using hosts file w/ dnscrypt on entware

[finite9]

I got DNScrypt working on my Asus AC-RT68U and im using the Cisco family shield resolver, because i've got kids I want to protect. However, I would prefer to use an OpenNIC resolver, because Cisco logs requests. But I cannot find another resolver that has an equivalent of Family Shield. So, my question is, can I not just configure an OpenNIC resolver that dosn't filter anything (which I have done and it works fine), and then just paste in e.g. MVP's Hostsfile into the routers hosts file (which I have done and it does not work)?

when I save the hostsfile with one entry to test it with:

0.0.0.0 www.bing.com

then dig www.bing.com it still gives a response.

I take it the the no-resolv option in dnsmasq.conf.add in the jjfffs config folder means that resolv.conf is being ignored hence hostsfile is being ignored and all requests are going to dnscrypt? How could I change dnsmasq's config so that it checked the hostsfile first?

 

[finite9]

I googled a bit and found out that you could link to an external hosts file from dnsmasq's config file using InList but this did not work and seems to be a known bug in Dnsmasq. There was another forum tip though about excluding whole domains right in the dnsmasq conf file, for those domains like doubleclick.net that have umpteen different domains. So I added that list and it works great with blocking them. I am loathe however to add in the whole MSVP hostsfile using this method for fear of it slowing down dnsmasq in some way. Can anyone comment on whether it sounds like a good or bad idea? The format of the exclusion is:

server=/doubleclick.net/0.0.0.0

 

[smadremanden]

I believe that ab-solution would solve the problems you have. It has the ability to use custom host files or just blacklisting sites manually one by one. I have been using it for a while with DNSCrypt without any issues at all!

 

[finite9]

Thanks for the tip! I'll look into it.

 

[smadremanden]

The easiest way is to install ab-solution first and then entware and dnscrypt, but you'll get it once you start working with it. If it turns out to be too difficult for you, text me.