socat TCP4-LISTEN:853,bind=localhost,reuseaddr,fork SOCKS4A:localhost:dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion:853,socksport=9050
openssl s_client -showcerts -crlf -connect localhost:853
getdns_query 1dot1dot1dot1.cloudflare-dns.com 127.0.0.1@853
forward-addr: 127.0.0.1@853#tor.cloudflare-dns.com
CloudFlare is only ONE OF THE MANY upstream recursive resolvers I use to protect the queries for my CLEARNET traffic.
socat TCP4-LISTEN:853,bind=localhost,reuseaddr,fork SOCKS4A:localhost:dns4torpnlfs2ifuz2s2yf3fc7rdmsbhm6rw75euj35pac6ap25zgqad.onion:853,socksport=9050
openssl s_client -showcerts -crlf -connect localhost:853
getdns_query 1dot1dot1dot1.cloudflare-dns.com 127.0.0.1@853
forward-addr: 127.0.0.1@853#tor.cloudflare-dns.com