@Datenknecht
Following your instructions worked, after I restarted. I replaced them with
some OpenNIC servers.
Change the resolv.conf file with the servers of your choice and make it
inalterable with
$ sudo chattr +i /etc/resolv.conf
This avoids any posible overwriting. To reverse the inalterability of the
file
$ sudo chattr -i /etc/resolv.conf
removing the package resolvconf will restore /etc/resolv.conf to it's old
behaviour - in the process it will even remove the DO NOT EDIT message in
the file.
but, removing this package may (or may not) be trivial... on my netinst
install without DE metapackages, it works great, YMMV.
I figured this out last night a few minutes after I poste this. Thanks
anyways.
This also fixed the DNS poisoning that my ISP was doing, so I am more than
happy.
When I try this method, there is no save option when I put in the IP
addresses.
cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by
resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.0.1
nameserver 8.8.8.8
nameserver 213.186.33.99
search trisquel.info
domain trisquel.info
Setting up
The same for me after removing the nameserver lines. Thanks a lot! :-)
These lines are still present though:
search trisquel.info
domain trisquel.info
Is that a bad thing,too?
I don't know what they mean but they don't sound dangerous.
I have the same question as someone before me:
Sorry if this is a stupid question... To fix this problem, can I just remove
the 8.8.8.8 line from /etc/resolvconf/resolv.conf.d/tail? Or must I replace
it with something else?
Try. If after removing it the internet don't work, replace it with something
else. Like the DNS from your ISP or anything you like.
Thanks, downloading now :)
Good to know, thank you!
Does anyone know or can confirm that if I download the image again today,
this bug will already be fixed?
Yes I can confirm. Use:
http://devel.trisquel.info/makeiso/iso/
There are many Reasons that why companies outsource.Candor Recruitment
Agency Pakistan Firstly they do it reduce manpower cost .Candor
Recruitment Group Pakistan then they find it cheaper to hire offshore workers
than to hire local workers because they do not need to pay for
I think had an error trying to update. I didn't write down the error
message, unfortunately. I still use Google's name server.
I still use Google's name server.
Then go change it.
Does no one see a problem with package updates overwriting configuration
files? Maybe it's been customized and the update just barrels over it all...
I've just researched this and it is true, that configuration leaked from the
build server's own configuration, which it's used during the build process
for the iso image.
The resolv.conf file is emptied in the clean-up process for the image, but
apparently recent versions of the
I've been compromised! And it seems as though I can't remove that particular
entry, lest the whole bloody internet fails O.o..
Tried the numerous suggestions here, keeps on popping up after reboot each
and every time.
I also get the error chattr: Operation not supported while reading flags
You must have some working DNS servers or the internet won't work for you.
You could e.g. ask your ISP for details or use something like opennic.
If you edit resolv.conf it won't do much good as you've noticed as the
settings are in /etc/resolvconf/resolv.conf.d/tail
I should've been
Thank you quidam!
Thx mate, now when rebooting nameserver 8.8.8.8 gets commented out by
default. Now I just gotta figure out how to hook Tor up to everything else
(browser already figured out)
This is a serios issue. Trisquel must to give us a solution to replace Google
DNS with IP from our DNS provider. What files to edit to put IP from my DNS
provider? I edited already and I put my DNS in the GUI interface but is not
working!
Somebody with a good English please put this as a
Well I knew about Google DNS server for a long timem I basically change my
DNS inside my Cisco Router, then inside my Trisquel Pc.
Im using Comodo Servers, very fast and clean.4
Thank you for your comment. When I now run grep 8.8.8.8 /etc/resolv.conf
nothing appears. Before that nameserver 8.8.8.8 appeared. After installing
unbound, your suggested command brings this result:
echo nameserver 127.0.0.1 /etc/resolv.conf chattr +i /etc/resolv.conf
bash:
I haven't had the time to do this yet.. though I do want to, as soon as I can
:P
Thank you, I've changed it.
Out of curiosity, and based on what I saw on my own computer:
a) resolv.conf was pointing to google.
b) I had set my DNS servers to OpenNIC on my router.
c) when I checked on dnsleaktest.com my computer was using the OpenNIC DNS.
So:
What does resolv.conf do and in
Well, this is what I like and dislike about Trisquel. I like that its free
software and we can look at things and change them, but I dislike the fact
that some very basic security/privacy rules are not taken in consideration by
the developers.
There is no need at all to use googe dns!
- I
What does resolv.conf do and in what situation would it send
information to google?
It lists nameservers that programs will use to translate host names to
IP addresses or do other DNS queries (often URLs of domains that you
visit). Programs will send these queries to some of these nameservers.
I think that the future versions of GNU+Linux Trisquel could have a modified
resolv.conf file which would set the nameserver value to one from the OpenNIC
project.
Better yet (but perhaps expensive), one could contribute to the OpenNIC
project by setting up a DNS which complains to such
Thank you Michal.
Michal M, I tried to follow your instructions at #3
(
https://trisquel.info/en/forum/you-might-be-using-google-name-server#comment-40233
)
but i get the error:
chattr: Operation not supported while reading flags on /etc/resolv.conf
Should I be running my own name server if I'm not tech
http://www.opennicproject.org/configure-your-dns/how-to-set-up-dns-servers-in-ubuntu-linux/
I can't see a DNS tab in Network settings. I guess in this case the Ubuntu
guide might not apply in Trisquel.
Good point. However, I would suggest people use Tor Browser Bundle, it's
designed to prevent DNS leaks by default.
Well, Tails comes to mind, they use mostly free software (although I admit
they might have drivers in the kernel, I am not positive about this), and
have privacy as the main strenght.
The reason why I don't use Tails, is actually the reason that makes it so
good as a private OS:
-No way to
That's why I suggested to use Tor Browser Bundle. The browser is made in a
such a way that tries to prevent dns leaks. So far, it seems to work for me.
However, I think this is just another thing to be changed in the next
Trisquel release... or better yet, just provide a security update that
First, click on edit connections. Then find the one you're using (if Ethernet
it likely is under Wired Connection 1, if wireless look for the SSID of your
router). Select and click edit. Go to IPv4 and change the method setting from
Automatic (DHCP) to Automatic (DHCP) addresses only. This
Thanks, I will try this!
How could one know the ISP DNS? Usually the support is very poor in my ISP,
if I ask them about DNS, they probably won't know what I am talking about =S
When your modem gets hooked up it should fetch this information from your
ISP. DHCP would result in your machine getting it handed out to you by either
the router or the modem.
grep 8.8.8.8 /etc/resolv.conf
If this command gives you output of: nameserver 8.8.8.8 that means everything
you do online is sent to google. Apparently this is the default setting in
Trisquel! Probably was inherited from Ubuntu.
I filed a bug here https://trisquel.info/en/issues/9782
Well, shit on me then!
Can I switch to another nameserver?
Yes you can, you need to edit that tail file mentioned in the bug and
restart. (The restart could probably be avoided with 1337 skillz...) Your ISP
probably offers name servers, and those would be a good choice from a privacy
view point since your ISP already sees all your traffic.
(I use
It's easy to host your own, install unbound, run echo nameserver 127.0.0.1
/etc/resolv.conf chattr +i /etc/resolv.conf (set the nameserver. Edit
/etc/default/unbound to not forward to your ISP servers
(RESOLVCONF_FORWARDERS).
If forwarding is disabled, DNS servers of the domains you visit are
Are you sure it's default? My install does not have it (just in case I
actually looked at the entire file). I haven't change anything here as far as
I know.
I've been using OpenNIC for a while, but it doesn't resolve the government
websites in my country, so I use OpenDNS as a secondary DNS server.
Do you use DNS Crypt? https://www.opendns.com/technology/dnscrypt/
I had the dnscrypt-proxy from
https://launchpad.net/~xuzhen666/+archive/dnscrypt installed but noticed that
there isn't a package for 12.04 anymore. hmm
Turns out I do indeed get the output nameserver 8.8.8.8 so it looks like my
Trisquel is set to use google nameservers.
I'd appreciate any instructions for changing this.
(Also, I had assumed that nameservers only matter for server machines. So
this isn't the case? Can I host my own as per
Is 8.8.8.8 the IP of Google's DNS?
Nameservers are for DNS resolution as far as I know. In order for your
computer to resolve trisquel.info to its actual IP, you need one. Most of the
time, ISPs provide one for you. If you're gonna run your own, I'm afraid
you'd have to have your computer running all the time. In any case,
If you're gonna run your own, I'm afraid you'd have to have your computer
running all the time.
But why?
I need my domains only converted into ip adresses when my pc is running;
when my pc is off, I don't need a nameserver.
8.8.8.8 might be obtained by DHCP or another protocol from your router
or ISP.
There are two kinds of nameservers: authoritative and caching/recursive.
Authoritative nameservers tell everyone about a given domain and need to
work mostly all the time (there are usually two), no need to have one
I could be wrong, I've never run one of my own. Don't nameservers keep the
resolutions mostly cached or in memory? If it is possible to save them to a
file then perhaps it wouldn't be much of a problem. Resolution might be a
little slower.
So, if I were to run a nameserver on my laptop would the cache have to be
generated each time the computer boots? How long would that take?
Unbound doesn't keep the cache on disk, some other nameservers do (I
think djbdns's dnscache does). There is no static cache generation, on
each query the results are added to the cache. They contain time to
live which limits how long they will be kept.
I expected most names to have a TTL of
Here's a list of free and censorship-free DNS-servers:
https://anonymous-proxy-servers.net/wiki/index.php/Censorship-free_DNS_servers
Is 8.8.8.8 the IP of Google's DNS?
Yes. (one of them) https://en.wikipedia.org/wiki/Google_DNS
Considering that my resolv.conf file does not have that entry I don't think
it comes with Trisquel. Maybe some ISPs use Google's nameservers instead of
running their own.
Considering that most people are complaining about the same situation
happening to them, I think it's more reasonable to admit that it comes as a
default in Trisquel. Maybe somehow it got overwritten by your ISP
configurations.
Now, I am not saying that Trisquel is aligning with Google and
Here you have some DNS resolvers: http://www.opennicproject.org/
I just boot up from my Live CD and did not connect to the Internet. This is
the state of resolv.conf that comes in the install.
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by
resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver
By the way, connecting to a VPN or to Tor does not change the file. Those
that do have the line for the Google nameserver might want to check
dnsleaktest.com and see it if shows up.
I would just like to note to Tor users that you should use a proxy like
Polipo so DNS queries are routed through Tor with the rest of your traffic.
Andrew.
62 matches
Mail list logo
