DNS Linux Server stuff
DNS Linux Server stuff
Frank Denis released #dnscrypt-proxy version 2.1.12. https://github.com/DNSCrypt/dnscrypt-proxy
Frank Denis released #dnscrypt-proxy version 2.1.11. https://github.com/DNSCrypt/dnscrypt-proxy
Frank Denis released #dnscrypt-proxy version 2.1.10. https://github.com/DNSCrypt/dnscrypt-proxy
Frank Denis released #dnscrypt-proxy version 2.1.9. https://github.com/DNSCrypt/dnscrypt-proxy
#InviZible Pro **BETA**
Preserves privacy, prevents tracking, and provides access to restricted and hidden online content.
InviZible Pro combines the strengths of #Tor, #DNSCrypt, and Purple #I2P to provide a comprehensive solution for online #privacy, security, and anonymity.
Tor is responsible for privacy and #anonymity. It acts like an
- unlimited #free #VPN #proxy -
https://apt.izzysoft.de/fdroid/index/apk/pan.alexander.tordnscrypt
Frank Denis released #dnscrypt-proxy version 2.1.8. https://github.com/DNSCrypt/dnscrypt-proxy
Heute Update auf #Pihole 6 durchgeführt. Lief bis auf ein paar Kleinigkeiten recht problemlos:
- Auf einer Instanz wurde das Passwort zurückgesetzt
- Eine Instanz hat beim Update den Upstream-DNS "vergessen" (#dnscrypt-proxy)
- Nach jedem Neustart die Meldung "Failed to adjust time during NTP sync...". Liegt aber daran, dass beide Instanzen auf einem unprivilegierten #LXC/#Proxmox laufen. Container nun auf privilegiert umgestellt, Problem weg
Mal sehen, was die kommenden Tage noch so auffällt.
This Weekend's Project:
Dual Raspberry Pi 3s running DNSCrypt-proxy and DNSmasq serving DNS to my home network.
Normal DNS is unencrypted and I don't really trust my ISP's DNS. So I put some old Pi 3s back in service as DNSCrypt servers.
They pull DNS Data from Quad9 (with malware blocking) in encrypted form, and every device on my network gets their DNS served from these two devices.
What a nice project.
(Also I chose not to do Pi-Hole, since blocking ads are done on a device-level for me. Blanket blocking many servers seems to cause unpredictable behaviour.)
Frank Denis released #dnscrypt-proxy version 2.1.7. https://github.com/DNSCrypt/dnscrypt-proxy
Frank Denis released #dnscrypt-proxy version 2.1.6. https://github.com/DNSCrypt/dnscrypt-proxy
If you want to test #DNSCrypt #DoH #DoT the @freifunkMUC servers are happy to take your traffic :).
Ofc researchers or experiments are also welcome.
doh.ffmuc.net - IPv4: 5.1.66.255 / 185.150.99.255 IPv6: 2001:678:e68:f000:: / 2001:678:ed0:f000::
@gerowen check out doing recursive dns with pihole and also check out pi alert - sending all syslog verbose to security onion for central logging could be an option or syslog-ng? #514 I would try a yabs (yet another benchmark script) and this will give you a good report. I will try to determine who stops by the r proxies by doing lookups - I probably need to work on my dns setup also #dnscrypt
#DNS is a #privacy minefield. Here's my best shot at charting a safe course through.
New #blog post up now re: combining #AdGuardHome with rotating stable of #DNSCrypt resolvers, with #Tailscale #E2EE over #Mullvad exit nodes, and #Caddy obtaining certificates for #DOH — https://sij.law/dns/
#infosec #selfhosting #debian #linux #hetzner #server #pihole #unbound #macos #ios #DNSOverride #DeepDive #LittleSnitch #Cloudflare #Quad9 #9999
@aikensource @cloudflare I use #dnscrypt and dnscrypt-proxy and enable relays, it can take a little while to start when it checks latency but once it's running i've never had any issues. I also front with #unbound to forward specific domains to local nameservers
https://hndrk.blog/tutorial-pi-hole-and-dnscrypt/
i wrote about some time ago how to set up dnscrypt-proxy to use its anonymous dns ability
So there is this one domain that has like 42 TXT records, and each record is large, so many that it is breaking the #DNSCrypt tool.
Setting up DNSCrypt was easier than anticipated on my Debian machine without systemd-resolved. I really like the binary distribution, which is available as a self-contained directory with the binary and sample configuration. You can run the whole thing from that portable directory and move it around or specify locations on the command line if you wanna spread it.
Also, the gradual and modular approach to the generic Linux installation was a delight to follow, always being reminded to take small and verifiable steps along the way.
For anyone interested, this is it: https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Installation-linux