DNScrypt dnscrypt installer for asuswrt

Zastoff · Feb 11, 2020

Must say the recent updates to installer/manager has improved the overall performance, Now easy to configure setting like Anonymized DNSCrypt(Relays)/Static servers from menu, Updated time handling and the new usage of routers DNS-Filter seems to have eliminated sometimes having reboot issues.
Thanks @SomeWhereOverTheRainBow it feels stable and secure

SomeWhereOverTheRainBow · Feb 12, 2020

Zastoff said:
Must say the recent updates to installer/manager has improved the overall performance, Now easy to configure setting like Anonymized DNSCrypt(Relays)/Static servers from menu, Updated time handling and the new usage of routers DNS-Filter seems to have eliminated sometimes having reboot issues.
Thanks @SomeWhereOverTheRainBow it feels stable and secure

Code:

 Info:  Detected ARMv7 architecture.
 Info:  DI_VERSION=v2.0.10
 Info:  DNSCRYPT_VER=2.0.39
 Info:  Manager file is Up-To-Date!
 Info:  DNS Environment is Ready.
 Info:  JFFS custom scripts and configs are already enabled
 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: 3
 Info:  This operation allows you to configure dnscrypt-proxy

 =>  Do you want to proceed? [y/n]: y
 Info:  Configuring dnscrypt-proxy...
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Found previous dnscrypt-proxy config file
 Info:  How do you want to reconfigure:
 Info:    1) Start from previous settings file
 Info:    2) Start from default config
 =>  Your selection, [1-2]: 1
 Info:  Use previous settings file
 =>  Do you want to redirect all DNS resolutions on your network through this proxy? [y/n]: y
 Info:  DNSFilter is Already on.
 Info:  User can choose to keep any custom dnsfilter values and only redirect non-custom traffic.
 =>  Do you want to redirect only SOME DNS resolutions on your network through this proxy? [y/n]: n
 Info:  User chose to continue redirecting All DNS resolutions instead.
 =>  Do you want to use DNS server over IPv6 (yes only if your connection has IPv6)? [y/n]: y
 Info:  Choose DNS resolving load balancing strategy:
  1) p2 (default)
  2) ph
  3) first
  4) random
 =>  Select your mode, [1-4]: 1
 Info:  Choose how your DNS servers are selected:
  1) Automatically
  2) Manually
  3) Static
 =>  Select your mode, [1-3]: 2
 Info:  Available DNS servers:
  1) a-and-a: Non-logging DoH server in the UK operated by Andrews & Arnold Ltd, a
  2) aaflalo-me: DNS-over-HTTPS server running dns-over-https with PiHole for Adblocking in NL.
  3) aaflalo-me-gcp: Same as aaflalo-me-nyc. Use aaflalo-me-nyc.
  4) aaflalo-me-nyc: DNS-over-HTTPS server running dns-over-https with PiHole for Adblocking in NYC, USA.
  5) adguard-dns: Remove ads and protect your computer from malware
  6) adguard-dns-doh: Remove ads and protect your computer from malware (over DoH)
  7) adguard-dns-family: Adguard DNS with safesearch and adult content blocking
  8) adguard-dns-family-doh: Adguard DNS with safesearch and adult content blocking (over DoH)
  9) adguard-dns-family-ipv6: Adguard DNS with safesearch and adult content blocking
  SNIP+++++++++++++++++++++++++++++++++++++
  239) quad9-doh-ip6-nofilter-alt: sdns://AgYAAAAAAAAAEFsyNjIwOmZlOjpmZToxMF2AABJkbnM5LnF1YWQ5Lm5ldDo0NDMKL2Rucy1xdWVyeQ
  240) quad9-doh-ip6-nofilter-pri: sdns://AgYAAAAAAAAADVsyNjIwOmZlOjoxMF2AABJkbnM5LnF1YWQ5Lm5ldDo0NDMKL2Rucy1xdWVyeQ
  241) qualityology.com: Non-logging, non-filtering, DNSSEC validating server in Los Angeles, California.
  242) rubyfish-ea: Resolver in mainland China, forwarding queries for non-Chinese domains
  243) rubyfish-uw: Resolver in mainland China, forwarding queries for non-Chinese domains
SNIP++++++++++++++++++++++++++++++++++++++
  260) ventricle.us: Public DNSCrypt resolver provided by Jacob Henner
  261) xfinity: Comcast DOH server
  262) yandex: Yandex public DNS server (anycast)
 =>  Please choose DNS server, [1-262]: 5
 =>  Please choose next DNS server or press n to stop, [1-262/n]: 6
 =>  Please choose next DNS server or press n to stop, [1-262/n]: 10
 =>  Please choose next DNS server or press n to stop, [1-262/n]: n
 Info:  Set the DNS server(s) for initializing dnscrypt-proxy
 Info:  and router services (e.g. ntp) at boot
 =>  Default is 9.9.9.9: 1.1.1.1
 =>  2nd Default is 8.8.8.8: 1.0.0.1
 =>  Set log level, default is 2, 0 is the most verbose, [0-6]: 0
 Info:  Writing dnscrypt-proxy configuration...
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Checking for Anonymized Dnscrypt Support
 Info:  Users may specify Wild-card Relay Support (server_name *) with option 1 or option 2
 Info:  All DNSCRYPT Server traffic will be sent through same set of chosen Relays with Wild-Card Option.
 Info:  Option 2 gives users the choice to Setup Relays per Dnscrypt-Server or send all Servers through the Same Relays.
 Info:  Skip allows Users to skip configuring relays.
 Info:  NOTE: You must now redo relays on each reconfiguration...
 Info:  What do you want to do:
  1) Setup Automatic Servers (will disable server_names) with Wild-Card Relay Support
  2) Pick Relays for DNSCRYPT servers (Individually or Wild-Card)
  3) Skip Setting-up Relay Support.
 =>  Your choice, [1-3]: 2
 Info:  Found Servers for Anonymized Dnscrypt Support
 Info:  Choose Relays for DNSCRYPT server
 =>  Do you want to use the same set of relays for all servers? [y/n]: n
 Info:  Found adguard-dns server
 Info:  Available Relay servers:
  1) anon-am-us: Anonymized DNS relay hosted in Seattle - US
  2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/
  3) anon-cs-ca2: Anonymized DNS relay hosted in CA - Vancouver provided by https://cryptostorm.is/
  4) anon-cs-ch: Anonymized DNS relay hosted in Zurich, Switzerland provided by https://cryptostorm.is/
  5) anon-cs-de: Anonymized DNS relay hosted in Dusseldorf, Germany provided by https://cryptostorm.is/
##################################################
  40) anon-scaleway: Anonymized DNS relay hosted in France and maintained by Frank Denis (@jedisct1).
  41) anon-scaleway-ams: Anonymized DNS relay hosted in Amsterdam and maintained by Frank Denis (@jedisct1).
  42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann.
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Found Servers for Anonymized Dnscrypt Support
 Info:  Choose Relays for DNSCRYPT server
 Info:  Found adguard-dns-ipv6 server
 Info:  Available Relay servers:
  1) anon-am-us: Anonymized DNS relay hosted in Seattle - US
  2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/
  3) anon-cs-ca2: Anonymized DNS relay hosted in CA - Vancouver provided by https://cryptostorm.is/
################SNIP####################################################
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Restarting dnscrypt-proxy with new config...
 Info:  Operation completed. You can quit or continue
=====================================================


 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: q
 Info:  Operations have been applied if any has been made
 Info:  In case of anomaly, please reboot your router!

SomeWhereOverTheRainBow · Feb 12, 2020

@L&LD yeaaaaaaa,
That @Zastoff has been keeping me busy.

DonnyJohnny · Feb 12, 2020

Just for info, Cisco (opendns) finally support DNSSEC.
https://umbrella.cisco.com/blog/2020/01/28/what-is-dnssec-and-why-is-it-important/

SomeWhereOverTheRainBow · Feb 12, 2020

DonnyJohnny said:
Just for info, Cisco (opendns) finally support DNSSEC.
https://umbrella.cisco.com/blog/2020/01/28/what-is-dnssec-and-why-is-it-important/

good to know.

SomeWhereOverTheRainBow · Feb 12, 2020

*DI_Version=v2.1.0*
Release Notes

Relay Option 1 Allows addition of Wildcard (server_name "*") for Relays for Automatic Configuration of Servers (chosen servers get disabled and servers become automatically chosen based on .toml file) or Option 2 Wildcard for All Servers (this only works with dnscrypt servers- other servers get ignored).
Relay Option 3 Adds Relays per Chosen Dnscrypt Server (will skip if dnscrypt servers are chosen). Users are able to define relays for each specific Dnscrypt servers, only compatible with servers chosen from public list.
Relay Option 4 Skip Setup of Relays allows for the removal of old relay configuration if the user specifies, this is recommended to prevent server relay conflicts if the user did not choose the same set of servers this time around. improvements brought on by users @dugaduga && @Zastoff
Addition of dnscrypt servers from dnscrypt-proxy 2 github.
New improvements to Cisco mentioned by @DonnyJohnny && @Zastoff

Code:

Info: Detected ARMv7 architecture. Info: DI_VERSION=v2.1.0 Info: DNSCRYPT_VER=2.0.39 Info: Manager file is Up-To-Date! Info: DNS Environment is Ready. Info: JFFS custom scripts and configs are already enabled Info: Choose what you want to do: 1) Install/Update dnscrypt-proxy 2) Uninstall dnscrypt-proxy 3) Configure dnscrypt-proxy 4) Set timezone 5) Unset timezone 6) Install (P)RNG 7) Uninstall (P)RNG 8) Install swap file 9) Uninstall ALL q) Quit => Please enter the number that designates your selection:, [1-9/q]: 1 Info: This operation will install dnscrypt-proxy and related files (<6MB) Info: to jffs, no other data will be changed. Info: Also some start scripts will be installed/modified as required. => Do you want to install dnscrypt-proxy to /jffs? [y/n]: y Info: installer is up to date. Skipping... Info: manager is up to date. Skipping... Info: DNSCRYPT_VER=2.0.39 Info: public-resolvers.md is up to date. Skipping... Info: public-resolvers.md.minisig is up to date. Skipping... Info: relays.md is up to date. Skipping... Info: relays.md.minisig is up to date. Skipping... Info: dnsmasq.postconf file already configured Info: init-start file already configured Info: Configuring dnscrypt-proxy... Info: Checking dnscrypt-proxy configuration... Info: Found previous dnscrypt-proxy config file => Do you want to use this file without reconfiguring? [y/n]: y Info: Use previous settings file Info: Checking for Anonymized Dnscrypt Support Info: Users may specify Wild-card Relay Support (server_name *) with option 1 (this supports only DNSCrypt Servers). Info: All DNSCRYPT Server traffic will be sent through same set of chosen Relays with Wild-Card Option. Info: Option 2 gives users the choice to Setup Relays per Dnscrypt-Server. Info: Skip allows Users to skip configuring relays. Info: NOTE: You must now redo relays on each reconfiguration... Info: What do you want to do: 1) Setup Automatic Servers (will disable server_names) or All Servers with Wild-Card Relay Support. 2) Pick Relays for DNSCRYPT servers (Per Server) 3) Skip Setting-up Relay Support. => Your choice, [1-3]: 2 Info: Found Servers for Anonymized Dnscrypt Support Info: Choose Relays for DNSCRYPT server Info: Found adguard-dns server Info: Available Relay servers: 1) anon-am-us: Anonymized DNS relay hosted in Seattle - US 2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/ 3) anon-cs-ca2: Anonymized DNS relay hosted in CA - Vancouver provided by https://cryptostorm.is/ ************************SNIP******************************************************* 43) anon-tiarap: Anonymized DNS relay hosted in Singapore 44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr => Please choose RELAY server, [1-44]: 1 => Please choose next RELAY server or press n to stop, [1-44/n]: 22 => Please choose next RELAY server or press n to stop, [1-44/n]: 23 => Please choose next RELAY server or press n to stop, [1-44/n]: 24 => Please choose next RELAY server or press n to stop, [1-44/n]: 25 => Please choose next RELAY server or press n to stop, [1-44/n]: 26 => Please choose next RELAY server or press n to stop, [1-44/n]: 27 => Please choose next RELAY server or press n to stop, [1-44/n]: 28 => Please choose next RELAY server or press n to stop, [1-44/n]: 29 => Please choose next RELAY server or press n to stop, [1-44/n]: 30 => Please choose next RELAY server or press n to stop, [1-44/n]: n Info: Found Servers for Anonymized Dnscrypt Support Info: Choose Relays for DNSCRYPT server Info: Found adguard-dns-ipv6 server Info: Available Relay servers: 1) anon-am-us: Anonymized DNS relay hosted in Seattle - US 2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/ ***********************************SNIP******************************************** 42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann. 43) anon-tiarap: Anonymized DNS relay hosted in Singapore 44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr => Please choose RELAY server, [1-44]: 1 => Please choose next RELAY server or press n to stop, [1-44/n]: 22 => Please choose next RELAY server or press n to stop, [1-44/n]: 23 => Please choose next RELAY server or press n to stop, [1-44/n]: 24 => Please choose next RELAY server or press n to stop, [1-44/n]: 25 => Please choose next RELAY server or press n to stop, [1-44/n]: 26 => Please choose next RELAY server or press n to stop, [1-44/n]: 27 => Please choose next RELAY server or press n to stop, [1-44/n]: 28 => Please choose next RELAY server or press n to stop, [1-44/n]: 29 => Please choose next RELAY server or press n to stop, [1-44/n]: 30 => Please choose next RELAY server or press n to stop, [1-44/n]: n Info: Staring dnscrypt-proxy... Done. Info: For dnscrypt-proxy version 2 to work reliably, you might also want to: Info: - Add swap Info: - Add a RNG Info: - Set your timezone Info: Operation completed. You can quit or continue ===================================================== Info: Choose what you want to do: 1) Install/Update dnscrypt-proxy 2) Uninstall dnscrypt-proxy 3) Configure dnscrypt-proxy 4) Set timezone 5) Unset timezone 6) Install (P)RNG 7) Uninstall (P)RNG 8) Install swap file 9) Uninstall ALL q) Quit => Please enter the number that designates your selection:, [1-9/q]:

*Minor Update*

Now NextDns and Relay Configuration will Occur with in .TOML file check instead of around .TOML file check for Users and Developers Observation of Failed configurations.
Addition of Option 2 and Option 4 (these were minor adjustments of old options).

Code:

  40) anon-scaleway: Anonymized DNS relay hosted in France and maintained by Frank Denis (@jedisct1).
  41) anon-scaleway-ams: Anonymized DNS relay hosted in Amsterdam and maintained by Frank Denis (@jedisct1).
  42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann.
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Staring dnscrypt-proxy...

Done.
 Info:  For dnscrypt-proxy version 2 to work reliably, you might also want to:
 Info:   - Add swap
 Info:   - Add a RNG
 Info:   - Set your timezone
 Info:  Operation completed. You can quit or continue
=====================================================


 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: q
 Info:  Operations have been applied if any has been made
 Info:  In case of anomaly, please reboot your router!

dugaduga · Feb 12, 2020

SomeWhereOverTheRainBow said:

*DI_Version=v2.1.0*
Release Notes

Relay Option 1 Allows addition of Wildcard (server_name *) for Relays for Automatic Configuration of Servers (chosen servers get disabled and servers become automatically chosen based on .toml file) or Wildcard for All Servers (this only works with dnscrypt servers- other servers get ignored).
Relay Option 2 Adds Relays per Chosen Dnscrypt Server (will skip if dnscrypt servers are chosen). Users are able to define relays for each specific Dnscrypt servers, only compatible with servers chosen from public list.
Relay Option 3 Skip Setup of Relays.
Addition of dnscrypt servers from dnscrypt-proxy 2 github.
New improvements to Cisco mentioned by @DonnyJohnny && @Zastoff

Code:

Info: Detected ARMv7 architecture. Info: DI_VERSION=v2.1.0 Info: DNSCRYPT_VER=2.0.39 Info: Manager file is Up-To-Date! Info: DNS Environment is Ready. Info: JFFS custom scripts and configs are already enabled Info: Choose what you want to do: 1) Install/Update dnscrypt-proxy 2) Uninstall dnscrypt-proxy 3) Configure dnscrypt-proxy 4) Set timezone 5) Unset timezone 6) Install (P)RNG 7) Uninstall (P)RNG 8) Install swap file 9) Uninstall ALL q) Quit => Please enter the number that designates your selection:, [1-9/q]: 1 Info: This operation will install dnscrypt-proxy and related files (<6MB) Info: to jffs, no other data will be changed. Info: Also some start scripts will be installed/modified as required. => Do you want to install dnscrypt-proxy to /jffs? [y/n]: y Info: installer is up to date. Skipping... Info: manager is up to date. Skipping... Info: DNSCRYPT_VER=2.0.39 Info: public-resolvers.md is up to date. Skipping... Info: public-resolvers.md.minisig is up to date. Skipping... Info: relays.md is up to date. Skipping... Info: relays.md.minisig is up to date. Skipping... Info: dnsmasq.postconf file already configured Info: init-start file already configured Info: Configuring dnscrypt-proxy... Info: Checking dnscrypt-proxy configuration... Info: Found previous dnscrypt-proxy config file => Do you want to use this file without reconfiguring? [y/n]: y Info: Use previous settings file Info: Checking for Anonymized Dnscrypt Support Info: Users may specify Wild-card Relay Support (server_name *) with option 1 (this supports only DNSCrypt Servers). Info: All DNSCRYPT Server traffic will be sent through same set of chosen Relays with Wild-Card Option. Info: Option 2 gives users the choice to Setup Relays per Dnscrypt-Server. Info: Skip allows Users to skip configuring relays. Info: NOTE: You must now redo relays on each reconfiguration... Info: What do you want to do: 1) Setup Automatic Servers (will disable server_names) or All Servers with Wild-Card Relay Support. 2) Pick Relays for DNSCRYPT servers (Per Server) 3) Skip Setting-up Relay Support. => Your choice, [1-3]: 2 Info: Found Servers for Anonymized Dnscrypt Support Info: Choose Relays for DNSCRYPT server Info: Found adguard-dns server Info: Available Relay servers: 1) anon-am-us: Anonymized DNS relay hosted in Seattle - US 2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/ 3) anon-cs-ca2: Anonymized DNS relay hosted in CA - Vancouver provided by https://cryptostorm.is/ ************************SNIP******************************************************* 43) anon-tiarap: Anonymized DNS relay hosted in Singapore 44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr => Please choose RELAY server, [1-44]: 1 => Please choose next RELAY server or press n to stop, [1-44/n]: 22 => Please choose next RELAY server or press n to stop, [1-44/n]: 23 => Please choose next RELAY server or press n to stop, [1-44/n]: 24 => Please choose next RELAY server or press n to stop, [1-44/n]: 25 => Please choose next RELAY server or press n to stop, [1-44/n]: 26 => Please choose next RELAY server or press n to stop, [1-44/n]: 27 => Please choose next RELAY server or press n to stop, [1-44/n]: 28 => Please choose next RELAY server or press n to stop, [1-44/n]: 29 => Please choose next RELAY server or press n to stop, [1-44/n]: 30 => Please choose next RELAY server or press n to stop, [1-44/n]: n Info: Found Servers for Anonymized Dnscrypt Support Info: Choose Relays for DNSCRYPT server Info: Found adguard-dns-ipv6 server Info: Available Relay servers: 1) anon-am-us: Anonymized DNS relay hosted in Seattle - US 2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/ ***********************************SNIP******************************************** 42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann. 43) anon-tiarap: Anonymized DNS relay hosted in Singapore 44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr => Please choose RELAY server, [1-44]: 1 => Please choose next RELAY server or press n to stop, [1-44/n]: 22 => Please choose next RELAY server or press n to stop, [1-44/n]: 23 => Please choose next RELAY server or press n to stop, [1-44/n]: 24 => Please choose next RELAY server or press n to stop, [1-44/n]: 25 => Please choose next RELAY server or press n to stop, [1-44/n]: 26 => Please choose next RELAY server or press n to stop, [1-44/n]: 27 => Please choose next RELAY server or press n to stop, [1-44/n]: 28 => Please choose next RELAY server or press n to stop, [1-44/n]: 29 => Please choose next RELAY server or press n to stop, [1-44/n]: 30 => Please choose next RELAY server or press n to stop, [1-44/n]: n Info: Staring dnscrypt-proxy... Done. Info: For dnscrypt-proxy version 2 to work reliably, you might also want to: Info: - Add swap Info: - Add a RNG Info: - Set your timezone Info: Operation completed. You can quit or continue ===================================================== Info: Choose what you want to do: 1) Install/Update dnscrypt-proxy 2) Uninstall dnscrypt-proxy 3) Configure dnscrypt-proxy 4) Set timezone 5) Unset timezone 6) Install (P)RNG 7) Uninstall (P)RNG 8) Install swap file 9) Uninstall ALL q) Quit => Please enter the number that designates your selection:, [1-9/q]:

*Minor Update*

Now NextDns and Relay Configuration will Occur with in .TOML file check instead of around .TOML file check for Users and Developers Observation of Failed configurations.

Code:

  40) anon-scaleway: Anonymized DNS relay hosted in France and maintained by Frank Denis (@jedisct1).
  41) anon-scaleway-ams: Anonymized DNS relay hosted in Amsterdam and maintained by Frank Denis (@jedisct1).
  42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann.
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Staring dnscrypt-proxy...

Done.
 Info:  For dnscrypt-proxy version 2 to work reliably, you might also want to:
 Info:   - Add swap
 Info:   - Add a RNG
 Info:   - Set your timezone
 Info:  Operation completed. You can quit or continue
=====================================================


 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: q
 Info:  Operations have been applied if any has been made
 Info:  In case of anomaly, please reboot your router!

The latest two updates, the last one coming out in the last hour or so, automatically removes the line "routes = [" from .toml, I have to manually add it every time I use your installer and installing using the previous configuration, without changes, and skipping route config (3)

SomeWhereOverTheRainBow · Feb 12, 2020

dugaduga said:
The latest two updates, the last one coming out in the last hour or so, automatically removes the line "routes = [" from .toml, I have to manually add it every time I use your installer and installing using the previous configuration, without changes, and skipping route config (3)

**New minor update**
Now users with previously selected for routes can skip routes during configuration and keep the same configuration. Read previous post for more details.

SomeWhereOverTheRainBow · Feb 14, 2020

*DI_Version=v2.1.1*
Please run

Code:

curl -L -s -k -O https://raw.githubusercontent.com/thuantran/dnscrypt-asuswrt-installer/master/installer && sh installer ; rm installer

for updated installer. Installer now updates properly from with inside installer file, to see this please run the above command and then option 1. You can use Y to skip reconfiguration.

This update is to reflect fixes from previous update along with new installer update improvements pointed out by @Zastoff

Zastoff · Feb 14, 2020

Just did the update as recommended!
Worked perfectly

Thanks @SomeWhereOverTheRainBow

SomeWhereOverTheRainBow · Feb 14, 2020

Zastoff said:
Just did the update as recommended!
Worked perfectly
Thanks @SomeWhereOverTheRainBow

** Minor Update**
fixed cosmetic/ logic issues with firewall option/relay option recommended per @Zastoff .

SomeWhereOverTheRainBow · Feb 14, 2020

dugaduga said:
The latest two updates, the last one coming out in the last hour or so, automatically removes the line "routes = [" from .toml, I have to manually add it every time I use your installer and installing using the previous configuration, without changes, and skipping route config (3)

Just wanted to let you know, thank you for the valuable feedback you have provided. We (@Zastoff and I) have resolved your concerns and made improvements as well thanks to your user feedback.

DonnyJohnny · Feb 21, 2020

Ladies and Gentlemen!
Cisco now support DOH!!!
https://support.opendns.com/hc/en-us/articles/360038086532-Using-DNS-over-HTTPS-DoH-with-OpenDNS

Edited: edited the stamp. Cisco DOH currently don’t support DNSSEC

Code:

[static.'cisco-doh-ipv4-pri']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjIuMjIygAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv4-alt']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjAuMjIwgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv6-pri']
stamp = 'sdns://AgAAAAAAAAAAEVsyNjIwOjExOTozNTo6MzVdgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv6-alt']
stamp = 'sdns://AgAAAAAAAAAAEVsyNjIwOjExOTo1Mzo6NTNdgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv4-family-pri']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjIuMTIzgAAgZG9oLmZhbWlseXNoaWVsZC5vcGVuZG5zLmNvbTo0NDMKL2Rucy1xdWVyeQ'

[static.'cisco-doh-ipv4-family-alt']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjAuMTIzgAAgZG9oLmZhbWlseXNoaWVsZC5vcGVuZG5zLmNvbTo0NDMKL2Rucy1xdWVyeQ'

[static.'cisco-doh-ipv6-family-pri']
stamp = 'sdns://AgAAAAAAAAAAElsyNjIwOjExOTozNTo6MTIzXYAAIGRvaC5mYW1pbHlzaGllbGQub3BlbmRucy5jb206NDQzCi9kbnMtcXVlcnk'

[static.'cisco-doh-ipv6-family-alt']
stamp = 'sdns://AgAAAAAAAAAAElsyNjIwOjExOTo1Mzo6MTIzXYAAIGRvaC5mYW1pbHlzaGllbGQub3BlbmRucy5jb206NDQzCi9kbnMtcXVlcnk'

SomeWhereOverTheRainBow · Feb 21, 2020

DonnyJohnny said:

Ladies and Gentlemen!
Cisco now support DOH!!!
https://support.opendns.com/hc/en-us/articles/360038086532-Using-DNS-over-HTTPS-DoH-with-OpenDNS

Edited: edited the stamp. Cisco DOH currently don’t support DNSSEC

Code:

[static.'cisco-doh-ipv4-pri']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjIuMjIygAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv4-alt']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjAuMjIwgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv6-pri']
stamp = 'sdns://AgAAAAAAAAAAEVsyNjIwOjExOTozNTo6MzVdgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv6-alt']
stamp = 'sdns://AgAAAAAAAAAAEVsyNjIwOjExOTo1Mzo6NTNdgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv4-family-pri']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjIuMTIzgAAgZG9oLmZhbWlseXNoaWVsZC5vcGVuZG5zLmNvbTo0NDMKL2Rucy1xdWVyeQ'

[static.'cisco-doh-ipv4-family-alt']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjAuMTIzgAAgZG9oLmZhbWlseXNoaWVsZC5vcGVuZG5zLmNvbTo0NDMKL2Rucy1xdWVyeQ'

[static.'cisco-doh-ipv6-family-pri']
stamp = 'sdns://AgAAAAAAAAAAElsyNjIwOjExOTozNTo6MTIzXYAAIGRvaC5mYW1pbHlzaGllbGQub3BlbmRucy5jb206NDQzCi9kbnMtcXVlcnk'

[static.'cisco-doh-ipv6-family-alt']
stamp = 'sdns://AgAAAAAAAAAAElsyNjIwOjExOTo1Mzo6MTIzXYAAIGRvaC5mYW1pbHlzaGllbGQub3BlbmRucy5jb206NDQzCi9kbnMtcXVlcnk'

has Dnscrypt-proxy2 placed these inside the list of servers yet?

** if not, Users can add these via the Static option using the installer**

DonnyJohnny · Feb 22, 2020

SomeWhereOverTheRainBow said:
has Dnscrypt-proxy2 placed these inside the list of servers yet?

** if not, Users can add these via the Static option using the installer**

the Cisco update not in server list yet.

Lol..
Just realised we can add static server via installer.

but small problem.
Can we add static and mix with those from server list. Currently is either u take static or choose from list and not both.

Zastoff · Feb 22, 2020

DonnyJohnny said:
the Cisco update not in server list yet.

Lol..
Just realised we can add static server via installer.

but small problem.
Can we add static and mix with those from server list. Currently is either u take static or choose from list and not both.

The functions for choosing servers will write over server_names when reconfigured
(Auto=server_names disabled, Manual=chosen from public-resovers.md, Static=manually entered server_names and sdns address)
For a sort of mix:
I guess it can be manually configured in dnscrypt-proxy.toml and restart proxy or add servers from public-resolvers.md (sdns address) as static if someone wants to do it from menu.

SomeWhereOverTheRainBow · Feb 22, 2020

DonnyJohnny said:
the Cisco update not in server list yet.

Lol..
Just realised we can add static server via installer.

but small problem.
Can we add static and mix with those from server list. Currently is either u take static or choose from list and not both.

yea users would have to look at the public-resolvers list and manually copy out any servers they want to customize to work with static at this time. Haven't had the time to customize it to allow the addition of public resolvers mixed with static. Users can easily copy the sdns stamp of the public resolvers they want to use and just name it whatever they like , or they can simply add the server name from the list to the server name line

server_names = ['example-static' , 'server-name' ]

By the way, @DonnyJohnny I await any pull request if you decide to take this feature request upon yourself

....

badtoast · Feb 23, 2020

Hi all, noob here. I'm trying to install dnscrypt on a Asus AC-86U with Asuswrt-Merlin Firmware 384.15 via entware. I'm running into an issue where it is asking me to choose a DNS server, but whatever I enter, it gives me an error. Can someone help please?

Code:

 Info:  Available DNS servers:
awk: /jffs/dnscrypt/public-resolvers.md: No such file or directory
awk: /jffs/dnscrypt/public-resolvers.md: No such file or directory
 =>  Please choose DNS server, [1-0]: 1
 *** Error:  Chosen number is not in range! Retrying...
 =>  Please choose DNS server, [1-0]: 0
 *** Error:  Chosen number is not in range! Retrying...
 =>  Please choose DNS server, [1-0]:
 *** Error:  Invalid character entered! Retrying...
 =>  Please choose DNS server, [1-0]: 1.1.1.1
 *** Error:  Invalid character entered! Retrying...

And here is everything leading up to it:

Zastoff · Feb 23, 2020

badtoast said:
Hi all, noob here. I'm trying to install dnscrypt on a Asus AC-86U with Asuswrt-Merlin Firmware 384.15 via entware. I'm running into an issue where it is asking me to choose a DNS server, but whatever I enter, it gives me an error. Can someone help please?

Code:

Info: Available DNS servers: awk: /jffs/dnscrypt/public-resolvers.md: No such file or directory awk: /jffs/dnscrypt/public-resolvers.md: No such file or directory => Please choose DNS server, [1-0]: 1 *** Error: Chosen number is not in range! Retrying... => Please choose DNS server, [1-0]: 0 *** Error: Chosen number is not in range! Retrying... => Please choose DNS server, [1-0]: *** Error: Invalid character entered! Retrying... => Please choose DNS server, [1-0]: 1.1.1.1 *** Error: Invalid character entered! Retrying...

And here is everything leading up to it:

View attachment 21565

Make sure you have working WAN DNS server and stable internet connection and re run installer option 1) install/update so you get the correct files downloaded
edit
Welcome to the forum

badtoast · Feb 23, 2020

Zastoff said:
Make sure you have working WAN DNS server and stable internet connection and re run installer option 1) install/update so you get the correct files downloaded

Thank you for your quick reply! I do have stable 100Mbps internet connection (just ran a ookla speed test). Could there be an issue caused by my running an OpenVPN Client as well as Pi-hole? My DNS was set to my VPN's DNS servers, but my internet seems to be working just fine.

I previous had to unselect the DNS-over-TLS option under "DNS Privacy Protocol" under the WAN DNS Settings in order for the dnscrypt installation to even begin. Is there a reason I should not be using this DoT menu option, but instead install/use dnscrypt? If so, could you recommend if it would be beter to install dnscrypt on the router or on the raspberry pi (zero W)?

Thread starter	Title	Forum	Replies	Date
U	Odd error installing dnscrypt 2.1.5	Asuswrt-Merlin AddOns	0	Mar 15, 2024
	TAILMON TAILMON v1.0.20 -July 27, 2024- WireGuard-based Tailscale Installer, Configurator and Monitor (Now available in AMTM!)	Asuswrt-Merlin AddOns	5	Nov 13, 2024
	TAILMON TAILMON v1.0.20 -July 27, 2024- WireGuard-based Tailscale Installer, Configurator and Monitor (THREAD #1 CLOSED)	Asuswrt-Merlin AddOns	556	Apr 29, 2024
	amtm amtm 5.1 - the Asuswrt-Merlin Terminal Menu, December 09, 2024	Asuswrt-Merlin AddOns	69	Aug 17, 2024
J	Entware Possible to install jdownloader on asuswrt-merlin router with entware??	Asuswrt-Merlin AddOns	9	Aug 7, 2024
W	Skynet SOLVED: Scrollbar Disappears on Skynet Tab on Asuswrt-Merlin 386.14	Asuswrt-Merlin AddOns	10	Jul 21, 2024
	scMerlin scMerlin 2.5.8 - Service and script control menu for Asuswrt-Merlin, October 20, 2024	Asuswrt-Merlin AddOns	85	Mar 10, 2024
	uKasa uKasa - A utility script that manages Kasa smart outlets and switches with Asuswrt-Merlin routers	Asuswrt-Merlin AddOns	31	Feb 6, 2024
	Updated Hue Utility - huetil Control and manage your Hue system from Asuswrt-Merlin or Raspbian	Asuswrt-Merlin AddOns	1	Jan 10, 2024
8	ASUS RT-AX58U (F/W Ver.:V3.0.0.4.384.8601) with Asuswrt-Merlin 3004.388.5 - Transmission: "Could not connect to the server. You may need to reload"	Asuswrt-Merlin AddOns	2	Jan 5, 2024

DNScrypt dnscrypt installer for asuswrt

Very Senior Member

Part of the Furniture

Part of the Furniture

Very Senior Member

Part of the Furniture

Part of the Furniture

Senior Member

Part of the Furniture

Part of the Furniture

Very Senior Member

Part of the Furniture

Part of the Furniture

Very Senior Member

Part of the Furniture

Very Senior Member

Very Senior Member

Part of the Furniture

Occasional Visitor

Very Senior Member

Occasional Visitor

Similar threads

Similar threads

Support SNBForums w/ Amazon

Sign Up For SNBForums Daily Digest