DNS not working on workstation


My gateway seems to be configured correctly. Whonixcheck reports no problems. My workstation is vanilla Debian 8.0. It can ping the gateway, and it can also connect to the Internet using IP addresses (for example getting apt updates). But it cannot resolve domain names (whether onion addresses or clearnet names), despite having the gateway set as its name server.

Any suggestions about what might be wrong?


Update: it spontaneously started working, then stopped again. I’m still not sure what is wrong. Restarting tor on the gateway doesn’t seem to be the cure.

Good day,

Which hypervisor is used, KVM or VBox?

Have a nice day,


1 Like

It’s KVM. Oh, and it’s working again for now. Unreproducable random DNS problems FTW!

It’s happening again. This time after I configure a new workstation, DNS fails for that workstation only. For the other workstations that were already setup, it is fine. Their network settings are identical (except for IP address, obviously). Restarting the gateway does not help. Restarting the workstation does not help.

Some kind of weird arp problem? I really don’t know.

It has now gotten even worse; it’s no longer just a problem with the transparent DNS; the transparent proxying is also not working for these workstations:

user@host:~$ ping
PING ( 56(84) bytes of data.
64 bytes from icmp_seq=1 ttl=64 time=0.240 ms
64 bytes from icmp_seq=2 ttl=64 time=0.226 ms
64 bytes from icmp_seq=3 ttl=64 time=0.223 ms
--- ping statistics ---
3 packets transmitted, 3 received, 0% packet loss, time 1999ms
rtt min/avg/max/mdev = 0.223/0.229/0.240/0.019 ms
user@host:~$ dig +add +trace @ www.google.com

; <<>> DiG 9.9.5-9+deb8u8-Debian <<>> +add +trace @ www.google.com
; (1 server found)
;; global options: +cmd
;; connection timed out; no servers could be reached

user@host:~$ curl
curl: (7) Failed to connect to port 80: Connection timed out

But on an identically-configured workstation:

user@host:~/bin$ dig +add +trace @ www.google.com

; <<>> DiG 9.9.5-9+deb8u8-Debian <<>> +add +trace @ www.google.com
; (1 server found)
;; global options: +cmd
;; Received 17 bytes from in 3 ms

user@host:~$ curl
<HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8">
<H1>301 Moved</H1>
The document has moved
<A HREF="http://www.google.com/">here</A>.

Everything else is working apart from this!

Sorry to bump this after such a long time but I still have my original problem. The workstation has the gateway set in /etc/resolv.conf, and can ping the gateway, but DNS queries on the workstation aren’t working for some reason. I don’t know what else to try and would value any suggestions.

Other than changed IP address, is the new workstation from a fresh image? Any software installed? changes to firewalls? proxy tunnels?
The working workstations are connected to the same gateway, right?

1 Like

It is from the self same image as other workstations that are working as intended. Literally nothing is different except for IP address, which has been incremented. They are not Whonix workstation images but vanilla Debian images.

The only thing that is weird about my setup is that the web interface I use to administer my VMs is Proxmox. I have two different bridges configured in Proxmox with some non-Whonix VMs attached to one of them, and the Whonix VMs attached to the other.