Psi Jabber Client

See this page for instructions on how to use Flyspray: http://psi-im.org/wiki/Flyspray

Please Note!

Please do not create tasks here without discussing your bug or feature request on the forums or groupchat psi@conference.psi-im.org, *and* getting explicit confirmation by a developer to add it to flyspray.
Tasklist

FS#751 - Introduce the possibility to resolve dns through socks

Attached to Project: Psi Jabber Client
Opened by Noiano (noiano) - Thursday, 10 January 2008, 13:41 GMT-5
Last edited by Kevin Smith (kev) - Saturday, 12 January 2008, 13:12 GMT-5
Task Type Feature Request
Category Backend/Core
Status New
Assigned To No-one
Operating System All
Severity Medium
Priority Polish
Reported Version 0.11
Due in Version Undecided
Due Date Undecided
Percent Complete 0%
Votes 0
Private No

Details

Hello
psi version 0.11 leaks dns when using socks proxy. This is bad, especially when using anonymous proxies like tor.

From tor log:

>Jan 10 19:08:15.038 [Warning] Your application (using socks5 on port
> 5222) is giving Tor only an IP address. Applications that do DNS
> resolves themselves may leak information. Consider using Socks4A (e.g.
> via privoxy or socat) instead. For more information, please see
> http://wiki.noreply.org/noreply/TheOnionRouter/TorFAQ#SOCKSAndDNS.

It would be great to choose to resolve dns through socks proxy when it is selected as connection method.
This task depends upon

View Dependency Graph

This task blocks these from closing
FS#764 - Patch review (META TASK)
Comment by Martin (martin) - Saturday, 23 February 2008, 04:32 GMT-5
[05:21:26] <hannes> hi, I have a patch that psi no longer does dns requests if a socks proxy is enabled. (socks5 & socks4a provide hostname resolution, which is used in tor; if I want to connect to a jabber server via tor, I don't want to leak information via dns). you can get it from http://paste.lisp.org/display/56356


[05:22:40] <hannes> (if someone cares, feel free to ask further questions (hannes@jabber.berlin.ccc.de); would be nice to have it integrated into psi)
Comment by Noiano (noiano) - Saturday, 23 February 2008, 14:24 GMT-5
you can download the patch from here: http://www.opendylan.org/~hannes/XXX/psi-socks-no-dns-leaking.diff it is more "safe" than copy-paste from the previous link.
Thanks again hannes!

Loading...