search

rofl0r / proxychains-ng

proxychains ng (new generation) - a preloader which hooks calls to sockets in dynamically linked programs and redirects it through one or more socks/http proxies. continuation of the unmaintained proxychains project. the sf.net page is currently not updated, use releases from github release page instead.
http://sourceforge.net/projects/proxychains-ng/files
GNU General Public License v2.0
9.71k stars 1.07k forks source link

How to prevent WebRTC IP leaks? #556

Open hamed98 opened 6 months ago

hamed98 commented 6 months ago

Hello I have noticed that my real ip could be leaked by WebRTC protocol.(https://browserleaks.com/webrtc), even my browser is opened behind proxychains. Is there any solution to fix that or block the webrtc protocol in the proxychains settings?

rofl0r commented 6 months ago

seems unlikely. proxychains only sees either a connection attempt, or a DNS resolve attempt. even if we would intercept writes to the TCP socket (with the intention of filtering out WebRTC related stuff), this would only work for plaintext HTTP sites - and these days 95% of pages use HTTPS. implementing this only for the few sites that still use plain HTTP seems like a waste of time. a better solution is to run a MITM proxy like owasp whose certificate you can install in the browser and implement the filtering there. or you just set your browser to not do it - like described in your link, or use a privacy-respecting browser like palemoon.

hamed98 commented 6 months ago

Thank you @rofl0r I got the idea