<meta http-equiv="content-type" content="text/html; charset=utf-8"><span class="Apple-style-span" style="font-family: Verdana, Arial, 'Bitstream Vera Sans', Helvetica, sans-serif; font-size: 13px; "><h3 id="HowdoIaccessTorhiddenservices" style="font-family: Arial, Verdana, 'Bitstream Vera Sans', Helvetica, sans-serif; font-weight: bold; letter-spacing: -0,018em; page-break-after: avoid; font-size: 14px; margin-left: -18px; ">
H</h3><h3 id="HowdoIaccessTorhiddenservices" style="font-family: Arial, Verdana, 'Bitstream Vera Sans', Helvetica, sans-serif; font-weight: bold; letter-spacing: -0,018em; page-break-after: avoid; font-size: 14px; margin-left: -18px; ">
HHow do I access <span class="searchword0" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(255, 255, 153); background-position: initial initial; background-repeat: initial initial; ">Tor</span> hidden services?<a class="anchor" href="#HowdoIaccessTorhiddenservices" title="Link to this section" style="text-decoration: none; color: rgb(215, 215, 215); border-bottom-style: none; border-top-style: none; border-right-style: none; border-left-style: none; border-width: initial; border-color: initial; font-size: 0,8em; vertical-align: text-top; visibility: visible; border-width: initial; border-color: initial; "> ¶</a></h3>
<p><span class="searchword0" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(255, 255, 153); background-position: initial initial; background-repeat: initial initial; ">Tor</span> hidden services are named with a special top-level domain (TLD) name in <span class="searchword2" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(204, 255, 255); background-position: initial initial; background-repeat: initial initial; ">DNS</span>: .<span class="searchword1" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(204, 255, 204); background-position: initial initial; background-repeat: initial initial; ">onion</span>. Since the .onion TLD is not recognized by the official root DNS servers on the Internet, your application will not get the response it needs to locate the service. <b>Currently, the Tor directory server provides this look-up service; and thus the look-up request must get to the Tor network.</b></p>
<p>Therefore, your application <strong>needs</strong> to pass the .<span class="searchword1" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(204, 255, 204); background-position: initial initial; background-repeat: initial initial; ">onion</span> hostname to <span class="searchword0" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(255, 255, 153); background-position: initial initial; background-repeat: initial initial; ">Tor</span> directly. You can't try to <span class="searchword3" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(204, 204, 255); background-position: initial initial; background-repeat: initial initial; ">resolve</span> it to an IP address, since there <i>is</i> no corresponding IP address: the server is hidden, after all!</p>
<p>So, how do you make your application pass the hostname directly to <span class="searchword0" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(255, 255, 153); background-position: initial initial; background-repeat: initial initial; ">Tor</span>? You can't use SOCKS 4, since SOCKS 4 proxies require an IP from the client (a web browser is an example of a SOCKS client). Even though SOCKS 5 can accept either an IP or a hostname, most applications supporting SOCKS 5 try to <span class="searchword3" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(204, 204, 255); background-position: initial initial; background-repeat: initial initial; ">resolve</span> the name before passing it to the SOCKS proxy. SOCKS 4a, however, always accepts a hostname: You'll need to use SOCKS 4a.</p>
<p>Some applications, such as the browsers Mozilla Firefox and Apple's Safari, support sending <span class="searchword2" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(204, 255, 255); background-position: initial initial; background-repeat: initial initial; ">DNS</span> queries to <span class="searchword0" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(255, 255, 153); background-position: initial initial; background-repeat: initial initial; ">Tor</span>'s SOCKS 5 proxy. Most web browsers don't support SOCKS 4a very well, though. The workaround is to point your web browser at an HTTP proxy, and tell the HTTP proxy to speak to Tor with SOCKS 4a. We recommend Polipo as your HTTP proxy.</p>
<p>For applications that do not support HTTP proxy, and so cannot use Polipo, <a class="ext-link" href="http://www.freecap.ru/eng/" style="text-decoration: none; color: rgb(102, 6, 158); border-bottom-width: 1px; border-bottom-style: dotted; border-bottom-color: rgb(187, 187, 187); "><span class="icon" style="background-image: url(https://trac.torproject.org/images/extlink.gif); background-attachment: initial; background-origin: initial; background-clip: initial; background-color: initial; padding-left: 12px; background-position: 50% 50%; background-repeat: no-repeat no-repeat; "> </span>FreeCap</a> is an alternative. When using <a class="missing wiki" style="color: rgb(153, 153, 136); ">FreeCap?</a> set proxy protocol to SOCKS 5 and under settings set <span class="searchword2" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(204, 255, 255); background-position: initial initial; background-repeat: initial initial; ">DNS</span> name resolving to remote. This will allow you to use almost any program with <span class="searchword0" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(255, 255, 153); background-position: initial initial; background-repeat: initial initial; ">Tor</span> without leaking DNS lookups and allow those same programs to access hidden services.</p>
<p>See also the <a class="wiki" href="/projects/tor/wiki/TheOnionRouter/TorFAQ#HowdoIcheckifmyapplicationthatusesSOCKSisleakingDNSrequests" style="text-decoration: none; color: rgb(102, 6, 158); border-bottom-width: 1px; border-bottom-style: dotted; border-bottom-color: rgb(187, 187, 187); ">question on <span class="searchword2" style="background-image: initial; background-attachment: initial; background-origin: initial; background-clip: initial; background-color: rgb(204, 255, 255); background-position: initial initial; background-repeat: initial initial; ">DNS</span></a>.</p>
<p><br></p><p>See also:</p><p><a href="https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/TorFAQ">https://trac.torproject.org/projects/tor/wiki/TheOnionRouter/TorFAQ</a><br></p><p><br></p><p>Regards,</p><p>Michael</p>
</span><br><div class="gmail_quote">2010/11/18 <span dir="ltr"><<a href="mailto:zzzjethro666@email2me.net">zzzjethro666@email2me.net</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<font color="black" size="2" face="arial"><font color="black" face="arial" size="2">
<div> <br>
</div>
<div> <font face="Arial, Helvetica, sans-serif">hi<br>
Can someone tell me exactly what is the apparatus that resolves an onion URL?<br>
Is it a server that holds all the onion addresses, a software or what?<br>
Thanks<br>
</font>
</div>
<div style="clear:both"></div>
</font></font>
</blockquote></div><br><br clear="all"><br>-- <br>Michael Gomboc<br><a href="http://www.viajando.at">www.viajando.at</a><br>pgp-id: 0x5D41FDF8<br>