Skeptical.me
Very Senior Member
@lev: No, because dnsmasq included with the firmware already has that function. Also opendns server or any other dns resolver will be slower than ISP resolver mostly because they're outside the ISP intranet.
@Rodger_88 If you set those settings in LAN > DHCP Server > DNS, it will override dnscrypt function. You need to disable those and use router as DNS Server in client settings (basically use DHCP for DNS server).
@eclp: that's normal because we need to start dnscrypt-proxy with --ignore-timestamps at boot due to ntp hasn't been updated yet. I still don't know why you have "Unable to retrieve server certificates", please PM me with debug info as suggested in the first post.
Thank you!
I have deleted the DNS from LAN > DHCP server > DNS and the client's DNS is showing 192.168.1.1, and now when I go to ipleak.net I see OpenDNS addresses.
However, when I ran the command "killall dnscrypt-proxy" (via ssh to RT-AC87U) I got a reply that said "killall: dnscrypt-proxy: no process killed". I'm not sure if that means its not working.
Thanks for pointing me in the right direction!