From aaa63c6b8bf9283ac8d25b8afc484cbb4b5e068d Mon Sep 17 00:00:00 2001
From: netico <netico.42@protonmail.com>
Date: Fri, 18 Mar 2022 17:39:28 +0100
Subject: [PATCH] anarres - ANti Authoritarian Recursive RESolver

---
 Network/README.md              | 42 ++++++++++++++++++++++++++++++++++
 Network/anarres/Dockerfile     | 11 +++++++++
 Network/anarres/dnsmasq.config |  5 ++++
 Network/anarres/start.sh       |  9 ++++++++
 Network/anarres/torrc.config   |  6 +++++
 5 files changed, 73 insertions(+)
 create mode 100644 Network/anarres/Dockerfile
 create mode 100644 Network/anarres/dnsmasq.config
 create mode 100755 Network/anarres/start.sh
 create mode 100644 Network/anarres/torrc.config

diff --git a/Network/README.md b/Network/README.md
index 818d064..4e881fb 100644
--- a/Network/README.md
+++ b/Network/README.md
@@ -5,3 +5,45 @@
 ## [TCP investigation](https://git.lattuga.net/netico/code-library/src/master/Network/Investigation)
 
 In the [Investigation](https://git.lattuga.net/netico/code-library/src/master/Network/Investigation) folder you can find a **bash** script to analyze **active TCP connections** on a **GNU/Linux** system.
+
+## [anarres](anarres): **AN**ti **A**uthoritarian **R**ecursive **RES**olver
+
+### How to avoid censorship at the DNS level?
+
+[**Tor**](https://www.torproject.org/) provides a built-in **DNS forwarder**.
+
+This is a minimal **Docker** container that uses a local caching DNS server ([**dnsmasq**](https://dnsmasq.org)) which will compensate for **TorDNS** being a little slower than traditional DNS servers.
+
+### Usage
+
+Build it using:
+
+    docker build --pull --rm -f Dockerfile -t anarres:latest .
+
+Run it using:
+
+    docker run --rm -d -p 53:53/udp anarres:latest
+
+Test it using:
+
+    dig @127.0.0.1 cr.yp.to
+
+Expected output:
+
+    ; <<>> DiG 9.11.5-P4-5.1+deb10u6-Debian <<>> @127.0.0.1 cr.yp.to
+    ; (1 server found)
+    ;; global options: +cmd
+    ;; Got answer:
+    ;; ->>HEADER<<- opcode: QUERY, status: NOERROR, id: 35649
+    ;; flags: qr rd ra; QUERY: 1, ANSWER: 1, AUTHORITY: 0, ADDITIONAL: 0
+
+    ;; QUESTION SECTION:
+    ;cr.yp.to. IN A
+
+    ;; ANSWER SECTION:
+    cr.yp.to. 3600 IN A 131.193.32.109
+
+    ;; Query time: 278 msec
+    ;; SERVER: 127.0.0.1#53(127.0.0.1)
+    ;; WHEN: Fri Mar 18 17:13:00 CET 2022
+    ;; MSG SIZE  rcvd: 42
diff --git a/Network/anarres/Dockerfile b/Network/anarres/Dockerfile
new file mode 100644
index 0000000..d8d2bef
--- /dev/null
+++ b/Network/anarres/Dockerfile
@@ -0,0 +1,11 @@
+FROM alpine:3.15
+RUN apk -U upgrade && \ 
+  apk add --no-cache bash && \
+  apk add --no-cache sudo && \
+  apk add --no-cache tor && \
+  apk add --no-cache dnsmasq
+COPY ./torrc.config /anarres/
+COPY ./dnsmasq.config /anarres/
+COPY ./start.sh /anarres/
+ENTRYPOINT [ "/anarres/start.sh" ] 
+EXPOSE 53/udp
diff --git a/Network/anarres/dnsmasq.config b/Network/anarres/dnsmasq.config
new file mode 100644
index 0000000..d6e1ed6
--- /dev/null
+++ b/Network/anarres/dnsmasq.config
@@ -0,0 +1,5 @@
+# Configuration file for dnsmasq.
+
+port=53
+no-resolv
+server=127.0.0.1#5353
diff --git a/Network/anarres/start.sh b/Network/anarres/start.sh
new file mode 100755
index 0000000..684d22c
--- /dev/null
+++ b/Network/anarres/start.sh
@@ -0,0 +1,9 @@
+#!/bin/bash
+
+# On Docker for Linux, the IP address of the gateway between
+# the Docker host and the bridge network is 172.17.0.1
+# if you are using default networking
+IPADDRESS=$(ip -4 -o address | grep eth0 | cut -d/ -f1 | awk {'print $4'})
+
+sudo -u tor tor -f /anarres/torrc.config &
+dnsmasq --conf-file=/anarres/dnsmasq.config --listen-address=$IPADDRESS --no-daemon
\ No newline at end of file
diff --git a/Network/anarres/torrc.config b/Network/anarres/torrc.config
new file mode 100644
index 0000000..4248720
--- /dev/null
+++ b/Network/anarres/torrc.config
@@ -0,0 +1,6 @@
+# Tor
+
+SOCKSPort 0
+DataDirectory /var/lib/tor
+DNSPort 5353
+AutomapHostsOnResolve 1