[Author Prev][Author Next][Thread Prev][Thread Next][Author Index][Thread Index]
Re: [tor-talk] Using unbound to resolve .onion domains
Looks fine, you're getting NXDOMAIN, not SERVFAIL.
What do you expect a DNS query for a .onion to return?
Op 11/09/2017 om 11:23 schreef C. L. Martinez:
> Hi all,
>
> I am trying to figure out the best way to handle DNS requests to both clearnet and Tor onionland. Currently, I am using two virtual machines (both FreeBSD 11 based): one used as my internal DNS resolver and the other is a FreeBSD's tor gateway.
>
> My unbound.conf's file in my internal DNS (unbound) is:
>
> server:
> do-tcp: no
> do-not-query-localhost: no
> domain-insecure: "onion"
> private-domain: "onion"
>
> forward-zone:
> name: "onion"
> forward-addr: 172.22.56.4@1053
>
> And my FreeBSD's Tor gateway (172.22.56.4) is running Tor's DNS resolver:
>
> USER COMMAND PID FD PROTO LOCAL ADDRESS FOREIGN ADDRESS
> _tor tor 89238 5 tcp4 127.0.0.1:9050 *:*
> _tor tor 89238 6 udp4 *:1053 *:*
> _tor tor 89238 7 tcp4 127.0.0.1:9040 *:*
> root sendmail 40917 4 tcp4 127.0.0.1:25 *:*
> root sshd 47802 4 tcp4 172.22.56.4:22 *:*
>
> .. but If I try to resolve any .onion domain from my Unbound's internal DNS server it doesn't works:
>
> Server: 127.0.0.1
> Address: 127.0.0.1#53
>
> ** server can't find protonirockerxow.onion: NXDOMAIN
>
> Any idea?? What is it wrong with my config?
>
> Thanks.
>
--
tor-talk mailing list - tor-talk@xxxxxxxxxxxxxxxxxxxx
To unsubscribe or change other settings go to
https://lists.torproject.org/cgi-bin/mailman/listinfo/tor-talk