Questions tagged [dnscrypt]

The tag has no usage guidance.

Filter by
Sorted by
Tagged with
0
votes
1answer
23 views

resolving a subdomain with dnscrypt-proxy returns an IP address but claims that the domain does not exist

I am using dnscrpyt-proxy as a local stub for using DoH. Resolving subdomains claims that they "probably" don't exist or are blocked by the proxy but the IP returned is correct. I am not ...
5
votes
1answer
211 views

Going all-in on DNSSEC

I have been doing an effort to go full on DNSSEC on my system with the following setup: dnscrypt-proxy installed, up and running on 127.0.0.1 with require_dnssec = true systemd-resolved running, with ...
0
votes
0answers
322 views

High latency with dnscrypt-proxy

I have been using dnscrypt-proxy for some time and the latency for responses I've been monitoring for months is typically several times slower than if I used google, opendns, cloudflare, or quad 9. ...
0
votes
1answer
103 views

How should I deal with cyclic dependencies caused by a systemd dynamic user not existing before the service starts?

I would like for dnscrypt-proxy to run as a dynamic user instead of as root. But I would also like to use a firewall rule in nftables where I specify the user dnscrypt-proxy, to allow it to connect to ...
2
votes
0answers
250 views

Consequences of disabling the use of dnsmasq in Network Manager config?

In elementaryOS Loki, I have only been able to make DnsCrypt to work properly (when manually setting the DNS server address in the gui Network Settings to 127.0.0.1 or whatever other address starting ...
2
votes
1answer
2k views

How to make dnscrypt-proxy auto start in Fedora 25

When I install dnscrypt-proxy, I found no dnscrypt-proxy.service here. I write a bash to launch it, and write a desktop file here, ~/.config/autostart/dnscrypt.desktop #!/bin/bash zenity --password ...
2
votes
1answer
167 views

dnscrypt-proxy - not getting dnssec results

I have installed dnscrypt-proxy and am using and dnssec enabled provider; however, when testing my configuration, I'm not getting back dnssec information: dig @127.0.0.1 -p 5300 weather.com +dnssec +...
4
votes
1answer
7k views

Configure BIND as Forwarder only (no root hints), encrypted + RPZ blacklist / whitelist all together

My setup is getting more complex, generally I tend to divide things in pieces and assemble them together by myself. But it seems this time I need more help to get the whole gears working together. ...
2
votes
2answers
2k views

Resolving DNS through HTTP/HTTPS

Is there a way to resolve DNS through HTTP/HTTPS, the case was: my ISP redirecting every DNS request to their own DNS and poisoning the DNS records. all I need is a software that could resolve ...