How to disable DHCP in Whonix and ensure no leaks

[Patrick]

related:

Why Whonix KVM need dnsmasq?

Hello. I am using Whonix KVM. The host OS is Debian 11. I would like to set up DNS over TLS on my host OS, but dnsmasq occupying port 53 and is interfering with the set up. Is there any problem to disable the DNS server by setting port=0 in dnsmasq? I am planning to set up DNS over TLS with systemd-resolved. For now, I have set up DNS over TLS by forwarding to unbound with the following settings. /etc/resolv.conf nameserver 127.0.0.1 /etc/dnsmasq.conf no-resolv server=127.0.0.1#5353 /…

@anon12802191

How to absolutely make sure that there are no leaks from Whonix ?

There’s no absolute security anywhere. Best available is:

Leak Tests

See also:

Whonix Documentation

This documentation is a crash course in anonymity and security on the Internet. Whonix ™ is a technological means to anonymity, but staying safe necessitates complete behavioral change; it is a complex problem without an easy solution. The more you know, the safer you can be.

@anon12802191

live in a country that is worse than North Korea

@anon12802191

And reason why I need to ensure there are no leaks is because my life literally depends on there being no leaks, this is not about going to prison but life or death situation

Then even learning about these tools would be dangerous. Be careful. I am not sure any software based solution can help you if the stakes are that high.

---

Note: I am not a maintainer of Whonix KVM so I cannot answer the main question.