SSH SOCKS option is a great way to quickly tunnel web traffic. BUT DNS traffic is still in the clear.
SOCKS5 in Firefox can be configured handle DNS lookups by the remote (secured) end:
network.proxy.socks_remote_dns = truein about:config. A double click will flip it from false to true and you are done.