[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]

Re: Tor & DNS Requests

To: or-talk@xxxxxxxxxxxxx
Subject: Re: Tor & DNS Requests
From: Jason Holt <jason@xxxxxxxxxxxx>
Date: Sun, 7 May 2006 04:17:42 +0000 (UTC)
Delivered-to: archiver@seul.org
Delivered-to: or-talk-outgoing@seul.org
Delivered-to: or-talk@seul.org
Delivery-date: Sun, 07 May 2006 00:18:00 -0400
In-reply-to: <20060504224134.GJ10635@moria.seul.org>
References: <20060504211407.6CA4533C23@mailserver5.hushmail.com> <20060504224134.GJ10635@moria.seul.org>
Reply-to: or-talk@xxxxxxxxxxxxx
Sender: owner-or-talk@xxxxxxxxxxxxx

On Thu, 4 May 2006, Roger Dingledine wrote:

No. All Tor nodes, including nodes with an exit policy of reject
*:*, are willing to do DNS resolves for people. Of course, clients
will try to pick nodes that would allow their connection to exit,
so they will tend to avoid using the reject *:* ones -- but when
using our extension to socks to do dns resolves directly (see
http://tor.eff.org/cvs/tor/doc/socks-extensions.txt) the Tor client is
fine picking a reject-all node, since no traffic will actually be exiting.

I didn't realize that. I set up an internal-only server because my organization didn't like where people were exiting to, but the way they were monitoring the network was by sniffing DNS requests.

-J

References:
- Tor & DNS Requests
  - From: Joseph B Kowalski
- Re: Tor & DNS Requests
  - From: Roger Dingledine

Prev by Author: Re: ISP Policies
Next by Author: Re: Speak of the Devil
Previous by thread: Re: Tor & DNS Requests
Next by thread: Re: Tor & DNS Requests
Index(es):
- Author
- Thread