Whonix DNS leak test results....Are these normal?

[new2this]

Hello so I decided to do a DNS leak test while on Whonix I tried 3 different sites the first was ​http://www.dnsleaktest.com/ which said that I was on an anonymous server. Then I used www.ipleak.net which said I was in Canada but still no leaks.

Then I tried ​http://www.ip-check.info which gave me the strangest results. It said my IP location was in Zurich, why did the locations change?
Then it listed the following results:

Authentication: Protected Rating: Good
HTTP sessuin: 10 minutes until your tor identity is changed. Rating: Medium
Referer: Original websites may see what website you are coming from Rating: Medium

Questions:

I use a browser spoofer on the clearnet is that tool also working on tor? Is that why it says my tor ID will be changed in 10 minutes?

How can I get a higher rating on the referer section so that websites can’t see where I am coming from.

Why did my location differ between websites?

Again I am very new to all of this I appreciate any input or analysis of what this means.

Thanks

[Hiberts]

If you are using Whonix is all normal, the tor exit node change at specific time .
There’s no leak on Whonix, expecially your IP, you Workstation doesn’t know your ip , only the gateway but it’s not which makes queries , you are protected from Workstation .

[new2this]

I just found it strange that on my clearnet Firefox browser spoofer I have the change of browser ID to change every 10 minutes which was the same as the time to change the tor exit node is that a coincidence? Also how can I keep websites from knowing where I was before?

Thanks

[jimmy]

[quote=“new2this, post:3, topic:1558”]I just found it strange that on my clearnet Firefox browser spoofer I have the change of browser ID to change every 10 minutes which was the same as the time to change the tor exit node is that a coincidence?
Thanks[/quote]

Yes, the timing of ten minutes is just coincidence.

The only way a website can know where you were before is by HTML referrer headers or cookies. But that is an issue of configuring you browser, not Whonix.

[new2this]

Is it possible to configure the tor browser to disable websites ability to see where I am coming from??

Thanks

[Ego]

Good day,

yes, simply enter “about:config” in the adress bar, accept the warning, look for “network.http.sendRefererHeader” and change it to 0. However, please keep in mind, that, doing this wrong may make your browser unstable and/or less safe.

Have a nice day,

Ego

[new2this]

Thank you Ego.

Just to confirm that is the best choice for security on tor right? I didn’t some how make my browser unique in anyway to stand out did I?

Thanks for all your help.

[Ego]

Good day,

as far as I’m concernd, if you’ve really only changed this, you shouldn’t stand out over other people using the TBB.

Have a nice day,

Ego

[Patrick]

In short answering to the original post:
Nothing to worry about. Don’t modify Tor Browser.

Hello so I decided to do a DNS leak test while on Whonix I tried 3 different sites the first was ​http://www.dnsleaktest.com/ which said that I was on an anonymous server. Then I used www.ipleak.net which said I was in Canada but still no leaks.

https://www.whonix.org/wiki/Stream_Isolation

Then I tried ​http://www.ip-check.info which gave me the strangest results.

Forget about https://www.whonix.org/wiki/Ip-check.info.

HTTP sessuin: 10 minutes until your tor identity is changed. Rating: Medium

Referer: Original websites may see what website you are coming from Rating: Medium

Forget about https://www.whonix.org/wiki/Ip-check.info.

I use a browser spoofer on the clearnet is that tool also working on tor?

No. Whonix/Tor is not influenced by the underlying network connection. It works or it does not work.

Is that why it says my tor ID will be changed in 10 minutes?

Tor circuits expire by Tor design. This is normal. Forget about https://www.whonix.org/wiki/Ip-check.info.

Tor Browser deals with that. Modifications recommended against.
Forget about https://www.whonix.org/wiki/Ip-check.info.
Either read through all the existing discussions referer spoofing on torproject.org, agree with them or if applicable, make an educated argument, or leave it as is.

Why did my location differ between websites?

Different browser tabs are isolated from each other. Stream isolated. (https://www.whonix.org/wiki/Stream_Isolation) Likely end up with different exit relays. Nothing to be worries about.