projects/en/tordnsel.wml
2a9aaa80
 ## translation metadata
40e07e2e
 # Revision: $Revision$
2a9aaa80
 # Translation-Priority: 3-low
 
 #include "head.wmi" TITLE="A public TorDNSEL service" CHARSET="UTF-8"
 <div id="content" class="clearfix">
 	<div id="breadcrumbs">
b289ef06
     <a href="<page index>">Home &raquo; </a>
2a9aaa80
     <a href="<page projects/projects>">Projects &raquo; </a>
     <a href="<page projects/tordnsel>">TorDNSEL</a>
   </div>
f84c6b85
 	<div id="maincol">
2a9aaa80
 
     <!-- PUT CONTENT AFTER THIS TAG -->
     <h1>The public TorDNSEL service</h1>
f84c6b85
 
2a9aaa80
     <h2>What is the TorDNSEL?</h2>
f84c6b85
 
2a9aaa80
     <p>TorDNSEL is an active testing, DNS-based list of Tor exit nodes. Since Tor
     supports exit policies, a network service's Tor exit list is a function of its
     IP address and port. Unlike with traditional DNSxLs, services need to provide
     that information in their queries.</p>
f84c6b85
 
2a9aaa80
     <p>Previous DNSELs scraped Tor's network directory for exit node IP addresses,
     but this method fails to list nodes that don't advertise their exit address in
     the directory. TorDNSEL actively tests through these nodes to provide a more
f84c6b85
     accurate list.</p>
 
2a9aaa80
     <p>The full background and rationale for TorDNSEL is described in the official
1700644e
     <a href="https://gitweb.torproject.org/tordnsel.git/tree/doc/torel-design.txt">design
2a9aaa80
     document</a>. The current service only supports the first query type mentioned
     in that document.</p>
f84c6b85
 
2a9aaa80
     <h2>How can I query the public TorDNSEL service?</h2>
f84c6b85
 
2a9aaa80
     <p>Using the command line tool dig, users can ask type 1 queries like so:</p>
f84c6b85
 
2a9aaa80
     <pre>dig 209.137.169.81.6667.4.3.2.1.ip-port.exitlist.torproject.org</pre>
f84c6b85
 
2a9aaa80
     <h2>What do the received answers mean?</h2>
f84c6b85
 
2a9aaa80
     <p>A request for the A record
     "209.137.169.81.6667.4.3.2.1.ip-port.exitlist.torproject.org" would return
     127.0.0.2 if there's a Tor node that can exit through 81.169.137.209 to port
     6667 at 1.2.3.4. If there isn't such an exit node, the DNSEL returns
     NXDOMAIN.</p>
f84c6b85
 
2a9aaa80
     <p>Other A records inside net 127/8, except 127.0.0.1, are reserved for future
     use and should be interpreted by clients as indicating an exit node. Queries
     outside the DNSEL's zone of authority result in REFUSED. Ill-formed queries
     inside its zone of authority result in NXDOMAIN.</p>
f84c6b85
 
2a9aaa80
     <h2>How do I configure software with DNSBL support?</h2>
f84c6b85
 
2a9aaa80
     <p>Users of software with built-in support for DNSBLs can configure the
     following zone as a DNSBL:</p>
f84c6b85
 
2a9aaa80
     <pre>[service port].[reversed service
     address].ip-port.exitlist.torproject.org</pre>
f84c6b85
 
2a9aaa80
     <p>An example for an IRC server running on port 6667 at IP address 1.2.3.4:</p>
     <pre>6667.4.3.2.1.ip-port.exitlist.torproject.org</pre>
f84c6b85
 
2a9aaa80
     <h2>How reliable are the answers returned by TorDNSEL?</h2>
f84c6b85
 
2a9aaa80
     <p>The current public service is operating on an experimental basis and hasn't
     been well tested by real services. Reports of erroneous answers or service
     interruption would be appreciated. Future plans include building a fault
     tolerant pool of DNSEL servers. TorDNSEL is currently under active
     development.</p>
f84c6b85
 
2a9aaa80
     <h2>How can I run my own private TorDNSEL?</h2>
f84c6b85
 
2a9aaa80
     <p>You can learn all about the code for TorDNSEL by visiting the <a
32316cbf
     href="http://p56soo2ibjkx23xo.onion/">official onion service</a> through
2a9aaa80
     Tor.</p>
f84c6b85
 
2a9aaa80
     <p>You can download the latest source release from the <a
32316cbf
     href="http://p56soo2ibjkx23xo.onion/dist/tordnsel-0.0.6.tar.gz">onion
f84c6b85
     service</a> or from a
     <a href="/tordnsel/dist/tordnsel-0.0.6.tar.gz">
2a9aaa80
     local mirror</a>. It's
     probably wise to check out the current revision from the darcs repository
32316cbf
     hosted on the aforementioned onion service.</p>
f84c6b85
 
     <p>For more information or to report something useful, please email
 the
2a9aaa80
     <tt>tordnsel</tt> alias on our <a href="<page about/contact>">contact page</a>.</p>
   </div>
   <!-- END MAINCOL -->
   <div id = "sidecol">
 #include "side.wmi"
 #include "info.wmi"
   </div>
   <!-- END SIDECOL -->
 </div>
 <!-- END CONTENT -->
f84c6b85
 #include <foot.wmi>