DNScrypt dnscrypt installer for asuswrt

[bigeyes0x0]

Could it be dns leaks might also have been caused by clients caching dns locally? Currently with beta 11, with both WAN DNS servers in the WebUI blank, I have no leaks whatsoever anymore, so everything runs smoothly here.

That's what I'm talking about in 2, because if you have other DNS setup on your client, all bets are moot, unless you use the catch all iptables rule that my script also has.

Another possible issue is VPN but I do not have any to try.

 

[skeal]

That's what I'm talking about in 2, because if you have other DNS setup on your client, all bets are moot, unless you use the catch all iptables rule that my script also has.

Another possible issue is VPN but I do not have any to try.

I have a vpn and I have no leaks using the routers local ip as the wan setting for dns.

 

[skeal]

The beta 11 is working real well for me! The rtt results keep pretty much the same except once in a while it gives a lower result (almost exactly half of the usual result). Its a real good script!! I recommend using it.

 

[heysoundude]

I'd just like to clarify something (both for myself and everyone following along out here in cyberspace) -
does @thelonelycoder 's amtm option 2, update dnscrypt installer, run @bigeyes0x0 's new script/version?

 

[thelonelycoder]

I'd just like to clarify something (both for myself and everyone following along out here in cyberspace) -
does @thelonelycoder 's amtm option 2, update dnscrypt installer, run @bigeyes0x0 's new script/version?

Not that I'm aware of. The new dnscrypt installer is in beta and while it remains there @bigeyes0x0 will keep the two separate.
Once it is out of beta it will automatically be the new installer in amtm, with the same old installer URL. That's what we briefly discussed and agreed on.

 

[Deleted member 28123]

Beta 12 is out - https://github.com/jedisct1/dnscrypt-proxy/releases/tag/2.0.0beta12

 

[skeal]

Beta 12 is out - https://github.com/jedisct1/dnscrypt-proxy/releases/tag/2.0.0beta12

Not available yet. Installer still uses beta 11 reference.

 

[Deleted member 28123]

Not available yet. Installer still uses beta 11 reference.

I am aware of that.. I was just putting it up there - hence the link.

Noticed a country based v2 list was posted a couple of days back - https://raw.githubusercontent.com/mastad0n/dnscrypt_resolvers/master/resolvers/v2/v2.md .. I wonder whether any of the listed servers support DOH as listed on the very top of that page.

 

[Protik]

Very nice script. Just used it to try dnscrypt-proxy-v2. After the reboot, lost connection to the router. Had to manually restart the router to restore the connectivity, but everything worked fine afterwards.

I have one question though. I have used the installer script to install this and did nothing else. In the tutorial given in DNSCrypt is reborn it is suggested that,

Go your router GUI,
Set the Wan and IPv6, to Manual configure and leave dns 1 and dns 2 EMPTY.

If I have used the installer script, do I still need to do that?

 

[skeal]

Very nice script. Just used it to try dnscrypt-proxy-v2. After the reboot, lost connection to the router. Had to manually restart the router to restore the connectivity, but everything worked fine afterwards.

I have one question though. I have used the installer script to install this and did nothing else. In the tutorial given in DNSCrypt is reborn it is suggested that,

Go your router GUI,
Set the Wan and IPv6, to Manual configure and leave dns 1 and dns 2 EMPTY.

If I have used the installer script, do I still need to do that?

I think the scripts defines noresolv so even if you had something in WAN DNS it would over ride it.

 

[skeal]

Go to dns leak checker and you should see non isp dns only.

https://www.dnsleaktest.com/

 

[Protik]

I think the scripts defines noresolv so even if you had something in WAN DNS it would over ride it.

I see.

Another question. After changing the dnscrypt-proxy.toml file, how do I make sure the updated toml file is used? Do I have to reboot every time?

 

[skeal]

You

I see.

Another question. After changing the dnscrypt-proxy.toml file, how do I make sure the updated toml file is used? Do I have to reboot every time?

You can try:

service restart_dnsmasq

 

[skeal]

You
You can try:

service restart_dnsmasq

Also in regards to what you should have in WAN DNS settings; I would use 1 address just use your routers local address (example 192.168.x.x) do not define any dns in LAN DNS settings. Depending on what you changed in the .toml file this works for me it should work for you. Enjoy!
EDIT: I meant as an example 192.168.1.1

 

[Protik]

Also in regards to what you should have in WAN DNS settings; I would use 1 address just use your routers local address (example 192.168.x.x) do not define any dns in LAN DNS settings. Depending on what you changed in the .toml file this works for me it should work for you. Enjoy!
EDIT: I meant as an example 192.168.1.1

I tried 'service restart_dnsmasq', but after the restart there is no syslog entry for dnscrypt. I looked at the /jffs/scripts/dnsmasq.postconf file and it only makes the manager script executable and runs it. I don't know whether calling it restarts everything related to dnscrypt or not.

Edit: Actually it does. Just after a while.

Regarding LAN DNS, I don't have anything defined there. In the toml file I added some path for log so that I can see what's happening.

 

[skeal]

I tried 'service restart_dnsmasq', but after the restart there is no syslog entry for dnscrypt. I looked at the /jffs/scripts/dnsmasq.postconf file and it only makes the manager script executable and runs it. I don't know whether calling it restarts everything related to dnscrypt or not.

Edit: Actually it does. Just after a while.

Regarding LAN DNS, I don't have anything defined there. In the toml file I added some path for log so that I can see what's happening.

You should see something like this 2 times an hour if you haven't changed log verbosity.

Jan 30 16:01:30 dnscrypt-proxy[754]: [google] OK (DoH) - rtt: 66ms

I don't know if your extra log instruction is supported but hey.....

 

[Protik]

You
You can try:

service restart_dnsmasq

I found this in the dnscrypt-proxy.toml file,

###############################  
#        Query logging        #  
###############################
                       
## Log client queries to a file                                

[query_log]                                                                                                    

## Path to the query log file (absolute, or relative to the same directory as the executable file)
                                                                         
file = '/mnt/usb1/dnscrypt-log/query.log'                  

                                     
## Query log format (currently supported: tsv and ltsv)

format = 'tsv'

My assumption was as it is mentioned in the toml file, it would work out of the box. But apparently not.

 

[bigeyes0x0]

You
You can try:

service restart_dnsmasq

This is to restart dnsmasq not dnscrypt-proxy itself. Use "/jffs/dnscrypt/manager dnscrypt-start" for this.

 

[skeal]

This is to restart dnsmasq not dnscrypt-proxy itself. Use "/jffs/dnscrypt/manager dnscrypt-start" for this.

Thanks!

 

[Protik]

This is to restart dnsmasq not dnscrypt-proxy itself. Use "/jffs/dnscrypt/manager dnscrypt-start" for this.

Thanks!

Is there any way to direct logs of the queries resolved to a log file in usb?