# Dnscrypt-proxy compiled with Plugins support

**URL:** <https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675>\
**Category:** Installing and Using OpenWrt\
**Created:** [August 10, 2017, 1:06pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675 "2017-08-10T13:06:15Z")\
**Posts on this page:** 17\
**Page:** 1

<div class="post-metadata">

**Author:** ![mariano.silva](https://forum.openwrt.org/user_avatar/forum.openwrt.org/mariano.silva/32/4797_2.png) [@mariano.silva](https://forum.openwrt.org/u/mariano.silva)\
**Post date:** [August 10, 2017, 1:06pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/1 "2017-08-10T13:06:15Z")

</div>

Dear community:

I was using dnscrypt-proxy to do a simple blacklist filtering in my network and that worked perfectly, until the "plugin" functionality was disabled when the owner disabled the option in the compilations.

Anyone can point me to an "IPK" that has the plugin functionality enabled so I can downgrade to that version?

Thanks in advance.

---

<div class="post-metadata">

**Author:** ![mariano.silva](https://forum.openwrt.org/user_avatar/forum.openwrt.org/mariano.silva/32/4797_2.png) [@mariano.silva](https://forum.openwrt.org/u/mariano.silva)\
**Post date:** [August 10, 2017, 1:08pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/2 "2017-08-10T13:08:47Z")

</div>

@InkblotAdmirer ?

---

<div class="post-metadata">

**Author:** ![InkblotAdmirer](https://forum.openwrt.org/letter_avatar/inkblotadmirer/32/5_5575768a8748004e209b776fc1b2916d.png) [@InkblotAdmirer](https://forum.openwrt.org/u/InkblotAdmirer)\
**Post date:** [August 10, 2017, 5:41pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/3 "2017-08-10T17:41:33Z")

</div>

You can submit a pull request to change the default for plugins to "yes" so the buildbot will include them, but the default was intentionally left to no to prevent an extra 125kB (compressed) for the package. I can't guarantee it would be accepted, however. (I haven't tried it but I'm told that simple changes like this can be handled from the github web ui -- no idea whether a PR like that would be accepted however).

davidc502 is building the package with plugins enabled, you can use his repo or his custom build.

Alternatively, set up a build environment in a virtual machine and build the custom package yourself -- seriously, it's very straightforward from instructions and you can then add/delete whatever features you wish.

---

<div class="post-metadata">

**Author:** ![mariano.silva](https://forum.openwrt.org/user_avatar/forum.openwrt.org/mariano.silva/32/4797_2.png) [@mariano.silva](https://forum.openwrt.org/u/mariano.silva)\
**Post date:** [August 10, 2017, 6:25pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/4 "2017-08-10T18:25:15Z")

</div>

I've fixed this by following your advice and installing @davidc502's  
version. Thanks!

---

<div class="post-metadata">

**Author:** ![anon43134599](https://forum.openwrt.org/letter_avatar/anon43134599/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon43134599](https://forum.openwrt.org/u/anon43134599)\
**Post date:** [August 11, 2017, 7:25pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/5 "2017-08-11T19:25:49Z")

</div>

Just wondering, what kind of plugins would dnscrypt need? I cant think of any but I'm dumb so bear with me.

Edit replying to myself [https://github.com/kdave/dnscrypt-plugins/blob/master/README.md](https://github.com/kdave/dnscrypt-plugins/blob/master/README.md)

---

<div class="post-metadata">

**Author:** ![mariano.silva](https://forum.openwrt.org/user_avatar/forum.openwrt.org/mariano.silva/32/4797_2.png) [@mariano.silva](https://forum.openwrt.org/u/mariano.silva)\
**Post date:** [August 11, 2017, 7:54pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/6 "2017-08-11T19:54:14Z")

</div>

The most useful one is the BLACKLIST and LOGging capability of such  
blacklisted domains/IPs... I use that isntead of a ad-blocker

---

<div class="post-metadata">

**Author:** ![anon43134599](https://forum.openwrt.org/letter_avatar/anon43134599/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon43134599](https://forum.openwrt.org/u/anon43134599)\
**Post date:** [August 11, 2017, 8:24pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/7 "2017-08-11T20:24:06Z")

</div>

Would you share your blacklist with us? Sounds useful. Specially since apparently adblock conclicts with DNSCrypt or at least thats what the guy who made the AdBlock openwrt plugin said.  
EDIT: I read that completely wrong. I need to sleep, he said

> 1. It defaults to DNS-hijacking, so if you have local devices on your network with hardcoded DNS servers, simple-adblock will force them to use your router DNS server (both IPv4 and IPv6) instead.

Anyways, I think he didnt express himself correctly. He meant Authoritative DNS. (I think).

---

<div class="post-metadata">

**Author:** ![mariano.silva](https://forum.openwrt.org/user_avatar/forum.openwrt.org/mariano.silva/32/4797_2.png) [@mariano.silva](https://forum.openwrt.org/u/mariano.silva)\
**Post date:** [August 11, 2017, 8:42pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/8 "2017-08-11T20:42:46Z")

</div>

The blacklist I use is the one referenced in the dnscrypt-proxy github main  
page caled mysites.txt or something like that

---

<div class="post-metadata">

**Author:** ![Leverbush](https://forum.openwrt.org/letter_avatar/leverbush/32/5_5575768a8748004e209b776fc1b2916d.png) [@Leverbush](https://forum.openwrt.org/u/Leverbush)\
**Post date:** [August 15, 2017, 6:49pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/9 "2017-08-15T18:49:55Z")

</div>

Hey, I'm interested in implementing the dnscrypt plugins.  
I'm compiling my own image including plugins support.  
Where can I find documentation about how to enable and configure them? Which files do I need to configure?  
Thanks.

---

<div class="post-metadata">

**Author:** ![mariano.silva](https://forum.openwrt.org/user_avatar/forum.openwrt.org/mariano.silva/32/4797_2.png) [@mariano.silva](https://forum.openwrt.org/u/mariano.silva)\
**Post date:** [August 25, 2017, 1:02am UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/10 "2017-08-25T01:02:32Z")

</div>

Dear guru of Dnscrypt-proxy @InkblotAdmirer ...

I have version 1.9.5.7 with plugins enabled ( from @davidc502 's latest release ) . I've found that , even tough the blacklisting is configured, along with the logging, all of the computers on my network are able to access the blacklisted addresses...

Even weirder , the entry is logged into the blacklist-log as if it was blocked, but it is not... is there a chance I have any kind of "leak" somewhere? I've ran a dnsleak test and it is showing i'm not, just one dns showing up, and is the one I've chosen...

Thanks in advance for any suggestions!

---

<div class="post-metadata">

**Author:** ![InkblotAdmirer](https://forum.openwrt.org/letter_avatar/inkblotadmirer/32/5_5575768a8748004e209b776fc1b2916d.png) [@InkblotAdmirer](https://forum.openwrt.org/u/InkblotAdmirer)\
**Post date:** [August 25, 2017, 5:30am UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/11 "2017-08-25T05:30:55Z")

</div>

I have found the blacklist file must be present before dnscrypt-proxy starts, otherwise it isn't used. This also means it can't be updated dynamically without restarting dnscrypt-proxy.

So in my use case, when I add an IP to the block file I stop the dnscrypt-proxy service, then restart it. This seems to work for me.

Also, just to verify, execute "dnscrypt-proxy --version" and verify "Support for ldns-based plugins: present"

Other than that... make sure your config is pointing to the right file!

@Leverbush -- make menuconfig, Network, IP Addresses and Names, dnscrypt-proxy Configuration --\> Enable plugin support

---

<div class="post-metadata">

**Author:** ![mariano.silva](https://forum.openwrt.org/user_avatar/forum.openwrt.org/mariano.silva/32/4797_2.png) [@mariano.silva](https://forum.openwrt.org/u/mariano.silva)\
**Post date:** [August 25, 2017, 11:11am UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/12 "2017-08-25T11:11:07Z")

</div>

> [@InkblotAdmirer](#):
>
> dnscrypt-proxy --version

I fixed it! I found that I had a manual dns resolver in my dnsmasq file to 8.8.8.8, so no dnscrypt's fault. I've did that a while back because dnscrypt's resolver that i was using was not resolving. I'll add a 2nd resolver to avoid this in the future! Thanks for the tips!

---

<div class="post-metadata">

**Author:** ![stangri](https://forum.openwrt.org/user_avatar/forum.openwrt.org/stangri/32/58_2.png) [@stangri](https://forum.openwrt.org/u/stangri)\
**Post date:** [August 25, 2017, 9:42pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/13 "2017-08-25T21:42:55Z")

</div>

> [@anon43134599](#):
>
> Specially since apparently adblock conclicts with DNSCrypt or at least thats what the guy who made the AdBlock openwrt plugin said.

Well, wherever or not adblocking conflicts with dnscrypt-proxy depends on how your dnscrypt-proxy and dnsmasq are configured. If you configure dnsmasq to use a local instance of dnscrypt-proxy as a DNS server, either @dibdot's adblock or my simple-adblock should work just fine as is.

Also, considering how flexible the former is, I'm sure it's possible for @dibdot to implement native support for dnscrypt-proxy block plugin in his adblock.

---

<div class="post-metadata">

**Author:** ![Leverbush](https://forum.openwrt.org/letter_avatar/leverbush/32/5_5575768a8748004e209b776fc1b2916d.png) [@Leverbush](https://forum.openwrt.org/u/Leverbush)\
**Post date:** [August 26, 2017, 9:14am UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/14 "2017-08-26T09:14:49Z")

</div>

Can we use the img builder to add dnscrypt with plugins support or do we have to compile from source? If yes, what's the name of the package so I can add it?  
And today I noticed there's a package to add Luci GUI support for dnscrypt. That's amazing! Did you guys add that one recently? I swear I haven't seen it before.

---

<div class="post-metadata">

**Author:** ![stangri](https://forum.openwrt.org/user_avatar/forum.openwrt.org/stangri/32/58_2.png) [@stangri](https://forum.openwrt.org/u/stangri)\
**Post date:** [August 26, 2017, 10:10am UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/15 "2017-08-26T10:10:21Z")

</div>

> [@Leverbush](#):
>
> And today I noticed there's a package to add Luci GUI support for dnscrypt. That's amazing! Did you guys add that one recently? I swear I haven't seen it before.

@dibdot very recently wrote it -- you can check out and "thumbs up" his thread on that package.

---

<div class="post-metadata">

**Author:** ![anon43134599](https://forum.openwrt.org/letter_avatar/anon43134599/32/5_5575768a8748004e209b776fc1b2916d.png) [@anon43134599](https://forum.openwrt.org/u/anon43134599)\
**Post date:** [August 30, 2017, 12:38am UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/16 "2017-08-30T00:38:35Z")

</div>

Yes thanks! Doesn't happen on a different setup compiled with dnscrypt+ plugins support so it was probably dnsmasq trying to push the dns.  
Disabling the whole dns part of the dhcp file and just keeping dhcp works fine.  
Thank you,

---

<div class="post-metadata">

**Author:** ![dibdot](https://forum.openwrt.org/user_avatar/forum.openwrt.org/dibdot/32/3100_2.png) [@dibdot](https://forum.openwrt.org/u/dibdot)\
**Post date:** [September 8, 2017, 2:41pm UTC](https://forum.openwrt.org/t/dnscrypt-proxy-compiled-with-plugins-support/5675/17 "2017-09-08T14:41:35Z")

</div>

> [@stangri](#):
>
> Also, considering how flexible the former is, I'm sure it's possible for @dibdot to implement native support for dnscrypt-proxy block plugin in his adblock.

Hi Stan,

it's already implemented in adblock 3, but I'm still struggling with turris omnia integration, so not ready for prime time yet.

br  
dirk
