Re: How to use "forward socks5" with my DNS server?

Fabian Keil <[email protected]> Tue, 31 Jan 2023 11:00:15 +0100
Newsgroups gmane.comp.web.privoxy.user
Message-ID <[email protected]>
"Nate W." <[email protected]> wrote on 2023-01-08 at 01:19:49:

> 1. Example Sets
> 
> - Client: Chrome.
> - System DNS: 127.0.0.1 (Adblock-enabled DNS).
> - Privoxy.
> - Some SOCKS5 proxy server.
> 
> 2. What I want
> 
> I want privoxy to forward Socks5 to SocksProxy server _but_ first lookup
> DNS to see whether the domain is blocked or not.
> 
> Chrome -[HTTP Proxy]-> Privoxy <--> DNS/SOCKS5

This is currently not supported.

> 3. Actual result
> 
> The privoxy forward all requests to So5 proxy _without_ looking up
> system-set DNS,
> bypassing adblocked bad domains.

This is the expected behaviour.

> 4. Current horrible alternative
> 
> For now I just use "forward socks4" to force Privoxy look up DNS before
> connecting
> but this is horrible because
> 
> - Remote server can distinguish between direct-Socks5-traffic and
> privoxied-traffic 
> by looking for "Connection: closed" header.
> -> Could you please modify the request header to "Connection:
> keep-alive" just to spoof this?

I don't understand what you're asking for here.
Can you please rephrase it?

While you can already modify the Connection header using
a client-header filter, the use of the header shouldn't
depend on whether or not Privoxy is configured to use
socks4.

Fabian

_______________________________________________
Privoxy-users mailing list
[email protected]
https://lists.privoxy.org/mailman/listinfo/privoxy-users
signature.asc (application/pgp-signature, 833 B)
-----BEGIN PGP SIGNATURE-----
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=NLre
-----END PGP SIGNATURE-----