Use sys-whonix for all dns-requests

User Support
1

by default sys-net resolves all dns-requests. How can i redirect every dns-requests from sys-net to sys-whonix?

2

You’re likely misunderstanding the intended architecture.

Route AppVMs → sys-whonix for Tor + DNS

  • sys-whonix (based on whonix-gw ) forces all traffic, including DNS, through Tor.
  • Any qube (e.g., anon-whonix or a custom AppVM) set to use sys-whonix as its NetVM will have:
    • All TCP traffic routed over Tor.
    • All UDP DNS queries intercepted and sent via Tor’s DNSPort (port 5353).
  • This is automatic — no extra DNS redirection needed.
3

Mhhh, no, let me explain again.

Whonix-Workstation → sys-whonix → sys-firewall → sys-net :white_check_mark:
AppVM → sys-firewall → sys-net

Though what I want is:

AppVM --> sys-firewall --> sys-net
                              |
                              |
                             \ /
              requests DNS from sys-whonix
4

So you want your traffic to be routed normally but just DNS requests to be made over Tor? What’s your use-case?

5

Exactly.
Use-case: Anonymize my DNS.

6

What are you aiming to anonymize it from? Your ISP? If you don’t tunnel your other traffic, they’ll still be able to see which sites you visit without a problem.

7

The DNS provider.