how to install the best version of DNSCrypt?

Comments

51 comments

  • Avatar
    kwan2

    so does it otherwise look like dns-crypt is up and running ?  

    0
    Comment actions Permalink
  • Avatar
    kwan2

    hmm , went back in and changed the eth0 v4  to 127.0.0.1  and now get this 

    C:\windows\system32>nslookup google.com.
    1.0.0.127.in-addr.arpa
    primary name server = localhost
    responsible mail addr = nobody.invali
    serial = 1
    refresh = 600 (10 mins)
    retry = 1200 (20 mins)
    expire = 604800 (7 days)
    default TTL = 10800 (3 hours)
    (root) ??? unknown type 41 ???
    Server: UnKnown
    Address: 127.0.0.1

    Non-authoritative answer:
    Name: google.com
    Addresses: 2607:f8b0:4007:800::1006
    74.125.224.233
    74.125.224.229
    74.125.224.238
    74.125.224.232
    74.125.224.226
    74.125.224.231
    74.125.224.227
    74.125.224.228
    74.125.224.224
    74.125.224.230
    74.125.224.225


    C:\windows\system32>

    0
    Comment actions Permalink
  • Avatar
    jedisct1

    Looks good!

    0
    Comment actions Permalink
  • Avatar
    kwan2

    if i were to buy a new router and install openvpn  on it,   would the router, use the computer dns-crypt service, if i put  127.0.0.1 into the router, or would it default back to the win7 dns 127.0.0.1  if i leave the openvpn dns  blank ?

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    If you put 127.0.0.1 as DNS server into the router, you most likely do not have DNS anymore at all unless you install the dnscrpyt-proxy on the router. The address 127.0.0.1 is the local loopback address, only pointing back to the same machine it is configured on.

    If you have the dnscrypt-proxy installed on the computer, it works only on this computer unless you get the dnscrypt-proxy to listen on the computer's IP address, and then configure this computer's address on other devices including the router as DNS server address. Then these devices' DNS lookups will go to the computer and through the dnscrypt-proxy.

    0
    Comment actions Permalink
  • Avatar
    jedisct1

    If your router is running an open firmware like Tomato Shibby or Advanced Tomato, you don't need to worry much about it.

    In particular, you don't need to change your DNS settings. Just check the "use dnscrypt" box, and it will play well with OpenVPN. OpenDNS will be used by default, but the web interface of these router firmwares also let you change the dnscrypt-proxy command-line if you like to use a different service.

    OpenVPN can either use the server-provided name servers, or keep the default one. I don't remember if the Tomato UI let you change that, but I can check.

    If you don't need your current resolver's features, using the one provided by the VPN provider is a better choice, since it will you faster content delivery for content served by CDNs.

    0
    Comment actions Permalink
  • Avatar
    halebop

    frustrated

     

    0
    Comment actions Permalink
  • Avatar
    salonpas23

    I don't have the "Parameters" folder in regedit. How?

    0
    Comment actions Permalink
  • 0
    Comment actions Permalink
  • Avatar
    salonpas23

    This works for device that access internet via wi-fi, right? I use DNSCrypt to unblock websites and it worked perfectly. It's still working on my computer, but not anymore on my cellphone. It worked before, just suddenly blocked again. What should I do?

    0
    Comment actions Permalink
  • Avatar
    rotblitz

    "This works for device that access internet via wi-fi, right?"

    No, it doesn't matter how your device is connected.

    "It's still working on my computer, but not anymore on my cellphone."

    It may no longer be installed on your smartphone.  So reinstall it again.

    0
    Comment actions Permalink
  • Avatar
    dannon

    I am using a VPN with DNSCrypt resolving to 127.0.0.1 and running on OSX and all working fine.  I have been following the discussion looking for hints as to whether it is possible to tell the DNSCrypt resolver at other end to use the OpenDNS FamilyShield addresses 208.67.222.123 or 208.67.220.123 instead of default. I have not been able to find any discussion threads or support pages with clues on how to do this.  I was hoping there is a way to do this in order to get some added protection for my kids when they are on the Internet? I am not familiar with scripts in terminal window but could figure it out if someone can point me in the right direction. Thanks.

    0
    Comment actions Permalink
  • Avatar
    jedisct1

    That's pretty easy: use opendns-familyshield as a server name instead of opendns:

     

        dnscrypt-proxy -R opendns-familyshield

     

     

    0
    Comment actions Permalink
  • Avatar
    dannon

    Thanks for the quick reply. Hopefully it is as easy as it sounds but I need a little further clarification. So far I had just used the advanced network configuration to set my VPN service setup to go 127.0.0.1 after DNSCrypt installed. That was all and it worked.  So, where do I enter this command sequence "dnscrypt-proxy -R opendns-familyshield" ? Do I type this instruction into the terminal window? If so, do I then have to do this manually every time I want to re-route to FamilyShield or will it remember and be automatic hereafter? I'm far from an expert on OSX. Thanks again.

    0
    Comment actions Permalink
  • Avatar
    jedisct1

    How are you running dnscrypt right now? Using a graphical user interface? Which one?

    0
    Comment actions Permalink
  • Avatar
    dannon

    I am running Client Version 0.10 (12 Jan 2012) and the only interface is from the icon on the menu bar where I can select DNSCript Preferences.  There the only options it gives me are check-box selections of Enable OpenDNS, Enable DNSCript, DNSCript over TCP/443, and Fallback to insecure DNS.

    0
    Comment actions Permalink
  • Avatar
    jedisct1

    Do not use this test app from 2012 any more.

    Try that one: https://github.com/alterstep/dnscrypt-osxclient

    0
    Comment actions Permalink
  • Avatar
    dannon

    OK. Had a look at github site. Quite overwhelming for a novice. I downloaded the uninstaller and ran that successfully first. Then I downloaded the dnscyrpt-osxclient-master but not sure what to do with all these script files.  Is there a readme instruction sequence somewhere?

    Which of the following files do I need to download for proper dnscrypt-proxy for OSX 10.7.5 ?  It's not obvious to me. Here is the choice:

    ../
    dnscrypt-server/ 25-Apr-2014 19:18 -
    old/ 15-Sep-2013 21:19 -
    dnscrypt-proxy-1.3.3.tar.bz2 14-Aug-2013 03:40 1270281
    dnscrypt-proxy-1.3.3.tar.bz2.sig 14-Aug-2013 03:41 72
    dnscrypt-proxy-1.3.3.tar.gz 14-Aug-2013 03:40 1576428
    dnscrypt-proxy-1.3.3.tar.gz.sig 14-Aug-2013 03:41 72
    dnscrypt-proxy-1.4.0.tar.bz2 25-Apr-2014 06:35 1273915
    dnscrypt-proxy-1.4.0.tar.bz2.sig 25-Apr-2014 06:35 72
    dnscrypt-proxy-1.4.0.tar.gz 25-Apr-2014 06:35 1579426
    dnscrypt-proxy-1.4.0.tar.gz.sig 25-Apr-2014 06:35 72
    dnscrypt-proxy-android-1.4.0.tar.gz 01-May-2014 15:26 835235
    dnscrypt-proxy-android-1.4.0.tar.gz.sig 01-May-2014 15:26 72
    dnscrypt-proxy-ios-1.4.0.tar.gz 25-Apr-2014 07:00 169986
    dnscrypt-proxy-ios-1.4.0.tar.gz.sig 25-Apr-2014 07:00 72
    dnscrypt-proxy-win32-1.3.3.zip 15-Sep-2013 21:17 367430
    dnscrypt-proxy-win32-1.3.3.zip.sig 15-Sep-2013 21:18 72
    dnscrypt-proxy-win32-full-1.3.3.zip 15-Sep-2013 21:17 785171
    dnscrypt-proxy-win32-full-1.3.3.zip.sig 15-Sep-2013 21:18 72
    dnscrypt-proxy-win32-full-1.4.0.zip 06-May-2014 07:14 620488
    dnscrypt-proxy-win32-full-1.4.0.zip.sig 06-May-2014 07:15 72

    thanks.

    0
    Comment actions Permalink
  • Avatar
    jedisct1

    Just get the ZIP file from https://github.com/alterstep/dnscrypt-osxclient

    (the link that currently says "Download dnscrypt-osxclient-1.0.1.zip")

    0
    Comment actions Permalink
  • Avatar
    dannon

    I finally got back to this and gave it a try but got the message "DNSCrypt OSX Client can't' be installed on this disk.  This user interface doesn't work with this version of OSX".  I am running on OSX 10.7.5.  Is there a .zip for this version of OSX??  thanks again.

    0
    Comment actions Permalink
  • Avatar
    dannon

    I just installed OSX 10.9.2 and then retried the install of DNSCript client and it installed ok. I found a way to get my VPN to connect automatically using script. All is good now. Thanks.

    0
    Comment actions Permalink

Post is closed for comments.