Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Local DoH queried despite per-container proxy settings #2611

Open
2 tasks done
lxgr opened this issue Jan 28, 2024 · 0 comments
Open
2 tasks done

Local DoH queried despite per-container proxy settings #2611

lxgr opened this issue Jan 28, 2024 · 0 comments
Labels
bug Something is broken!

Comments

@lxgr
Copy link

lxgr commented Jan 28, 2024

Before submitting a bug report

  • I updated to the latest version of Multi-Account Container and tested if I can reproduce the issue
  • I searched for existing reports to see if it hasn't already been reported

Step to reproduce

  1. Configure a per-container SOCKS proxy (using a proxy that supports remote hostname lookups)
  2. Enable DoH in the Firefox settings, using a DNS resolver different from what the SOCKS proxy uses, using either "Increased Protection" or "Max Protection"
  3. Visit any DNS resolver debugging websites

Actual behavior

DNS is queried via both the remote SOCKS proxy and the local DoH resolver, as evidenced by the resolver site showing queries from both the DoH and the SOCKS proxy's DNS resolver.

The responses to the local DoH resolver seem to be actually disregarded for HTTP requests, e.g. when I block a given domain on the DoH resolver at the DNS level (making it return NXDOMAIN), page loads will still work due to the valid response to the SOCKS proxy's resolver.

Expected behavior

DNS is queried only via the remote SOCKS proxy.

Additional informations

I've verified that this happens without any extensions that perform CNAME uncloaking such as uBlock (which is normally a source of "DNS leaks"), and also with Enhanced Tracking Protection disabled.

It does not happen with DoH set to "Off", in which case all queries go through the proxy's resolver.

Provide a copy of Troubleshooting Information page (optional)

No response

@lxgr lxgr added the bug Something is broken! label Jan 28, 2024
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
bug Something is broken!
Projects
None yet
Development

No branches or pull requests

1 participant