mastodon.world is one of the many independent Mastodon servers you can use to participate in the fediverse.
Generic Mastodon server for anyone to use.

Server stats:

8.3K
active users

#dnscrypt

0 posts0 participants0 posts today

Heute Update auf #Pihole 6 durchgeführt. Lief bis auf ein paar Kleinigkeiten recht problemlos:
- Auf einer Instanz wurde das Passwort zurückgesetzt
- Eine Instanz hat beim Update den Upstream-DNS "vergessen" (#dnscrypt-proxy)
- Nach jedem Neustart die Meldung "Failed to adjust time during NTP sync...". Liegt aber daran, dass beide Instanzen auf einem unprivilegierten #LXC/#Proxmox laufen. Container nun auf privilegiert umgestellt, Problem weg

Mal sehen, was die kommenden Tage noch so auffällt.

This Weekend's Project:

Dual Raspberry Pi 3s running DNSCrypt-proxy and DNSmasq serving DNS to my home network.

Normal DNS is unencrypted and I don't really trust my ISP's DNS. So I put some old Pi 3s back in service as DNSCrypt servers.

They pull DNS Data from Quad9 (with malware blocking) in encrypted form, and every device on my network gets their DNS served from these two devices.

What a nice project.

(Also I chose not to do Pi-Hole, since blocking ads are done on a device-level for me. Blanket blocking many servers seems to cause unpredictable behaviour.)

Replied in thread

@gerowen check out doing recursive dns with pihole and also check out pi alert - sending all syslog verbose to security onion for central logging could be an option or syslog-ng? #514 I would try a yabs (yet another benchmark script) and this will give you a good report. I will try to determine who stops by the r proxies by doing lookups - I probably need to work on my dns setup also #dnscrypt

Setting up DNSCrypt was easier than anticipated on my Debian machine without systemd-resolved. I really like the binary distribution, which is available as a self-contained directory with the binary and sample configuration. You can run the whole thing from that portable directory and move it around or specify locations on the command line if you wanna spread it.

Also, the gradual and modular approach to the generic Linux installation was a delight to follow, always being reminded to take small and verifiable steps along the way.

For anyone interested, this is it: github.com/DNSCrypt/dnscrypt-p

GitHubInstallation linuxdnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols. - DNSCrypt/dnscrypt-proxy