From 88b8490a0ed9afbf76c7095fac16add4b1b805c9 Mon Sep 17 00:00:00 2001 From: Tom Daykin Date: Wed, 17 Oct 2018 11:12:14 +0000 Subject: [PATCH] Reverted Pi-hole fix to URI/Paths Signed-off-by: Tom Daykin --- docs/guides/tor/performance-issues.md | 2 +- docs/guides/tor/setup.md | 6 +++--- 2 files changed, 4 insertions(+), 4 deletions(-) diff --git a/docs/guides/tor/performance-issues.md b/docs/guides/tor/performance-issues.md index 0693f6b..bb20aec 100644 --- a/docs/guides/tor/performance-issues.md +++ b/docs/guides/tor/performance-issues.md @@ -56,7 +56,7 @@ This is not recommended, but here are some things you can do: #### IPv6 DNS over Tor only partially supports IPv6 as of now. This is only a problem if your Router or your ISP don't support IPv4 or you want only IPv6 traffic for another reason - if you have both IPv4 and IPv6 available and you don't plan to visit a IPv6 only service, this is no problem at all. - In general, [if you made sure that you configured your Pi-hole to support IPv6](https://www.reddit.com/r/Pi-hole/comments/7e0jg9/dns_over_tor/dq4wbry/), resolving IPv6 addresses will sometimes work and sometimes not. The reason for this is that Tor Exit nodes only resolve IPv6 queries if they have `IPv6Exit 1` set in their configuration. Tor is [working on a fix](https://trac.torproject.org/projects/tor/ticket/21311) for that - but until that is done and the Tor exit nodes switched to the fixed version, you will run into situations where IPv6 addresses aren't resolvable despite being available in the responsible nameserver. To check whether your current Exit node resolves IPv6 correctly you can run `dig example.com aaaa` (Linux) or `nslookup -q=aaaa example.com` (Windows) on your client. + In general, [if you made sure that you configured your Pi-hole to support IPv6](https://www.reddit.com/r/pihole/comments/7e0jg9/dns_over_tor/dq4wbry/), resolving IPv6 addresses will sometimes work and sometimes not. The reason for this is that Tor Exit nodes only resolve IPv6 queries if they have `IPv6Exit 1` set in their configuration. Tor is [working on a fix](https://trac.torproject.org/projects/tor/ticket/21311) for that - but until that is done and the Tor exit nodes switched to the fixed version, you will run into situations where IPv6 addresses aren't resolvable despite being available in the responsible nameserver. To check whether your current Exit node resolves IPv6 correctly you can run `dig example.com aaaa` (Linux) or `nslookup -q=aaaa example.com` (Windows) on your client. If you're dependent on IPv6 and can't use IPv4 at all, your only chance is to configure `ExitNodes` in your torrc to only point to Exit nodes that resolve IPv6 correctly. But keep in mind that this approach increases the correlation attack vulnerability if you only have a small amount of `ExitNodes` set. diff --git a/docs/guides/tor/setup.md b/docs/guides/tor/setup.md index 1e77b07..811f779 100644 --- a/docs/guides/tor/setup.md +++ b/docs/guides/tor/setup.md @@ -14,7 +14,7 @@ Restart Tor with: `sudo service tor restart` Change your Pi-hole upstream DNS server to use `127.0.10.1` in the Pi-hole WebGUI (Settings) under "Upstream DNS Servers" and click "Save". -**Note:** It's currently not possible to change the Upstream DNS Server directly in the `/etc/Pi-hole/setupVars.conf` file, the Pi-hole DNS Server won't pick up the change. +**Note:** It's currently not possible to change the Upstream DNS Server directly in the `/etc/pihole/setupVars.conf` file, the Pi-hole DNS Server won't pick up the change. If you want a recognizable hostname for the Tor DNS in your Pi-hole GUI statistics, edit `/etc/hosts` as root, include the following line at the end and save the changes ``` @@ -22,7 +22,7 @@ If you want a recognizable hostname for the Tor DNS in your Pi-hole GUI statisti ``` Restart Pi-hole DNS Server for the `/etc/hosts` changes to take effect ``` -sudo Pi-hole restartdns +sudo pihole restartdns ``` ## Testing your configuration @@ -40,5 +40,5 @@ sudo Pi-hole restartdns That should give you the Pi-hole IPv4 and/or IPv6 address as Answer and show up as "Pi-holed" in the WebGUI Query Log (assuming you have the default blocklist, otherwise replace `api.mixpanel.com` with any domain on your blocklist). -If any of the queries doesn't show up in the Query Log you should make sure to configure your Pi-hole/network setup properly ([this thread might help](https://www.reddit.com/r/Pi-hole/comments/7e0jg9/dns_over_tor/dq4kkvg/)). +If any of the queries doesn't show up in the Query Log you should make sure to configure your Pi-hole/network setup properly ([this thread might help](https://www.reddit.com/r/pihole/comments/7e0jg9/dns_over_tor/dq4kkvg/)).