DNScrypt Dnscrypt Proxy Installer For Asuswrt-Merlin(Nov.)
- Thread starter SomeWhereOverTheRainBow
- Start date
Zastoff
Very Senior Member
OpenDNS servers is Cisco servers
DNSCrypt - List of public DoH and DNSCrypt servers
An extensive and constantly updated list of encrypted DNS servers (DoH and DNSCrypt) that are free and publicly accessible.
dnscrypt.info
I've got an AX-58U with Merlin 386.2 beta 2 and serious issues installing dnscrypt-proxy using amtm.
I'm seeing the same error as above - during configuration in amtm/di the toml file is created, then the error pops up and the toml file is moved to .err.
DNSCrypt-proxy could be started manually by setting the listen interface to something else than 127.0.0.1:53 (which is occupied by DNSMasq), and commenting the line that drops privileges to go with user "nobody".
This way it's never really used, though.
Additionally I can't install haveged:
/jffs/dnscrypt/haveged: not found (exists but doesn't execute properly).The configuration never really finishes.
Edit: Installer version is 2.1.8
Edit 2: I'm also seeing
[: bad number before the line Info: JFFS custom scripts and configs are already enabled.
Zastoff
Very Senior Member
How is WAN & LAN dns set? And also how is LAN/Dns-filter set?
Any other scripts installed on the router?
386.2 beta 2 include a rngd so maybe it conflict's with haveged (a guess since i can't test it)
WAN is DHCP with 1.1.1.1/8.8.8.8 set manually (
Connect to DNS Server automatically off), LAN doesn't have a DNS set but the router itself (Advertise router's IP in addition to user-specified DNS on).Other scripts:
- FlexQoS
- YazFi
- Entware
- Disk Check Script
Edit: Clarifications
Last edited:
SomeWhereOverTheRainBow
Part of the Furniture
Thanks. I am, I tried the installer using amtm and the installer directly from github to no avail.
SomeWhereOverTheRainBow
Part of the Furniture
what output do you get when you type in uname -m into the ssh terminal?
the only outputs the installer supports is
armv7l
aarch64
Edit:
I currently have it running on the RTAX88U 386.2 beta 2 and GTAX11000 386.2 beta 2 with no issues, I will have to do some more digging. The only difference is my Wan DNS is set to automatic.
Here is a test run I did with the RTAX88U on beta 2. --- This router uses aarch64
Code:
Info: JFFS custom scripts and configs are already enabled.
Info: DNS Environment is Ready.
Info: Choose what you want to do:
1) Install/Update dnscrypt-proxy
2) Uninstall dnscrypt-proxy
3) Configure dnscrypt-proxy
4) Set timezone
5) Unset timezone
6) Install (P)RNG
7) Uninstall (P)RNG
8) Install swap file
9) Uninstall ALL
q) Quit
=> Please enter the number that designates your selection:, [1-9/q]: 1
Info: This operation will install dnscrypt-proxy and related files (<6MB)
Info: to jffs, no other data will be changed.
Info: Also some start scripts will be installed/modified as required.
=> Do you want to install dnscrypt-proxy to /jffs? [y/n]: y
Info: Downloading manager
Info: Downloading dnscrypt-proxy-linux_arm64-2.0.45.tar.gz
linux-arm64/
linux-arm64/example-blocked-names.txt
linux-arm64/example-dnscrypt-proxy.toml
linux-arm64/dnscrypt-proxy
linux-arm64/example-blocked-ips.txt
linux-arm64/example-allowed-ips.txt
linux-arm64/example-captive-portals.txt
linux-arm64/localhost.pem
linux-arm64/example-cloaking-rules.txt
linux-arm64/example-forwarding-rules.txt
linux-arm64/LICENSE
linux-arm64/example-allowed-names.txt
Info: Downloading public-resolvers.md
Info: Downloading public-resolvers.md.minisig
Info: Downloading relays.md
Info: Downloading relays.md.minisig
Info: Configure dnsmasq.postconf file
Info: Configure init-start file
Info: Configuring dnscrypt-proxy...
=> Do you want to redirect all DNS resolutions on your network through this proxy? [y/n]: y
Info: DNSFilter is Already on.
Info: You can choose to keep any custom dnsfilter values and only redirect non-custom traffic or send all traffic through this proxy.
=> Do you want to redirect only SOME DNS resolutions on your network through this proxy? [y/n]: y
Info: DNSFilter is set to control DNS through this proxy, while leaving any Custom Rules and Values.
=> Do you want to use DNS server over IPv6 (yes only if your connection has IPv6)? [y/n]: y
Info: Choose DNS resolving load balancing strategy:
1) p2 (default)
2) ph
3) first
4) random
=> Select your mode, [1-4]: 1
=> Do you want to use load balance estimator to adjust resolvers based on latency calculations? [y/n]: y
Info: Choose how your DNS servers are selected:
1) Automatically
2) Manually
3) Static
=> Select your mode, [1-3]: 2
Info: Available DNS servers:
**********shortened for fitting forum***********************
42) cloudflare: Cloudflare DNS (anycast) - aka 1.1.1.1 / 1.0.0.1
43) cloudflare-family: Cloudflare DNS (anycast) with malware protection and parental control - aka 1.1.1.3 / 1.0.0.3
44) cloudflare-family-ipv6: Cloudflare DNS over IPv6 (anycast) with malware protection and parental control
45) cloudflare-ipv6: Cloudflare DNS over IPv6 (anycast)
**********shortened for fitting forum***********************
=> Please choose DNS server., [1-249]: 42
=> Please choose next DNS server or press n to stop., [1-249/n]: 45
=> Please choose next DNS server or press n to stop., [1-249/n]: n
Info: Set the DNS server(s) for initializing dnscrypt-proxy
Info: and router services (e.g. ntp) at boot
=> Default is 9.9.9.9: 1.1.1.1
=> 2nd Default is 8.8.8.8: 1.0.0.1
=> Set log level, default is 2, 0 is the most verbose, [0-6]: 0
Info: Writing dnscrypt-proxy configuration...
Info: Evaluating other possibilities for dnscrypt-proxy configuration...
Info: Checking for Anonymized Dnscrypt Support.
..
...
....
.....
......
Info: You may specify Wild-card Relay Support (server_name *) with option 1 (this supports only DNSCrypt Servers).
* Warning: All DNSCRYPT Server traffic will be sent through same set of chosen Relays with Wild-Card Option.
Info: Option 2 gives you the choice to Setup Relays per Dnscrypt-Server.
Info: Option 3 allows you to skip relay configuration or remove old relays configurations.
* Warning: Option 1 & 2 delete old relay configurations.
* Warning: Issues may occur if you are not using same servers as defined in relays.
Info: What do you want to do:
1) All Servers with Wild-Card Relay Support.
2) Pick Relays for DNSCRYPT servers (Per Server).
3) Skip Setting-up/Modifying Relay Support.
=> Your choice, [1-3]: 3
=> Do you want to remove any old relay setups (recommended)? [y/n]: n
Info: You chose to continue without setting up relays or modifying relay support.
Info: Checking dnscrypt-proxy configuration...
[2021-03-23 19:52:25] [NOTICE] dnscrypt-proxy 2.0.45
[2021-03-23 19:52:25] [NOTICE] Dropping privileges
[2021-03-23 19:52:25] [NOTICE] Source [relays] loaded
[2021-03-23 19:52:25] [NOTICE] Source [public-resolvers] loaded
[2021-03-23 19:52:25] [NOTICE] Configuration successfully checked
Info: Starting dnscrypt-proxy...
Info: For dnscrypt-proxy version 2 to work reliably, you might also want to:
Info: - Add swap
Info: - Add a RNG
Info: - Set your timezone
Info: Operation completed. You can quit or continue
=====================================================
Last edited:
SomeWhereOverTheRainBow
Part of the Furniture
use the code option. and copy & paste
You may have to shorten sections, such as the long list of servers.
Also, Did you perform a full factory reset after converting from stock firmware to RMerlin Firmware? there are many differences between the firmwares that may need to the addressed with a full factory reset and a Manual reconfiguration of router settings (I.E. not trying to restore settings from a backup created from stock firmware).
Strange though, I thought since it was a HND model it would not be an armv7l , but I guess Asus is still using that with newer routers.
Last edited:
SomeWhereOverTheRainBow
Part of the Furniture
@panni , as per this observation, try using it without haveged installed.
As well, I have found other users having issues with this router particularly on the 386 branches.
check out
RT-AX58U crashing on 386.2 beta 1
For those not following the saga of the RT-AX58U.... I sent mine back to Asus as an RMA about 6 weeks ago, Asus declared it was not repairable (NAND) and sent me a fully tested refurb RT-AX58U. It ran fine for about 7 days. The 8th day didn't go as well as I encountered the first crash with...
www.snbforums.com
You may want to try the 384.19 firmware to see if you have the same issues. 384.19 is not currently in beta and some users are reporting it as more stable for the RTAX58U.
Last edited:
SomeWhereOverTheRainBow
Part of the Furniture
what is the output values when you type these into the SSH terminal...
nvram get jffs2_enable
nvram get jffs2_scripts
and
df
As I fear there maybe an issue with your JFFS partition...
Last edited:
Hmm, the screen resets during the usage of the installer, and I won't be able to copy certain output. Is there a way to redirect/separate output into a log as well?
Yes I did a proper full reset before upgrading, including the WPS reset before and after upgrading to Merlin. Also it was brand new (two weeks old).
Output:
Honestly, I'd rather not. 386.2 is extremely stable for me and I'm completely happy with the AX58U right now.@panni , as per this observation, try using it without haveged installed.
As well, I have found other users having issues with this router particularly on the 386 branches.
check out
RT-AX58U crashing on 386.2 beta 1
For those not following the saga of the RT-AX58U.... I sent mine back to Asus as an RMA about 6 weeks ago, Asus declared it was not repairable (NAND) and sent me a fully tested refurb RT-AX58U. It ran fine for about 7 days. The 8th day didn't go as well as I encountered the first crash with...
You may want to try the 384.19 firmware to see if you have the same issues. 384.19 is not currently in beta and some users are reporting it as more stable for the RTAX58U.
I'll explicitly try without installing haveged again, but I think I already tried that.
SomeWhereOverTheRainBow
Part of the Furniture
With out further info I have no way to know what is the root cause of your problem as i am not in possession of a rtax58u. This issue evades all my test (it seems exclusive to this newer model). I am not even having this issue on a gt ax 11000. Or a rtac68u.
I believe your jffs2_enable should be reporting a 1 value if it is enabled properly, it does on all the routers i have tested.
Last edited:
SomeWhereOverTheRainBow
Part of the Furniture
Try running
nvram set jffs2_enable=1 && nvram set jffs2_scripts=1 && nvram commit
inside your ssh terminal before running the installer script
Just did that, nvram get
jffs2_enable now returns 1.I tried to replicate exactly what you've done above, there's the log:
Code:
Info: JFFS custom scripts and configs are already enabled.
Info: DNS Environment is Ready.
Info: Choose what you want to do:
1) Install/Update dnscrypt-proxy
2) Uninstall dnscrypt-proxy
3) Configure dnscrypt-proxy
4) Set timezone
5) Unset timezone
6) Install (P)RNG
7) Uninstall (P)RNG
8) Install swap file
9) Uninstall ALL
q) Quit
=> Please enter the number that designates your selection:, [1-9/q]: 1
Info: This operation will install dnscrypt-proxy and related files (<6MB)
Info: to jffs, no other data will be changed.
Info: Also some start scripts will be installed/modified as required.
=> Do you want to install dnscrypt-proxy to /jffs? [y/n]: y
Info: Downloading manager
Info: Downloading dnscrypt-proxy-linux_arm-2.0.45.tar.gz
linux-arm/
linux-arm/example-blocked-names.txt
linux-arm/example-dnscrypt-proxy.toml
linux-arm/dnscrypt-proxy
linux-arm/example-blocked-ips.txt
linux-arm/example-allowed-ips.txt
linux-arm/example-captive-portals.txt
linux-arm/localhost.pem
linux-arm/example-cloaking-rules.txt
linux-arm/example-forwarding-rules.txt
linux-arm/LICENSE
linux-arm/example-allowed-names.txt
Info: Downloading public-resolvers.md
Info: Downloading public-resolvers.md.minisig
Info: Downloading relays.md
Info: Downloading relays.md.minisig
Info: Creating dnsmasq.postconf file
Info: Configure dnsmasq.postconf file
Info: Creating init-start file
Info: Configure init-start file
Info: Configuring dnscrypt-proxy...
=> Do you want to redirect all DNS resolutions on your network through this proxy? [y/n]: y
Info: DNSFilter is set to Control DNS.
=> Do you want to use DNS server over IPv6 (yes only if your connection has IPv6)? [y/n]: n
Info: Choose DNS resolving load balancing strategy:
1) p2 (default)
2) ph
3) first
4) random
=> Select your mode, [1-4]: 1
=> Do you want to use load balance estimator to adjust resolvers based on latency calculations? [y/n]: y
Info: Choose how your DNS servers are selected:
1) Automatically
2) Manually
3) Static
=> Select your mode, [1-3]: 2
Info: Available DNS servers:
=> Please choose DNS server., [1-195]: 42
=> Please choose next DNS server or press n to stop., [1-195/n]: n
Info: Set the DNS server(s) for initializing dnscrypt-proxy
Info: and router services (e.g. ntp) at boot
=> Default is 9.9.9.9: 1.1.1.1
=> 2nd Default is 8.8.8.8: 1.0.0.1
=> Set log level, default is 2, 0 is the most verbose, [0-6]: 2
Info: Writing dnscrypt-proxy configuration...
Info: Evaluating other possibilities for dnscrypt-proxy configuration...
Info: Checking for Anonymized Dnscrypt Support.
..
...
....
.....
......
Info: You may specify Wild-card Relay Support (server_name *) with option 1 (this supports only DNSCrypt Servers).
* Warning: All DNSCRYPT Server traffic will be sent through same set of chosen Relays with Wild-Card Option.
Info: Option 2 gives you the choice to Setup Relays per Dnscrypt-Server.
Info: Option 3 allows you to skip relay configuration or remove old relays configurations.
* Warning: Option 1 & 2 delete old relay configurations.
* Warning: Issues may occur if you are not using same servers as defined in relays.
Info: What do you want to do:
1) All Servers with Wild-Card Relay Support.
2) Pick Relays for DNSCRYPT servers (Per Server).
3) Skip Setting-up/Modifying Relay Support.
=> Your choice, [1-3]: 3
=> Do you want to remove any old relay setups (recommended)? [y/n]: n
Info: You chose to continue without setting up relays or modifying relay support.
Info: Checking dnscrypt-proxy configuration...
[2021-03-24 12:08:18] [NOTICE] dnscrypt-proxy 2.0.45
[2021-03-24 12:08:18] [NOTICE] Dropping privileges
[2021-03-24 12:08:18] [FATAL] Unable to drop additional groups: [function not implemented]
Info: Move invalid configuration file to /jffs/dnscrypt/dnscrypt-proxy.toml.err
Info: Operation will continue with clean config file.
Info: Writing dnscrypt-proxy configuration failed
Info: Please send /jffs/dnscrypt/dnscrypt-proxy.toml.err file and screen log of
Info: all operations you have made to this script dev
grep: /jffs/dnscrypt/dnscrypt-proxy.toml: No such file or directory
Info: Starting dnscrypt-proxy...
*** Error: Couldn't start dnscrypt-proxy
*** Error: Please send WebUI System Log to dev
=====================================================
Info: JFFS custom scripts and configs are already enabled.
Info: DNS Environment is Ready.
Info: DI_VERSION=v2.1.8
Info: DNSCRYPT_VER=2.0.45
Info: Manager file is Up-To-Date!
Info: Choose what you want to do:
1) Install/Update dnscrypt-proxy
2) Uninstall dnscrypt-proxy
3) Configure dnscrypt-proxy
4) Set timezone
5) Unset timezone
6) Install (P)RNG
7) Uninstall (P)RNG
8) Install swap file
9) Uninstall ALL
b) Backup
q) Quit
=> Please enter the number that designates your selection:, [1-9/b/q]:/jffs/dnscrypt/dnscrypt-proxy.toml.err
I seem to have exactly what this user described.
SomeWhereOverTheRainBow
Part of the Furniture
Something appears to be a miss with some of these newer supported routers. Some google searching suggest this is a kernal issue where it is built with out the CONFIG_MULTIUSER=y. I am still unable to replicate this issue.
@RMerlin
Similar threads
Similar threads
Similar threads
-
-
-
TAILMON TAILMON v1.0.20 -July 27, 2024- WireGuard-based Tailscale Installer, Configurator and Monitor (THREAD #1 CLOSED)- Started by Viktor Jaep
- Replies: 556