Skip to content

Commit

Permalink
Update dnscrypt references
Browse files Browse the repository at this point in the history
  • Loading branch information
drduh committed Sep 28, 2018
1 parent 24594fb commit e34c924
Showing 1 changed file with 4 additions and 2 deletions.
6 changes: 4 additions & 2 deletions README.md
Original file line number Diff line number Diff line change
Expand Up @@ -405,7 +405,7 @@ Query locally for an *A record* to confirm dnsmasq is working:

## DNSCrypt

[DNSCrypt](https://dnscrypt.org/) software can be used as a server and client to encrypt DNS traffic.
[DNSCrypt](https://dnscrypt.info/) software can be used as a server and client to encrypt DNS traffic, as well as filter and shape queries.

> If you are running your own private or public recursive DNS server, adding support for the DNSCrypt protocol requires installing [DNSCrypt-Wrapper](https://github.com/Cofyc/dnscrypt-wrapper), the server-side DNSCrypt proxy.
Expand Down Expand Up @@ -468,14 +468,16 @@ Update Networking firewall rules to allow the new dnscrypt listening port (in th

**Optional** Restrict the IP address or range of addresses which can access your VM instance to prevent abuse and [DNS attacks](http://resources.infosecinstitute.com/attacks-over-dns/).

To connect from a client, edit `dnscrypt-proxy.toml` to include the static server stamp, like:
To connect from a client, edit `dnscrypt-proxy.toml` to include the static server stamp:

listen_addresses = ['127.0.0.1:40']
server_names = ['abc']
[static]
[static.'abc']
stamp = 'sdns://AQAAAAAAAAAAEj...ZA'

Reference [drduh/config/dnscrypt-proxy.toml](https://github.com/drduh/config/blob/master/dnscrypt-proxy.toml) and [jedisct1/dnscrypt-proxy/example-dnscrypt-proxy.toml](https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-proxy/example-dnscrypt-proxy.toml) for more options.

Then start the client manually:

$ sudo ./dnscrypt-proxy
Expand Down

0 comments on commit e34c924

Please sign in to comment.