foxyproxy / browser-extension

Version 8 and above. Browser extension source code for Firefox, Chrome, and other Chromium-based browsers
GNU General Public License v2.0
217 stars 32 forks source link

Leaks DNS server on Mull Browser (android) #142

Open NearestWater262 opened 1 month ago

NearestWater262 commented 1 month ago

https://f-droid.org/en/packages/us.spotco.fennec_dos/

one of the more popular gecko based android choices for privacy folks

if I go to ipleak.net with a simple socks5 configured in foxy proxy, it detects both my system DNS and my socks proxy's DNS.

yes I have ProxyDNS enabled on the proxy config

no i dont have any special filtering

https://github.com/foxyproxy/firefox-extension/issues/141

i am also aware of the above issue but whether i enable or disable the Unclock option in uBlock, it still leaks DNS

i also tried disabled uBlock altogether and also tried disabled Encrypted Client Hello ECH, but those didnt work either, so i think this is a foxy proxy issue

erosman commented 1 month ago

FoxyProxy does not handle the DNS. All DNS queries are handled by the browser and therefore it is a browser issue.

The DNS leak issues have been reported to Firefox and it is due to be sorted.

See: [meta] Proxy DNS leak bugs

NearestWater262 commented 1 month ago

wow, did not know this, thanks. Pretty amazing that such a major functionality on a privacy focused browser is leaking for so long!

hazeyez commented 3 weeks ago

FoxyProxy does not handle the DNS. All DNS queries are handled by the browser and therefore it is a browser issue.

The DNS leak issues have been reported to Firefox and it is due to be sorted.

See: [meta] Proxy DNS leak bugs

Instead of creating a new issue on here I'm just responding to this because it's relevant....

Why does FoxyProxy have an option to toggle Proxy DNS on and off then?

erosman commented 3 weeks ago

Why does FoxyProxy have an option to toggle Proxy DNS on and off then?

@hazeyez Proxy DNS is an option of Firefox. (See Firefox menu -> Settings -> Network Settings) FoxyProxy simply tells Firefox to use that option but the actual DNS query is performed by Firefox and extensions have no control over it.

hazeyez commented 3 weeks ago

@erosman understood thanks for that info. are you willing to help guide me/us in how to get firefox configged so that dns doesnt leak when using foxyproxy? i'm aware of the firefox network settings, Proxy DNS when using SOCKS v5 is actually "on" and the issue appears to reside in the actualy about:config firefox network/socks settings. I've been toying with this for weeks, really. I need some sort of professional help here if you're able to. thanks!

erosman commented 3 weeks ago

@hazeyez DNS leak usually is not a major security concern. It is only visible if a server administrator monitors DNS queries. Furthermore, both systems and browsers cache DNS so the request is usually made once.

If you point out the exact circumstance where a leak occurs, there might be some workaround until the issue is sorted by Firefox.

Administrators often monitor port 53 for DNS queries. If you are able to use other ports e.g. OpenDNS port 5353, that would prevent DNS logging.