Comments (6)
To elaborate, perhaps running a local DNS caching server would enhance privacy. In the current config, your upstream DNS servers will be seeing all the queries your box generates, this may not be wanted. Unbound or anything that has DNSSEC would probably be a good choice.
from streisand.
@evaryont I am looking into this now. I hadn't heard of it before.
@sporkman DNS leaks do not happen with any of the services that Streisand sets up. The dnsmasq local DNS caching server gets installed and is used in conjunction with OpenVPN connections and OpenVPN connections that are wrapped by stunnel. L2TP/IPsec, OpenSSH, Shadowsocks, and Tor also do not leak DNS queries to your ISP's upstream DNS servers either when they are configured according to the instructions. DNS blocking and filtering is the way that a lot of censorship happens, so it was really important to me to get this right. In the SSH instructions, for example, there's an entire section in the Firefox configuration segment detailing how to send DNS queries through the SOCKS proxy. That's just one example. If you are aware of any areas where DNS leaks are happening, please let me know! That would be a serious bug that I would address right away :)
from streisand.
After reading through the documentation and looking into the setup process here are the two biggest issues that I see:
- Cjdns doesn't allow you to access any websites or other resources on the traditional internet. Its utility is therefore somewhat limited.
- You cannot connect to an existing mesh network unless you are authorized by another user who has already connected, so it's not possible to fully automate the process. Your connection to the network depends on the chain you establish, and the setup appears to be fragile.
Point number two is the biggest deal breaker, but it also sounds like the the largest mesh network, Hyperboria, is still in an experimental state. I think the project's goals are admirable, and I look forward to seeing how the experiment plays out, but I don't think that cjdns is a good fit for Streisand right now. Still, thank you for the suggestion!
from streisand.
I hope this doesn't re-open the issue, but my comments about possible leaks were purely guesstimations based on the desire of the OP to integrate another caching DNS server. I have no evidence, suspicions, or hunches about any leaks. :)
from streisand.
OK, that's a relief! Cjdns has a bit of a confusing name in my opinion. It sounds like a caching DNS server, but it's actually a very ambitious mesh networking project.
from streisand.
With the planned goal of including a flag to disable L2TP, would you consider a pull request to include a flag that enables cjdns? It's not fully automated, but does include some cjdns-only websites. (A few people I talked to in the project's IRC channel mentioned running a basic index site of other cjdns nodes only accessible within the network.) So check box 1. 😸
However, you are right that it requires manual intervention to get connected in the first place, so this playbook would solely be an opt-in feature.
from streisand.
Related Issues (20)
- Google Cloud
- problem in Refresh the Streisand GPG keyring with keyserver information - Ubuntu 16 HOT 5
- Install fails at "Add the Wireguard PPA" HOT 6
- Error if Install Python using a raw SSH command to enable the execution of Ansible modules
- Wait for the GPG agent and dirmngr control sockets]
- Not possible to install v2ray-plugin any more due to go version conflicts HOT 3
- Giving error at final step HOT 1
- Feedback on installation - Built from Mint 19.3 on real hardware to DigitalOcean droplet HOT 1
- HOWTO: install streisand on ubuntu16 - 2020-11-04 HOT 2
- Feature request: DNS services enabled via manual device setup
- The whole scripts needs update HOT 5
- HOWTO Install on Ubuntu 20.04 HOT 6
- Invalid type for parameter Unit when installing on AWS from Mac HOT 2
- UNREACHABLE! Failed to connect to the host via ssh
- Window 10 Using WSL
- The directory ./venv already exists, and it does not appear to contain a Python virtualenv.
- error install Ubuntu 16.04 HOT 4
- FAILED - RETRYING: Refresh the Streisand GPG keyring with keyserver information HOT 6
- Streisand
- This repository has been marked as archived, but the streisand-discussions repo will remain open
Recommend Projects
-
React
A declarative, efficient, and flexible JavaScript library for building user interfaces.
-
Vue.js
🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.
-
Typescript
TypeScript is a superset of JavaScript that compiles to clean JavaScript output.
-
TensorFlow
An Open Source Machine Learning Framework for Everyone
-
Django
The Web framework for perfectionists with deadlines.
-
Laravel
A PHP framework for web artisans
-
D3
Bring data to life with SVG, Canvas and HTML. 📊📈🎉
-
Recommend Topics
-
javascript
JavaScript (JS) is a lightweight interpreted programming language with first-class functions.
-
web
Some thing interesting about web. New door for the world.
-
server
A server is a program made to process requests and deliver data to clients.
-
Machine learning
Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.
-
Visualization
Some thing interesting about visualization, use data art
-
Game
Some thing interesting about game, make everyone happy.
Recommend Org
-
Facebook
We are working to build community through open source technology. NB: members must have two-factor auth.
-
Microsoft
Open source projects and samples from Microsoft.
-
Google
Google ❤️ Open Source for everyone.
-
Alibaba
Alibaba Open Source for everyone
-
D3
Data-Driven Documents codes.
-
Tencent
China tencent open source team.
from streisand.