How to Verify Remote DNS
#1
Original Poster
FlyerTalk Evangelist



Join Date: Nov 2002
Location: ORD
Posts: 14,771
How to Verify Remote DNS
Hey all...question. I run an SSH tunnel to my home router, through which I tunnel web traffic. I have FoxyProxy set to do remote DNS lookups through the SSH tunnel too. How do I verify this is actually happening?
I use Google DNS at home.
I use Google DNS at home.
#2


Join Date: Mar 2008
Location: Miami
Programs: DL Silver, AA Gold
Posts: 568
Rig your DNS server at home to serve an address that the IETF has decided will never be served, such as "fartz.invalid": http://en.wikipedia.org/wiki/.invalid
#3
Join Date: Jan 2011
Programs: AC*E, Accor Platinum, Hilton Silver
Posts: 184
...or you can use some packet capturing tool (e.g. Wireshark), locally on your computer to see if there are any DNS requests being made directly on your interface, if they are, means they are not being tunneled.
#4
Original Poster
FlyerTalk Evangelist



Join Date: Nov 2002
Location: ORD
Posts: 14,771
Thanks for the ideas, y'all. I just a minute ago realized I'd been using Option 3 all along.
My router has hostnames in its local DNS for some of the things on my network. The router itself is router; my fileserver is ike, etc. I just realized that typing those into my browser set to use the SOCKS proxy should give me their login screens if DNS requests are being tunneled, and an error if not. Sure enough, typing "router" into Firefox gave me the login prompt for my router. When I uncheck the remote DNS box and type "router", I just get an error.
So now I know it's working.
My router has hostnames in its local DNS for some of the things on my network. The router itself is router; my fileserver is ike, etc. I just realized that typing those into my browser set to use the SOCKS proxy should give me their login screens if DNS requests are being tunneled, and an error if not. Sure enough, typing "router" into Firefox gave me the login prompt for my router. When I uncheck the remote DNS box and type "router", I just get an error.
So now I know it's working.

