mirrors/dnscrypt-proxy
1
0
Fork 0
mirror of https://github.com/DNSCrypt/dnscrypt-proxy.git synced 2025-03-04 02:14:40 +01:00
Code Issues Projects Releases Packages Wiki Activity Actions

Updated Setting up dnscrypt proxy on Gentoo Linux based gateway (markdown)

kanyck 2018-02-23 11:28:13 +03:00
parent 31b7926670
commit e6f8fefda3
1 changed files with 1 additions and 1 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

2
Setting-up-dnscrypt-proxy-on-Gentoo-Linux-based-gateway.md

@ -32,7 +32,7 @@ dhcp-range=192.168.1.20,192.168.1.28,12h
localise-queries
proxy-dnssec
</pre>
The `dnscrypt-proxy.toml` basics are in another wiki article, so here only few settings are covered. First of all, let’s make sure dnscrypt is listening on a correct port so dnsmasq is able to send requests: `listen_addresses = ['127.0.0.1:2053']`. To use family-friendly resolvers you’ll need to comment the first block in `[sources]` section and uncomment the second. To make those resolvers visible you have to set up `require_nofilter = false`. `require_nolog` may also be set to `false` not to reject resolvers that log you activity. If you need cloacking / blacklisting then uncomment the appropriate lines and make sure the files those directives are pointing to exist. Those features are explained below.
The `dnscrypt-proxy.toml` basics are in another [[wiki article|Basic dnscrypt-proxy.toml Editing]], so here only few settings are covered. First of all, let’s make sure dnscrypt is listening on a correct port so dnsmasq is able to send requests: `listen_addresses = ['127.0.0.1:2053']`. To use family-friendly resolvers you’ll need to comment the first block in `[sources]` section and uncomment the second. To make those resolvers visible you have to set up `require_nofilter = false`. `require_nolog` may also be set to `false` not to reject resolvers that log you activity. If you need cloacking / blacklisting then uncomment the appropriate lines and make sure the files those directives are pointing to exist. Those features are explained below.
Besides securing DNS requests you may also use URL and IP blacklists, modifying them by hand or just pulling from the Internet on a regular basis by a cron job. Some example lists are packaged and may be immediately used by removing an `example-` name prefix and enabling them in the `dnscrypt-proxy.toml` file by uncommenting the corresponding lines.