SOCKS5 Firefox can control which side of the proxy handles DNS lookups. By default, it does the lookups locally resulting in the scenario above. To change this, set network.proxy.socks_remote_dns = true in about:config. This makes the SOCKS proxy more like a regular proxy, where DNS is handled by the remote end of the tunnel. ----- about:config network.proxy.socks_remote_dns = true ----- create a SOCKS proxy ssh -D 9999 username@ip-address-of-ssh-server