized in significantly different fashion than .crypto domain.
In blockchain-backed domain system you can claim any name not claimed by anyone else. In .onion all you can do is to generate ...
- 21
1
vote
Set a tor server behind http proxy
First of all that isn't how you make Tor use an HTTP proxy.
HTTPProxy host[:port]
Tor will make all its directory requests through this host:port (or host:80 if port is not specified), rather than ...
- 10.9k
1
vote
Tor exit operators: What DNS do you use?
I simply use the one the ISP that connects my relay is providing. It's surely not bad to have diversity in resolvers.
There are discussions about advertising a specific DNS resolver on the tor-relays ...
- 66
1
vote
Effects of CVE-2017-9445?
Tor doesn't use DNS.
Any DNS resolving is done at the exit node by the exit node, Tor Browser users are unaffected.
It might affect some exit nodes who haven't patched.
- 10.9k
1
vote
Using ddclient in Whonix?
No, you cannot directly have an incoming clearnet IP. I.e. you cannot use the public clearnet IP of a Tor exit relay to anonymously host a server.
Explanation on incoming connections / opening ports:
...
- 2,777
1
vote
Accepted
Does tor hide traffic from DNS servers?
It depends, nowdays. A lot of people are using OpenDNS or Google DNS or other public DNS servers. For good - yes, but Tor routes DNS requests to the exit node to resolve, and sometimes a situation ...
- 5,915
1
vote
How is tor traffic exempt from censorship/a country's DNS servers?
Tor is - basically - a network path censorship circumverting tool, and it does it's job quite well! Tor works on OSI Layer 3 and 4. The question you're asking is about a service layer, a Layer 7. Tor ...
- 5,915
1
vote
Accepted
Why I test dns servers with tor and always show google dns or open dns
A Tor client does not know where or how any DNS record will be resolved. It hands off this resolving to some exit relay. Infact, in the best case scenario (because it's less likely to result in ...
- 10.9k
1
vote
Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?
My good advice to you - use local instance of Bind and route all DNS queries through it. I'm using it quite for a long time - no problems so far. And - dhclient will not vandalize resolv conf after ...
- 5,915
1
vote
Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?
@canonizing ironize was right. It is my Setup. My mistake.
I've used suricata IDS in inline mode with default drop policy for almost every available rule.
So, rule number 2014939:
emerging-policy....
- 33
1
vote
Accepted
resolving onion domains partially fails
If you're using a standard setup with local DNS server located on your very PC - it caches the response locally inside the server, so no second request is made. If you have more questions - feel free ...
- 5,915
1
vote
Will Tor work in an "openDNS" system
as far as I'm concerned, openDNS is a separate program acting like a DNS server. Yes, any normal-working DNS server can be set up to work in conjuction/"with the help of" Tor. Use an appropriate app ...
- 5,915
1
vote
Internet only works with tor enabled
I was able to resolve this by refreshing my dhcp through the terminal..
sudo dhclient -r #refreshed ip
sudo dhclient # restarted ip
- 121
1
vote
Accepted
Is it useful to install DNSCrypt-proxy with Tor?
DNSCrypt encrypt the communication between the client, and the resolver. If you are worried about DNS leaks, DNSCrypt can add an extra layer of security.
To answer your last question, your ISP doesn'...
- 460
1
vote
torrc DNSPort 53 - Tor browser will not start / Ubuntu 15
On Linux based systems only root can bind ports between 0 and 1024. Thatswhy the operating system forbids you to use port 53 in this case. Here is a nice answer which explains this fact for a ...
- 8,561
1
vote
No-ip alongside Tor
Is there a way to resolve Dynamic DNS with Tor[?]
No, not in the sense I am pretty sure you mean.
Is there a way to [connect to a] Dynamic DNS [address] with Tor so that I can connect to my ...
- 346
1
vote
No-ip alongside Tor
You can run a hidden service on your computer or any computer inside your local network. You can then add HiddenServicePort directives for all the ports you want reachable.
This way you go around NAT ...
- 3,665
Only top scored, non community-wiki answers of a minimum length are eligible