[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: Problems with `dig` and `host` under transparently torified user
- To: or-talk@xxxxxxxxxxxxx
- Subject: Re: Problems with `dig` and `host` under transparently torified user
- From: Robert Ransom <rransom.8774@xxxxxxxxx>
- Date: Sun, 12 Sep 2010 01:42:06 -0700
- Delivered-to: archiver@xxxxxxxx
- Delivered-to: or-talk-outgoing@xxxxxxxx
- Delivered-to: or-talk@xxxxxxxx
- Delivery-date: Sun, 12 Sep 2010 04:40:27 -0400
- Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=domainkey-signature:received:received:date:from:to:subject :message-id:in-reply-to:references:x-mailer:mime-version :content-type; bh=I9uJsuDnagCd0ELbXcnxuC8jb6GC4MDwO537ZVFSgQE=; b=bX3a+eNwgeTNz5nYiKc4SxzOzI+07MNMtYKCA/bLOGi9rELgg1od9R4MnVS8FKiVC6 e1ORTABCaMLYh9mRDZwaDSSoT08B85ewI5kVy6q5I0UxvBImcQ5MRhP+BEw8h5Jrq+8O +4sZDLSJ3qCetAkM/bkQ/IcOorcQjmtj6LhjQ=
- Domainkey-signature: a=rsa-sha1; c=nofws; d=gmail.com; s=gamma; h=date:from:to:subject:message-id:in-reply-to:references:x-mailer :mime-version:content-type; b=oHvTBbM/HK20rYfBWr70LdaZn3d+cmLBHd5sfvu270juoayspKn2XGZdPl+UWmx8jU JXAfQl5CLCwgzymnVQkHJNbNqf8fQ0qi32WLmpGb0TmwWK7iW5fhyjS6NFHVBQbchYyu mRe49g99XvbQDsdKSfKDjDU7sSZLdU1tMkOQw=
- In-reply-to: <4C8C9014.8030807@xxxxxxxxx>
- References: <4C8C9014.8030807@xxxxxxxxx>
- Reply-to: or-talk@xxxxxxxxxxxxx
- Sender: owner-or-talk@xxxxxxxxxxxxx
On Sun, 12 Sep 2010 08:32:20 +0000
James Brown <jbrownfirst@xxxxxxxxx> wrote:
> I have a transparently torified user setting up as described there
> https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/TransparentProxy
> When I run command `dig somedomainname mx` or `dig somedomainname ns` or
> `host -t mx somedomainname` , `host -t ns somedomainname` under that
> user I have the result that that "somedomainname' have no records in mx
> or ns. But it really have.
> I can receive only correct record "A" not records "ns" or "mx".
> Why?
Tor's DNSPort does not provide support for the full DNS standard.
You can try âdig +tcp @8.8.8.8 YOUR-QUERY-HEREâ to retrieve the other
records. (I think the @SERVER option belongs before the query, but it
may belong at the end of the command line; run âdig --helpâ for
details.)
Are you really running Tor as root? It seems to me that those
instructions should be changed to have Tor run with DNSPort 9053 in a
Tor-only user account, and have iptables redirect DNS requests to port
9053.
Robert Ransom
Attachment:
signature.asc
Description: PGP signature