DNS requests bypass socks proxies

[GoogleCodeExporter]

What steps will reproduce the problem?
1. Use a packet sniffer like Wireshark to watch your DNS (udp.port == 53)
connections
2. Change your Firefox network settings to use a socks proxy, something
like tor with torbutton making it easier
3. Go to a site in your Firefox location bar that doesn't have its address
cached

What is the expected output? What do you see instead?

The expected output in Wireshark would be no DNS requests, but they happen
anyways.

What version of the product are you using? On what operating system?

Version 0.8.14, Vista Home Premium 64

Please provide any additional information below.

If this cannot be fixed a warning about using socks for DNS requests and
privacy would be useful.

Original issue reported on code.google.com by adur...@gmail.com on 18 Feb 2009 at 2:52

[GoogleCodeExporter]

Just to be sure. The DNS leakage does not happen if you de-install the showip 
addon?
Thanks, Jan

Original comment by jan.ditt...@gmail.com on 18 Feb 2009 at 8:31

[GoogleCodeExporter]

If you disable or uninstall it, the problem goes away.

Original comment by adur...@gmail.com on 18 Feb 2009 at 8:51

[GoogleCodeExporter]

Ok, just found the culprit. Firefox just lets the SOCKS proxy do the dns 
resolution
and sends an invalid IP. So the only thing I can let the addon do is to
disable its part of the DNS resolution too and only offer lookups for the
Domain name. Please try:
  http://firefox-showip.googlecode.com/files/showip_0.8.16pre1.xpi

Could you also see if the preference Dialog is big enough for you? (Tools->Show 
IP)

Also under which OS and Firefox version do you test?

Thanks,

Jan

Original comment by jan.ditt...@gmail.com on 18 Feb 2009 at 10:13

• Changed state: Started

[GoogleCodeExporter]

That version works fine, doesn't leak DNS queries. The dialog seems sized right 
to
me. I neglected to mention above I'm using SP1 of Windows Vista Home Premium 
64-bit.
My Firefox version is 3.0.6 and the only other extension I was using was 
Torbutton.

Original comment by adur...@gmail.com on 18 Feb 2009 at 10:36

[GoogleCodeExporter]

Fixed in 0.8.16 

Original comment by jan.ditt...@gmail.com on 18 Feb 2009 at 4:55

[GoogleCodeExporter]

Original comment by jan.ditt...@gmail.com on 18 Feb 2009 at 4:55

• Changed state: Fixed

[GoogleCodeExporter]

Something related, 
Foxyproxy(https://addons.mozilla.org/en-US/firefox/addon/2464)
seems use something other than the network.proxy.socks_remote_dns config 
setting to
do dns requests over socks. So, the leak occurs with it and perhaps other proxy
management extensions.

Original comment by adur...@gmail.com on 20 Feb 2009 at 9:09