DNScrypt dnscrypt installer for asuswrt

[Zastoff]

Edit:
The personal sdns stamp can now again be found on NextDNS setup page under setup guides (linux or router)

Did some testing here with my NextDNS SDNS Stamp (took me a while to find it in a old backup)
https://dnscrypt.info/stamps/
Change in top left corner
Protocol:
DNS over HTTP/2
Unmark: No logs & No Filters

IP Address:
45.90.28.0

Host name (vhost+SNI) and optional port number:
dns.nextdns.io

Hashes (comma-separated):
Leave it emty

Path:
Paste endpoint ID like this example /exxxxx (with the /)

and copy the stamp sdns adress
Works for me
Hope this can help until they fix it @jim trudel
Link DNSCrypt Installer(asuswrt-merlin) setup for NextDNS (DoH).

 

[ColinTaylor]

Hope this can help until they fix it @jim trudel
Link to NextDNS how to.

Bear in mind that AFAIK Jim isn't using an Asus router or Asuswrt.

 

[jim trudel]

Bear in mind that AFAIK Jim isn't using an Asus router or Asuswrt.

I have an asus too but I use in the moment dd wrt.

 

[jim trudel]

Did some testing here with my NextDNS SDNS Stamp (took me a while to find it in a old backup)
https://dnscrypt.info/stamps/
Change in top left corner
Protocol:
DNS over HTTP/2
Unmark: No logs & No Filters

IP Address:
45.90.28.0

Host name (vhost+SNI) and optional port number:
dns.nextdns.io

Hashes (comma-separated):
Leave it emty

Path:
Paste endpoint ID like this example /exxxxx (with the /)

and copy the stamp sdns adress
Works for me
Hope this can help until they fix it @jim trudel
Link to NextDNS how to.

thanks, I followed your tuto, I edited the ''.toml config file'' and if I understand, if I need to use sdns stamp, I need to go at the of the config file instead of ''name servers'' at the beginning right?

So I have that :
# [static.'myserver']
# stamp = 'sdns:AQcAAAAAAAAAAAAQMi5kbnNjcnlwdC1jZXJ0Lg'

JUst need to edit with your infos? + to start the service, Do i need to remove the # ?
and is it possible to use that + my others in ''name servers ? ie:
server_names = [ 'quad9-dnscrypt-ip4-filter-pri']


thanks

 

[Zastoff]

thanks, I followed your tuto, I edited the ''.toml config file'' and if I understand, if I need to use sdns stamp, I need to go at the of the config file instead of ''name servers'' at the beginning right?

So I have that :
# [static.'myserver']
# stamp = 'sdns:AQcAAAAAAAAAAAAQMi5kbnNjcnlwdC1jZXJ0Lg'

JUst need to edit with your infos? + to start the service, Do i need to remove the # ?
and is it possible to use that + my others in ''name servers ? ie:
server_names = [ 'quad9-dnscrypt-ip4-filter-pri']


thanks

You need to edit dnscrypt-proxy.toml
server_names = ['mynextdns']
and at the bottom the # must be removed
[static.'mynextdns']
stamp = 'sdns:your personal stamp'
And restart the proxy should work

 

[jim trudel]

You need to edit dnscrypt-proxy.toml
server_names = ['mynextdns']
and at the bottom the # must be removed
[static.'mynextdns']
stamp = 'sdns:your personal stamp'
And restart the proxy should work

Thanks

it seems to be working

 

[SomeWhereOverTheRainBow]

Did some testing here with my NextDNS SDNS Stamp (took me a while to find it in a old backup)
https://dnscrypt.info/stamps/
Change in top left corner
Protocol:
DNS over HTTP/2
Unmark: No logs & No Filters

IP Address:
45.90.28.0

Host name (vhost+SNI) and optional port number:
dns.nextdns.io

Hashes (comma-separated):
Leave it emty

Path:
Paste endpoint ID like this example /exxxxx (with the /)

and copy the stamp sdns adress
Works for me
Hope this can help until they fix it @jim trudel
Link to NextDNS how to.

@Zastoff
Note you must append your nextdns account number if you want to use your next and account
/Yourprefix For endpoint
Then IP address should be whatever dns1 ipv4 address is associated with your account.

 

[jim trudel]

@Zastoff
Note you must append your nextdns account number if you want to use your next and account
/Yourprefix For endpoint
Then IP address should be whatever dns1 ipv4 address is associated with your account.

I followed what @Zastoff wrote and it seems ok on my setup.
I did via the toml file.

I used the the IP he gave (45.90.28.0) but mine is 45.90.28.2xx) and the dns.nextdns.io host name

And when I go to my nextdns website page, I get the : "all good ....... with gree led"

Envoyé de mon SM-G960W en utilisant Tapatalk

 

[Zastoff]

I followed what @Zastoff wrote and it seems ok on my setup.
I did via the toml file.

I used the the IP he gave (45.90.28.0) but mine is 45.90.28.2xx) and the dns.nextdns.io host name

And when I go to my nextdns website page, I get the : "all good ....... with gree led"

Envoyé de mon SM-G960W en utilisant Tapatalk

It is correct
The other ip is for regular ipv4(45.90.28.2xx)
and

Path:
Paste endpoint ID like this example /exxxxx (with the /)

Is the prefix for your personal account

 

[jim trudel]

the only problem I have, with any nextdns configuration I have, I tried stubby, unbound, dnscrypt.... yahoo mail does not work, impossible to open the page

 

[SomeWhereOverTheRainBow]

the only problem I have, with any nextdns configuration I have, I tried stubby, unbound, dnscrypt.... yahoo mail does not work, impossible to open the page

Do you have any type of children filtering on? Because a lot of them block yahoo because it can be used to avoid safe searches and what not. If you do, try access yahoo with the children filtering turned off.

If that doesn't work you will need to ask for more advice from nextdns as it has to do with their filtering services.

 

[jim trudel]

Do you have any type of children filtering on? Because a lot of them block yahoo because it can be used to avoid safe searches and what not. If you do, try access yahoo with the children filtering turned off.

If that doesn't work you will need to ask for more advice from nextdns as it has to do with their filtering services.

I dont have children filtering and I spoke with Oliver, but after a few tries, still does not work.



Envoyé de mon SM-G960W en utilisant Tapatalk

 

[SomeWhereOverTheRainBow]

the only problem I have, with any nextdns configuration I have, I tried stubby, unbound, dnscrypt.... yahoo mail does not work, impossible to open the page

Try disabling these filters if they are turned on

 

[Zastoff]

the only problem I have, with any nextdns configuration I have, I tried stubby, unbound, dnscrypt.... yahoo mail does not work, impossible to open the page

Maybe this can be used for that address?
https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Forwarding
Have not tested this myself

 

[jim trudel]

Try disabling these filters if they are turned onView attachment 23236
View attachment 23237

For now it works since I changed my DoH in firefox, it was nextdns and now I use another one. But not sure if it's the reason cause when I tried to have access to Yahoo via brave browser, it didn't work.



Envoyé de mon SM-G960W en utilisant Tapatalk

 

[jim trudel]

You need to edit dnscrypt-proxy.toml
server_names = ['mynextdns']
and at the bottom the # must be removed
[static.'mynextdns']
stamp = 'sdns:your personal stamp'
And restart the proxy should work

I just saw that cloudflare have their new filter dns, 1.1.1.2 and .1.1.1.3.
but on ''https://dnscrypt.info/public-servers/'' the protocol supported by them is DOT..... in dnscrypt toml confi, Can I just put '' 'cloudflare-family' or 'cloudflare-security' to use it or I need to to use the stamp tool?

cause when I add ''cloudflare-security' in '' server_names'' I lose wifi

thanks

 

[SomeWhereOverTheRainBow]

I just saw that cloudflare have their new filter dns, 1.1.1.2 and .1.1.1.3.
but on ''https://dnscrypt.info/public-servers/'' the protocol supported by them is DOT..... in dnscrypt toml confi, Can I just put '' 'cloudflare-family' or 'cloudflare-security' to use it or I need to to use the stamp tool?

thanks

Dnscrypt proxy2 would use them via DoH configuration.
you would use
'cloudflare-security' and 'cloudflare-security-ipv6' if you are only concerned with filtering away malware and "bad" domains.

'cloudflare-family' and 'cloudflare-family-ipv6' can be used if you are wanting to also parental control safe-search and block explicit content and gambling type of stuff.

 

[SomeWhereOverTheRainBow]

hope that clears things up.

 

[jim trudel]

hope that clears things up.

??? I missed something or?

 

[SomeWhereOverTheRainBow]

??? I missed something or?

'cloudflare-security' and 'cloudflare-security-ipv6' if you are only concerned with filtering away malware and "bad" domains.