Would it be difficult to add the capability of having a "DNS proxy?" That is, so that one could have FoxyProxy use different DNS servers according to a whitelist or blacklist for particular sites? It would be useful in the country I live in, that practices domain-based internet censorship for copyright and political reasons.
I've added this to my list
I've added this to my list of items to research. It's possible to do, but I'm not sure how difficult it is yet. I'll look into it. Thanks for the idea.
Eric
This is Intresting...
I use OpenNIC for some things & they provide a proxy in the uk for those not willing or able to change their dns settings.
I use firefox portable sometimes & I use FoxyProxy so that I don't overwhelm their proxy. (none of the other addons support patterns. Great work implementing that btw.) The method above would be even better as I could use a more local server. Also opendns does not have a proxy so this would work for that too. (maybe a localhost proxy intercepting port 53 & foxyproxy controls it.)
Great use of FoxyProxy!
Great use of FoxyProxy! Thanks for sharing it.
I haven't had time to look into this request at all, to be honest. I really could use another developer working with me.
Thanks, ...
Thanks,
I like all the geoip Avoidance stuff, But that use above wasn't too heavily bloged. Maybe I can look into it. (As a researcher, as I can't program beyond a somewhat simple batch & bash script.) Tomato (Open Source Firmware on a router.) had something to intercept DNS requests. If Firefox could handle reporting to an extension before the OS somehow the extension could handle it. the Standard DNS port is 53 using both tcp & udp, but I am not sure which one is more common or whether this would have to intercept udp replies or if the os can handle that.
Wondering here...
I Said above I can't program, but I might be able to interpret JavaScript & Xul. problem is interpreting where things belong. (XPI or after install.)
There are a few addons that handle DNS Requests, But because I don't know what I am looking for. FasterFox, Router Status are two addons worth looking at, both work with PortableFirefox & Both need to make some sort of api call if they are relying on the OS or firefox is handling Directly.
I Am working another angle too. but this seemed like something worth mentioning
Thanks! I looked closely at
Thanks!
I looked closely at Router Status. If you look at its dns.js file and the dnsLookup function in RouterStatus.js, you'll see it uses nsIDNSService to do DNS lookups. nsIDNSService is a Firefox interface that uses the underlying operating system's dns resolver.
The only way I know to change that behavior (not using the OS's DNS resolver) is to write my own DNS resolver in javascript with plain sockets. Although I know the socket piece of the work, I don't know how to write DNS lookups over sockets. I would have to learn the DNS protocol. I can do that but I suspect it's a lot of work. What do you think?
I really think this would be a cool feature for FoxyProxy.
Eric
well...
My lessons on the high technical stuff is slim to none. I have experimented with tor socks & a dab of OpenNIC, but that's not braging rights to the protocol. what I am hoping (& now can look & see) is that there may be a way to tie into the network stack in the OS but specify the dns nameserver on the behalf of the os first. that addon works on linux windows & bsd. based on my tests alone, & I'd bet OSX & the others share enough code too. I forgot a whole lot of javascript, (and it was webdev stuff not programming) but I can try to read it & look up some way,
on the other hand if you write it yourself you might be able to repair it quicker. You narrowed down what I would need to google deep & think.
I'll take a look at those .js's & nsIDNSService & maybe it can be modular instead of ground up.
(if I can learn & memorize some more stuff on the programming end, I'd be of more help.) A tool like this would be awesome. (in addition to the already awesome FoxyProxy of course.)
Sorry, I forgot about this project.
Sorry, I forgot about this project. I'll try & take a look at it tommorow. (Monday 04:15 now. I can't believe I'm up.)
I hope this can be figured out, so I can quit using a batch script or leave my own proxy on all the time. (my power bill did not approve of it.)
Man, I am sorry. I just
Man, I am sorry. I just can't seem to get this part into my day. Even if I could though, I'm not a programmer.
I definitely would like to see this happen. but in the meantime squid at my place is doing the job for OpenNIC & ssh's SOCKS5 function Is handling OpenDNS fine.
So I guess that's what I'd recommend if your up to it is use Squid with SSH & foxyproxy, but that doesn't really get to the root of this request, nor would it be the best solution for the country Anonymous is describing. (I try to follow all that censorship & anti-censorship news, I would think that there would be a better way based on your problem than what I came up with my different problem.)
OpenDNS has a SOCKS5
OpenDNS has a SOCKS5 server?? What's the address?
Sorry, I was Trying to sound coherent while Half asleep in ...
Sorry, I was Trying to sound coherent while Half asleep in the middle of the night,
(as far as I know) they don't. My proxy server (when using squid) now routes through OpenNIC & When using ssh -D I am using OpenDNS
While Still having only one computer on, OpenNIC does have a proxy, but in the UK when I'm in Canada or the states all the time, makes that a silly idea.
Also a thought for Anonymous, if you already know what they don't care about, then set that to direct connect, if they care about it use a proxy with encryption (SSH, HTTPS, etc.) esp. a type that will relay a DNS request. (most people say that only a socks5 will do that but regular http servers can, some are set not to.) any DNS request would be sent clear as day if not encrypted and could be droped (ignored) or rerouted to the same server your avoiding.
This Project is worthwhile for some reasons, but fighting censorship on it's own, there might be a better way. (My High School did Domain Filtering, Blocked all the DynDNS domains too. I c named my website to proxy.mysite.com & the software didn't check the cname too. So I know that someone has an answer.)
Are you on windows? I may have a solution for your case then.