Hello everyone.
Could you please tell me how to set up dnscrypt-proxy2 on OpenWRT?
I’ve set up dnscrypt-proxy2 on my PC, but I’m not entirely sure how to set it up on OpenWRT – there seem to be some differences.
I also cannot see luci-app-dnscrypt-proxy2 (the GUI for dnscrypt-proxy2) in the repository.I found it to be a very well-designed and user-friendly programme for graphic design. https://github.com/peter-tank/luci-app-dnscrypt-proxy2
How did you configure and install dnscrypt-proxy2?
What did I do, and why won’t dnscrypt-proxy2 start for me?))
I installed the packages using the command:
# opkg update
# opkg install nano dnscrypt-proxy2
Next, I configure the configuration file. Here are the main settings I’ve applied to test the programme’s functionality.
# nano /etc/dnscrypt-proxy/dnscrypt-proxy.toml
listen_addresses = ['127.0.0.1:5053']
server_names = ['scaleway-fr', 'cs-belgium', 'cs-finland', 'cs-hungary', 'cs-md', 'nwps.fi']
ipv6_servers = false
bootstrap_resolvers = [
"9.9.9.9:53", # Quad9
]
netprobe_address = '9.9.9.9:53'
routes = [
{ server_name='scaleway-fr', via=['anon-scaleway', 'anon-cs-austria'] },
{ server_name='cs-belgium', via=['anon-cs-barcelona', 'anon-cs-berlin'] },
{ server_name='cs-finland', via=['anon-scaleway', 'anon-cs-ch'] },
{ server_name='cs-hungary', via=['anon-ibksturm', 'anon-scaleway-ams'] },
{ server_name='cs-md', via=['anon-cs-fr', 'anon-cs-hungary'] },
{ server_name='nwps.fi', via=['anon-cs-md', 'anon-cs-nl'] },
]
Next, I set up call DNS forwarding (using the command line)
# uci add_list dhcp.@dnsmasq[0].server='127.0.0.1#5053'
# uci commit dhcp
# /etc/init.d/dnsmasq restar
Start and enable the service
# /etc/init.d/dnscrypt-proxy2 restart
# /etc/init.d/dnsmasq restart
Next, I check the settings:
# dnscrypt-proxy -config /etc/dnscrypt-proxy/dnscrypt-proxy.toml -check
# dnscrypt-proxy -config /etc/dnscrypt-proxy/dnscrypt-proxy.toml -resolve gnu.org
# netstat -lnup | grep 5053 I can see it on the dnscrypt-proxy port
# service dnscrypt-proxy2 status #service running
# logread -e dnscrypt # I can also see the dnscrypt-proxy program running
# cat /etc/resolv.conf
search lan
nameserver 127.0.0.1
But when I enter the command to check:
# dig @127.0.0.1 ``gnu.org
I see:
SERVER: 127.0.0.1#53(127.0.0.1)
instead of
SERVER: 127.0.0.1#5053(127.0.0.1)
Where might further configuration be required? I’d appreciate any advice.
