Difference between revisions of "Package:Dnscrypt"

From Funtoo
Jump to: navigation, search
m (make usable working configuration.)
Line 22: Line 22:
 
Most configurations are located at /etc/dnscrypt-proxy/dnscrypt-proxy.toml
 
Most configurations are located at /etc/dnscrypt-proxy/dnscrypt-proxy.toml
  
{{file|name=/etc/conf.d/dnscrypt-proxy|lang=|desc=set dnscrypt-proxy server on an alternate port for dnsmasq to listen to.|body=
+
{{file|name=/etc/dnscrypt-proxy/dnscrypt-proxy.toml|lang=|desc=set dnscrypt-proxy server on an alternate port for dnsmasq to listen to.|body=
DNSCRYPT_LOCALPORT=53000
+
listen_addresses = ['127.0.0.1:53000']
 +
}}
 +
{{file|name=/etc/conf.d/dnscrypt-proxy|lang=|desc=the ebuilds not properly making a dnscrypt user:group currently, use dnsmasq.|body=
 +
DNSCRYPT_PROXY_USER="dnsmasq"
 +
DNSCRYPT_PROXY_GROUP="dnsmasq"
 
}}
 
}}
  

Revision as of 19:26, October 2, 2020

Dnscrypt

   Tip

We welcome improvements to this page. To edit this page, Create a Funtoo account. Then log in and then click here to edit this page. See our editing guidelines to becoming a wiki-editing pro.

   Warning

As this page deals with DNS it has the potential to break your internet access! Ensure you have stable live media that can restore your system.

DNScrypt provides encryption from clients to upstream DNS servers. Encrypting this traffic prevents spying, spoofing, and other man-in-the-middle attacks.

Installation

root # emerge dnscrypt-proxy

Configuration

By default, opendns is used, although some opennic servers support dnscrypt.

/etc/conf.d/dnscrypt-proxy controls settings for DNScrypt. A list of resolvers has been compiled for use with DNScrypt.

   /etc/resolv.conf - set dns server as dnscrypt-proxy
nameserver 127.0.0.1

net-dns/dnsmasq Configuration

Most configurations are located at /etc/dnscrypt-proxy/dnscrypt-proxy.toml

   /etc/dnscrypt-proxy/dnscrypt-proxy.toml - set dnscrypt-proxy server on an alternate port for dnsmasq to listen to.
listen_addresses = ['127.0.0.1:53000']
   /etc/conf.d/dnscrypt-proxy - the ebuilds not properly making a dnscrypt user:group currently, use dnsmasq.
DNSCRYPT_PROXY_USER="dnsmasq"
DNSCRYPT_PROXY_GROUP="dnsmasq"

Service

root # rc-update add dnscrypt-proxy default
root # rc

Testing

If you're using opendns, this welcome page will tell you if you're encrypted or not.

https://www.opendns.com/welcome/

If you're using any other encryption enabled dns servers, try a "leak" test. They should only report the dns servers associated with the ones you've chosen from the list.

https://www.dnsleaktest.com/



arch wiki

https://wiki.archlinux.org/index.php/Dnscrypt-proxy