diff --git a/Setting-up-dnscrypt-proxy-on-Gentoo-Linux-based-gateway.md b/Setting-up-dnscrypt-proxy-on-Gentoo-Linux-based-gateway.md index 8e0d4c3..4a922db 100644 --- a/Setting-up-dnscrypt-proxy-on-Gentoo-Linux-based-gateway.md +++ b/Setting-up-dnscrypt-proxy-on-Gentoo-Linux-based-gateway.md @@ -32,7 +32,7 @@ dhcp-range=192.168.1.20,192.168.1.28,12h localise-queries proxy-dnssec -The `dnscrypt-proxy.toml` basics are in another wiki article, so here only few settings are covered. First of all, let’s make sure dnscrypt is listening on a correct port so dnsmasq is able to send requests: `listen_addresses = ['127.0.0.1:2053']`. To use family-friendly resolvers you’ll need to comment the first block in `[sources]` section and uncomment the second. To make those resolvers visible you have to set up `require_nofilter = false`. `require_nolog` may also be set to `false` not to reject resolvers that log you activity. If you need cloacking / blacklisting then uncomment the appropriate lines and make sure the files those directives are pointing to exist. Those features are explained below. +The `dnscrypt-proxy.toml` basics are in another [[wiki article|Basic dnscrypt-proxy.toml Editing]], so here only few settings are covered. First of all, let’s make sure dnscrypt is listening on a correct port so dnsmasq is able to send requests: `listen_addresses = ['127.0.0.1:2053']`. To use family-friendly resolvers you’ll need to comment the first block in `[sources]` section and uncomment the second. To make those resolvers visible you have to set up `require_nofilter = false`. `require_nolog` may also be set to `false` not to reject resolvers that log you activity. If you need cloacking / blacklisting then uncomment the appropriate lines and make sure the files those directives are pointing to exist. Those features are explained below. Besides securing DNS requests you may also use URL and IP blacklists, modifying them by hand or just pulling from the Internet on a regular basis by a cron job. Some example lists are packaged and may be immediately used by removing an `example-` name prefix and enabling them in the `dnscrypt-proxy.toml` file by uncommenting the corresponding lines.