mirrors/dnscrypt-proxy
1
0
Fork 0
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git synced 2025-03-04 02:14:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Updated DNSCrypt server with vultr.com (markdown)

Frank Denis 2019-06-29 22:11:46 +02:00
parent 9ed6e0ec94
commit 250f99ac92
1 changed files with 1 additions and 32 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

33
DNSCrypt-server-with-vultr.com.md

@ -14,9 +14,7 @@ The 5$ variant is quite sufficient
![](https://raw.githubusercontent.com/bitbeans/docs/master/img/vultr.com/step3.PNG)
**Add the following startscript (type Boot):** [dnscrypt_install.sh](https://gist.githubusercontent.com/bitbeans/89c0b430f48a35cd39164aaa07fc15f2/raw/17040e10d7d422c2a8f7e43156af83bb80d5c384/dnscrypt_install.sh)
![](https://raw.githubusercontent.com/bitbeans/docs/master/img/vultr.com/script.PNG)
**Add the following startscript (type Boot):** [dnscrypt_install.sh](https://gist.githubusercontent.com/jedisct1/b8393a058ba3cfc1335379c4ac41969f/raw/9600ddbc354992b3e988d0f14f12e9983ab102c4/centos5-docker-dnscrypt-server.sh)
![](https://raw.githubusercontent.com/bitbeans/docs/master/img/vultr.com/step4.PNG)
@ -37,32 +35,3 @@ You can find your stamp (and all other keys) here: `cat /root/keys/provider-info
![](https://raw.githubusercontent.com/bitbeans/docs/master/img/vultr.com/final2.PNG)
Firewall rules can be found here: `/etc/sysconfig/iptables`
Replace the content of that file with the following lines (or [download them here](https://gist.githubusercontent.com/jedisct1/ee059b8ad2b84e404e639738c4c9eaa6/raw/b31ddba9dbf0c7fd8ec6299c858614d8d24776b1/iptables)):
```text
*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT
-A INPUT -p udp --dport 443 -j ACCEPT
-A INPUT -p tcp --dport 443 -j ACCEPT
-A INPUT -s 127.0.0.1 -j ACCEPT
-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT
-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited
COMMIT
```
Reload the firewall rules: `systemctl reload iptables`
Enjoy :)