Per Issue #1401 - EdgeOS will add DNS provided by WAN DHCP servers, which will lead to DNS resolution in the clear with ISP servers on port 53

aniqueta 2020-07-06 11:07:03 -07:00
parent 3a15cdd2f9
commit 4d85eff096

@ -81,12 +81,13 @@ dig @localhost -p 5353 google.com
You should get an answer.
If all went well, configure router settings and redirect queries to dnscrypt-proxy:
If all went well, configure router settings and redirect queries to dnscrypt-proxy and to prevent dnsmasq using your ISP's DNS in parallel on port 53 unencrypted (the below assumes your WAN is on eth0):
```text
configure
delete service dns forwarding system
set service dns forwarding options 'server=127.0.0.1#5353'
set interfaces ethernet eth0 dhcp-options name-server no-update
commit
```