History:

• We allowed user debian-tor on Whonix-Gateway to use system default DNS to make meek-lite work.
  • Reference: https://forums.whonix.org/t/censorship-circumvention-tor-pluggable-transports/2601/4?u=patrick
• We are no longer shipping https://github.com/Whonix/anon-gw-dns-conf/blob/master/etc/resolv.conf.anondist.

Maybe libresolv-wrapper would be a better solution.

• https://packages.debian.org/stretch/libresolv-wrapper
• https://cwrap.org/resolv_wrapper.html

Related:

• libresolv-wrapper does not work with curl - https://bugzilla.samba.org/show_bug.cgi?id=13482
• https://c-ares.haxx.se/