Re: postfix through TOR DNS.

2013-04-07 Thread Sthu Deus
Good time of the day, Szalay.


Thank You, Szalay, for Your time and answer. You wrote:

 The question is what is the answer. Unlike the other examples which
 try to resolv an A record the postfix is search for an MX record. And
 I'm not really sure if this is supported by the TOR. But I do not
 know TOR at all.

Yes, you were correct, - TOR does not support MX records. :o(

Is there a way to go diver DNS hosts for postfix and other app.s -
probably based on packets owners?


Sthu.


-- 
To UNSUBSCRIBE, email to debian-firewall-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/516143f3.e958b40a.70fc.9...@mx.google.com



postfix through TOR DNS.

2013-04-05 Thread Sthu Deus
Good time of the day.


I'm trying to make postfix resolving domain addresses through TOR
service. And it works for other programs, like, say aptitude that
resolves names then uses FTP connection or a browser - that goes to
web through privoxy+TOR, but postfix keeps giving me

Host or domain name not found. Name service error for name=HOSTNAME
type=MX: Host not found, try again)

In nat table i have:

/sbin/iptables -t nat -A OUTPUT -p udp -m udp --dport 53 -j REDIRECT
--to-ports 53

In filter/nat tables I see that postfix makes attempts to resolve the
domain: i see in filter OUTPUT chain that postfix sends packets to
127.0.0.1:53

and in nat OUTPUT i see its packets also (checked w/ owner module),

finally i see packets arriving in filter INPUT on 53-rd port.

So, i suppose that all should work - but it does not.

Do you have an idea what can wrong?

Or may you have experience w/ TOR and other applications that it would
not resolve names for?

Please, any ideas that may help.

Thanks for Your time.


Sthu.


-- 
To UNSUBSCRIBE, email to debian-firewall-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/515eb428.04d10e0a.755c.3...@mx.google.com



Re: postfix through TOR DNS.

2013-04-05 Thread Ralf Doeblitz
--On Freitag, April 05, 2013 18:23:10 +0700 Sthu Deus sthu.d...@gmail.com 
wrote:

[DNS]

/sbin/iptables -t nat -A OUTPUT -p udp -m udp --dport 53 -j REDIRECT
--to-ports 53


Don't forget to add a rule for TCP, DNS uses both UDP and TCP (even if this 
may be unrelated to your current problems).


Yours sincerely,
Ralf Döblitz
--
Ralf Döblitz
r.doebl...@asco.de
Phone +49 531 3906-116

asco GmbH
Inselwall 11
D-38114 Braunschweig
Germany

Phone +49 531 3906-0
Fax +49 531 3906-400
http://www.asco.de

Amtsgericht Braunschweig HRB 5035
Geschäftsführer Jochen Grote


--
To UNSUBSCRIBE, email to debian-firewall-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/3F91633ECB5CC802011ECE88@[172.20.82.1]



Re: postfix through TOR DNS.

2013-04-05 Thread Szalay Attila
Hi All!

On Fri, 2013-04-05 at 18:23 +0700, Sthu Deus wrote:
 
 I'm trying to make postfix resolving domain addresses through TOR
 service. And it works for other programs, like, say aptitude that
 resolves names then uses FTP connection or a browser - that goes to
 web through privoxy+TOR, but postfix keeps giving me

The question is what is the answer. Unlike the other examples which try
to resolv an A record the postfix is search for an MX record. And I'm
not really sure if this is supported by the TOR. But I do not know TOR
at all.


-- 
To UNSUBSCRIBE, email to debian-firewall-requ...@lists.debian.org
with a subject of unsubscribe. Trouble? Contact listmas...@lists.debian.org
Archive: http://lists.debian.org/1365190423.9048.19.camel@mochrul.balabit