Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/17/2016 07:40 PM, Toralf Förster wrote: > but from the mentioned PDF I got the impression to just use the ISP > nameservers + a local cache - which I'm trying now. Which was not the best idea: $ dig www.heise.de +trace ; <<>> DiG 9.10.4-P3

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

> On 18 Oct. 2016, at 13:25, Jesse V wrote: > > On 10/17/2016 12:34 PM, Hoshpak wrote: >>> # chattr +i /etc/resolv.conf >>> >>> Exact it works fine :) >> >> Please only do this if your are sure your server is not running in a >> Virtuozzo/OpenVZ container

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

On 10/17/2016 12:34 PM, Hoshpak wrote: >> # chattr +i /etc/resolv.conf >> >> Exact it works fine :) > > Please only do this if your are sure your server is not running in a > Virtuozzo/OpenVZ container environment. On Virtuozzo, the startup > procedure includes scripts that rewrite resolv.conf

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

These errors do only get up when starting "apt-get update" not when "dig ftp.de.debian.org" - this gets solved well. Am 17.10.2016 um 19:00 schrieb pa011: > Thank you Toralf for you instructions and kick again. > > > Following those > >> [2] https://zwiebeltoralf.de/torserver.html > >

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

Thank you Toralf for you instructions and kick again. Following those > [2] https://zwiebeltoralf.de/torserver.html instruction do work but leave me with several unresolved queries: »deb.torproject.org« »archive.ubuntu.com« »security.debian.org« »ftp.de.debian.org« and a few more. What

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

Am 17.10.2016 um 13:52 schrieb Petrusko: # chattr +i /etc/resolv.conf Exact it works fine :) Please only do this if your are sure your server is not running in a Virtuozzo/OpenVZ container environment. On Virtuozzo, the startup procedure includes scripts that rewrite resolv.conf and fail if

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

# chattr +i /etc/resolv.conf Exact it works fine :) Le 17/10/2016 à 09:49, Peter Palfrader a écrit : > On Sun, 16 Oct 2016, Jesse V wrote: > >> The dnscrypt repository on Github has a list of public DNS servers. I >> point my Unbound instance at one of them > Your unbound should probably just

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

On Sun, 16 Oct 2016, Jesse V wrote: > The dnscrypt repository on Github has a list of public DNS servers. I > point my Unbound instance at one of them Your unbound should probably just be recursive itself instead of relying on open 3rd party nameservers. (As for /etc/resolv.conf, I usually just

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 On 10/17/2016 04:37 AM, Jesse V wrote: > Consequently, I have to keep an eye on /etc/resolv.conf to ensure > that it always points to my Unbound instance. I take immediate > action if this is not the case. Shouldn't /etc/resolv.conf.{head,tail}

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

> On 17 Oct 2016, at 13:37, Jesse V wrote: > > On 10/16/2016 04:54 PM, Petrusko wrote: >> Thx for this share. >> >> But I'm not sure how Unbound is "speaking" with the roots DNS servers... >> Somewhere I've read that DNS queries can be forwarded by a "man in the >>

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

On 10/16/2016 04:54 PM, Petrusko wrote: > Thx for this share. > > But I'm not sure how Unbound is "speaking" with the roots DNS servers... > Somewhere I've read that DNS queries can be forwarded by a "man in the > middle", and the server operator can't be sure about this :s > An ISP is able to do

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

Thx for this share. But I'm not sure how Unbound is "speaking" with the roots DNS servers... Somewhere I've read that DNS queries can be forwarded by a "man in the middle", and the server operator can't be sure about this :s An ISP is able to do it with your "private server" hosted behind your

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

Is there a way to know "who" has made this DNS query by reading the cache ? May be you can know there are 30 people have looked for google.com during the last 5 minutes, but "who" has made those DNS queries looks like difficult ? (I'm not an expert on hacking :p ) 16/10/2016 21:28, Tristan : >

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

Humm, I've not checked on the torproject website, tuto how to build a relay/exit... It can be nice to link a tutorial : how to set up quickly and easily a DNS resolver to increase privacy ? May be exit operators can understand it's not really a big job to apt-get install unbound (an example) and

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

Maybe Tor could at least warn you when you're not using a local resolver? On Oct 16, 2016 7:50 AM, "Ralph Seichter" wrote: > On 16.10.16 14:33, Tom van der Woerdt wrote: > > > Why doesn't Tor just link with a dns recursor, instead of relying on > > the user to get the

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

On 16.10.16 14:52, Tom van der Woerdt wrote: > If it affects the anonymity of users, it's Tor's job, no? Tor cannot know what the "correct" resolver configuration is, because this depends on requirements/limitations of local infrastructure. Using public resolvers like 8.8.8.8 might be plain

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

Op 16/10/16 om 14:50 schreef Ralph Seichter: > On 16.10.16 14:33, Tom van der Woerdt wrote: > >> Why doesn't Tor just link with a dns recursor, instead of relying on >> the user to get the configuration right? > > It is not Tor's job to meddle with resolving DNS entries, and the notion > of

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

On 16.10.16 14:33, Tom van der Woerdt wrote: > Why doesn't Tor just link with a dns recursor, instead of relying on > the user to get the configuration right? It is not Tor's job to meddle with resolving DNS entries, and the notion of "getting it right" varies. Asking Tor operators to think

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

It's not technically required when setting up Tor, so I think a lot of people just forget about it. When I set up an exit relay, I knew I was supposed to run a local DNS server, but I completely forgot to install it until about a month later when the topic appeared in this list. The other problem

Re: [tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

Why doesn't Tor just link with a dns recursor, instead of relying on the user to get the configuration right? Tom Op 16/10/16 om 12:52 schreef Toralf Förster: > Reading [1] I do wonder about that. > Why do Tor exit relay operators avoid installing a local resolver - or at > least simple a

[tor-relays] Why do 40% of Tor exits uses 8.8.8.8 for DNS resolving ?

-BEGIN PGP SIGNED MESSAGE- Hash: SHA256 Reading [1] I do wonder about that. Why do Tor exit relay operators avoid installing a local resolver - or at least simple a cache as shown in [2] ? Adding different nameserver= lines to /etc/resolv.conf than 8.8.8.8 shouldn't be a big thing, or ?