Skip to main content
Share Your Experience: Take the 2024 Developer Survey
6 votes

Torsocks vs Proxychains?

You should prefer torsocks over proxychains, since torsocks is intended to block potential leaks. Especially in cases with tools like youtube-dl which might try to pass over execution to programs ...
cacahuatl's user avatar
  • 11k
5 votes

Is it a better practise to use DNSCrypt over Tor or is it useless?

DNSCrypt does not give you protection against man-in-the-middle attacks, it just moves where the man-in-the-middle would need to be. For example, if the man-in-the-middle existed between your upstream ...
cacahuatl's user avatar
  • 11k
3 votes
Accepted

How is tor traffic exempt from censorship/a country's DNS servers?

Yes, that's possible. Note that no serious censorship is done through DNS (alone) though, it's trivially easy to defeat, even without Tor. Exit relays should be censorship free, so people shouldn't ...
cacahuatl's user avatar
  • 11k
3 votes
Accepted

What does the logged Tor warning "Onion address foo requested from a port with .onion disabled" mean?

Ah, the answer turns out to be "use AutomapHostsOnResolve 1." From the Tor manual for the AutomapHostsOnResolve configuration directive: When this option is enabled, and we get a request to resolve ...
M12's user avatar
  • 181
3 votes
Accepted

Autodiscovery of Hidden Services Given a Domain or a Website

This is now possible in Tor Browser 9.5: https://www.torproject.org/releases/tor-browser-95/ You can set the Onion-Location HTTP header or add a <meta> tag to the HTML. See https://community....
Steve's user avatar
  • 3,142
2 votes
Accepted

How to only use Tor to resolve DNS queries

"-atop", the t stands for TCP. Tor's DNSPort is UDP. Try ss -uln. It's also not a full DNS implementation and it only handles A, AAAA and PTR lookups.
cacahuatl's user avatar
  • 11k
2 votes
Accepted

How to prevent DNS leaks?

Related question: How can I test an application for proxy leaks? (duplicate?) Viewing the traffic can tell you if they have leaked, nothing short of thorough code review can tell you if it ever will ...
cacahuatl's user avatar
  • 11k
2 votes

How to prevent DNS leaks?

I do recommend to use an anonymizing routing box and make a tcpdump running on it's internal interface where your device/PC is connected. Every leak will be hard routed to/through Tor via firewall or ...
Alexey Vesnin's user avatar
  • 6,225
2 votes

Will Tor work in an "openDNS" system

Tor is mostly DNS agnostic. Building connections to relays is based on IP, so except for the connections that you make over it there are no DNS lookups. The connections you make over it should be ...
cacahuatl's user avatar
  • 11k
2 votes

What is up with these longer onion addresses?

After a bit of searching, I did find this article. It seems that I'm a little behind the times, so to make up for asking a silly question, I'll answer it for anyone still wondering: Technical ...
user13129's user avatar
  • 125
2 votes

DNS in Tor and Tor Browser

Yes Tor Browser does a great job of preventing DNS Leaks. Even torsock on the Linux CLI does an admirable job of preventing DNS Leaks for Linux CLI apps. I did some testing on my own with several apps ...
elmerjfudd's user avatar
  • 2,274
2 votes

Are .onion sites decentralized?

It's decentralized in significantly different fashion than .crypto domain. In blockchain-backed domain system you can claim any name not claimed by anyone else. In .onion all you can do is to generate ...
pyhedgehog's user avatar
1 vote

tor doesn't open dns port

Yes, it does. Your netstat command is looking for listening TCP ports explicitly: netstat -plnt DNS will be UDP, not TCP.
cacahuatl's user avatar
  • 11k
1 vote
Accepted

Clearing the client side DNS cache provides privacy improvement?

Clearing the client side DNS cache DOES NOT provide privacy improvement against hidden services. Clearing the client side DNS cache DOES provide privacy improvement against clearnet connections. ...
nopara73's user avatar
  • 173
1 vote
Accepted

Signal NEWNYM vs Stream isolation

Can the server somehow learn the connection between Alice and Bob in 1. 2. and 3. alternative? Sort answer: 1. No. 2. Yes. 3. Yes. Long answer: A NEWNYM signal, among some administrative code, ...
nopara73's user avatar
  • 173
1 vote

Specify custom DNS server

The Tor client doesn't perform DNS requests, Exits which you use do. If you specify ExitNodes {us} then an Exit in the which Tor thinks is in the US will resolve the address for you. If your ...
cacahuatl's user avatar
  • 11k
1 vote

Checking for DNS leak on TOR router

Android devices do ignore DHCP DNS server, remember. So - it looks like this? I've met this problem too. The only really working workaround is to forcibly route all dns requests to 8.8.8.8 and 8.8.4.4 ...
Alexey Vesnin's user avatar
  • 6,225
1 vote

Set a tor server behind http proxy

First of all that isn't how you make Tor use an HTTP proxy. HTTPProxy host[:port] Tor will make all its directory requests through this host:port (or host:80 if port is not specified), rather than ...
cacahuatl's user avatar
  • 11k
1 vote

Tor exit operators: What DNS do you use?

I simply use the one the ISP that connects my relay is providing. It's surely not bad to have diversity in resolvers. There are discussions about advertising a specific DNS resolver on the tor-relays ...
merge's user avatar
  • 66
1 vote

Effects of CVE-2017-9445?

Tor doesn't use DNS. Any DNS resolving is done at the exit node by the exit node, Tor Browser users are unaffected. It might affect some exit nodes who haven't patched.
cacahuatl's user avatar
  • 11k
1 vote

Using ddclient in Whonix?

No, you cannot directly have an incoming clearnet IP. I.e. you cannot use the public clearnet IP of a Tor exit relay to anonymously host a server. Explanation on incoming connections / opening ports: ...
adrelanos's user avatar
  • 2,797
1 vote
Accepted

Does tor hide traffic from DNS servers?

It depends, nowdays. A lot of people are using OpenDNS or Google DNS or other public DNS servers. For good - yes, but Tor routes DNS requests to the exit node to resolve, and sometimes a situation ...
Alexey Vesnin's user avatar
  • 6,225
1 vote

How is tor traffic exempt from censorship/a country's DNS servers?

Tor is - basically - a network path censorship circumverting tool, and it does it's job quite well! Tor works on OSI Layer 3 and 4. The question you're asking is about a service layer, a Layer 7. Tor ...
Alexey Vesnin's user avatar
  • 6,225
1 vote
Accepted

Why I test dns servers with tor and always show google dns or open dns

A Tor client does not know where or how any DNS record will be resolved. It hands off this resolving to some exit relay. Infact, in the best case scenario (because it's less likely to result in ...
cacahuatl's user avatar
  • 11k
1 vote

Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?

My good advice to you - use local instance of Bind and route all DNS queries through it. I'm using it quite for a long time - no problems so far. And - dhclient will not vandalize resolv conf after ...
Alexey Vesnin's user avatar
  • 6,225
1 vote

Why does TransparentProxy working with `nameserver 127.0.0.1` but doesn't working with iptables redirects?

@canonizing ironize was right. It is my Setup. My mistake. I've used suricata IDS in inline mode with default drop policy for almost every available rule. So, rule number 2014939: emerging-policy....
overuser's user avatar
1 vote
Accepted

resolving onion domains partially fails

If you're using a standard setup with local DNS server located on your very PC - it caches the response locally inside the server, so no second request is made. If you have more questions - feel free ...
Alexey Vesnin's user avatar
  • 6,225
1 vote

Will Tor work in an "openDNS" system

as far as I'm concerned, openDNS is a separate program acting like a DNS server. Yes, any normal-working DNS server can be set up to work in conjuction/"with the help of" Tor. Use an appropriate app ...
Alexey Vesnin's user avatar
  • 6,225
1 vote

Internet only works with tor enabled

I was able to resolve this by refreshing my dhcp through the terminal.. sudo dhclient -r #refreshed ip sudo dhclient # restarted ip
Anekdotin's user avatar
  • 121
1 vote
Accepted

Is it useful to install DNSCrypt-proxy with Tor?

DNSCrypt encrypt the communication between the client, and the resolver. If you are worried about DNS leaks, DNSCrypt can add an extra layer of security. To answer your last question, your ISP doesn'...
Yuriko's user avatar
  • 460

Only top scored, non community-wiki answers of a minimum length are eligible