[tor-talk] Tor, DNS leaks, and BrowserLeaks.com

[krishna e bera]

On 11/08/17 06:42 PM, blobby at openmailbox.org wrote:
> I am a little confused when using Tor with https://browserleaks.com/ip
> 
> My exit node is ogopogo in Canada. But the "DNS leak test" component of the above page says that my DNS servers are in Belgium:
> 
> 74.125.181.9	n/a	Google	Belgium, Brussels
> 74.125.47.1	n/a	Google	Belgium
> 74.125.47.11	n/a	Google	Belgium
> 74.125.47.138	n/a	Google	Belgium
> 74.125.47.8	n/a	Google	
> 
> Why is Google in Belgium the result of the DNS leak for a Canadian exit node?

The ISP or Hosting company automatically assigned name servers could be
Google.  What did you set as your DNS lookup on your exit node?
My Tor node uses unbound and has this
forward-zone:
	forward-addr: 8.8.4.4        # Google
	forward-addr: 8.8.8.8        # Google
	forward-addr: 37.235.1.174   # FreeDNS
	forward-addr: 37.235.1.177   # FreeDNS
	forward-addr: 50.116.23.211  # OpenNIC
	forward-addr: 64.6.64.6      # Verisign
	forward-addr: 64.6.65.6      # Verisign
	forward-addr: 74.82.42.42    # Hurricane Electric
	forward-addr: 84.200.69.80   # DNS Watch
	forward-addr: 84.200.70.40   # DNS Watch
	forward-addr: 91.239.100.100 # censurfridns.dk
	forward-addr: 109.69.8.51    # puntCAT
	forward-addr: 208.67.222.220 # OpenDNS
	forward-addr: 208.67.222.222 # OpenDNS
	forward-addr: 216.146.35.35  # Dyn Public
	forward-addr: 216.146.36.36  # Dyn Public