Re: Does Polipo prevent DNS leaks in Java?

From: Jack Bush <[email protected]>
Subject: Re: [Polipo-users] Does Polipo prevent DNS leaks in Java?
To: "Juliusz Chroboczek" <[email protected]>
Received: Tuesday, 5 January, 2010, 10:16 PM







Hi Juliusz,
 
Below is the few lines of Java snippet that has successfully connected to Tor website:
 
String url = "http://check.torproject.org";
URL server = new URL(url);
Properties systemProperties = System.getProperties();
systemProperties.setProperty("http.proxyHost","localhost");
systemProperties.setProperty("http.proxyPort",8118);
HttpURLConnection connection = (HttpURLConnection) server.openConnection();
connection.connect();
InputStream in = connection.getInputStream();
 
Does Polipo carry out DNS query via Tor (eliminate DNS leaks) on behalf of Java, or does it expect Java to resolve the query first prior to passing IP address over?
 
Thanks again,
 
Jack

--- On Wed, 30/12/09, Juliusz Chroboczek <[email protected]> wrote:


From: Juliusz Chroboczek <[email protected]>
Subject: Re: [Polipo-users] Does Polipo prevent DNS leaks in Java?
To: "Jack Bush" <[email protected]>
Cc: [email protected]
Received: Wednesday, 30 December, 2009, 4:21 PM


> I am using Polipo (Vidalia bundled with Tor - 0.2.5) as a http proxy
> server and would like to confirm whether it does resolve DNS query via
> Tor network. In other word, prevent DNS leaks?

Yes, both with SOCKS4a and SOCKS5.  (Polipo doesn't implement plain SOCKS4.)

Note however that nothing prevents your web browser from performing its
own DNS requests (for example from Javascript, Java or Flash code), and
there's nothing Polipo can do to prevent that.  Firewalling is the only
reliable solution.

                                        Juliusz




See what's on at the movies in your area. Find out now.


      __________________________________________________________________________________
See what's on at the movies in your area. Find out now: http://au.movies.yahoo.com/session-times/
------------------------------------------------------------------------------
This SF.Net email is sponsored by the Verizon Developer Community
Take advantage of Verizon's best-in-class app development support
A streamlined, 14 day to market process makes app distribution fast and easy
Join now and get one step closer to millions of Verizon customers
http://p.sf.net/sfu/verizon-dev2dev