PalinuroSec / infra-dns

dns infrastructure for parrot os
3 stars 0 forks source link

Hi big issue with parrot os #1

Open shiuduy opened 1 year ago

shiuduy commented 1 year ago

Hello sorry for posting here i needed a way to contact you. There is a massive dns leak in new parrot os 5.1.1 and even the newest version When using AnonSurf sometimes the dns on gui would point to normal dns not Tor dns and that leaks the dns thus the ip And this happen frequently as well so it's not a bug that happens rarely i tested it on my 2 pcs and version 5.1.1 and 5.1.2 Please if you could try to fix or talk to the parrot os team.

shiuduy commented 1 year ago

when using dnstool status command this is the output

[STATUS]

Detected Non-Tor address[es]. This may cause information leaks.

shiuduy commented 1 year ago

this error happens because network manager overwrite /etc/resolv.conf and changes tor dns to prevent this it needs to be an option to prevent dns leaks you can stop network manager from overwriting /etc/resolv.conf by command sudo vim /etc/NetworkManager/NetworkManager.conf and then adding these 2 lines dns=none rc-manager=unmanaged and then making /etc/resolv.conf with this line nameserver 127.0.0.1 so it checks always localhost which points to nameserver 127.0.0.1:53 (tor)

shiuduy commented 1 year ago

also running this command sudo nano /etc/NetworkManager/conf.d/90-dns-none.conf and adding these 2 lines [main] dns=none then running systemctl reload NetworkManager this will prevent network manager from overwriting /etc/resolv.conf and also any other resolv.conf