dnscrypt-proxy-android/README.md

60 lines
2.7 KiB
Markdown
Raw Normal View History

2019-10-01 20:57:13 +00:00
# DNSCrypt Proxy 2 for Android | privacy oriented
2018-02-27 14:42:14 +00:00
2018-02-27 14:59:15 +00:00
A flexible DNS proxy, with support for modern encrypted DNS protocols such as [DNSCrypt v2](https://github.com/DNSCrypt/dnscrypt-protocol/blob/master/DNSCRYPT-V2-PROTOCOL.txt) and [DNS-over-HTTP/2](https://tools.ietf.org/html/draft-ietf-doh-dns-over-https-03).
2018-02-27 14:42:14 +00:00
2018-04-17 09:12:54 +00:00
## Features
2018-03-18 04:39:03 +00:00
- arm, arm64, x86 and x86_64 are supported.
2018-04-17 09:12:54 +00:00
- ipv4 and ipv6 are supported.
2018-02-27 14:59:15 +00:00
- All binary files are downloaded from [https://github.com/jedisct1/dnscrypt-proxy/releases](https://github.com/jedisct1/dnscrypt-proxy/releases)
2018-02-27 14:42:14 +00:00
2019-10-01 20:57:13 +00:00
## Differences between default DNSCrypt Proxy project
### dnscrypt-proxy.toml
- ⛔️ Disable DoH
- ⛔️ Disable IPv6
- ⛔️ `refused` response for blocked queries
- ✅ Require DNSSEC
- ✅ Ephemeral keys (create a new, unique key for every single DNS query)
- Set DNS query max. response time from `2500` to `1500`, in ms.
- Use [UncensoredDNS](https://blog.uncensoreddns.org/dns-servers/) as fallback resolver *(address used to initializing connection to the other resolvers)*
2019-10-02 09:20:01 +00:00
- Use `dnscrypt.nl` (NL), `dnscrypt.uk` (UK), `dnscrypt.eu` (DK/NL), `dnswarden` (DE), `charis` (DE) and `suami` (FR)
2019-10-01 20:57:13 +00:00
2018-04-17 09:12:54 +00:00
## Installation
2019-10-01 20:57:13 +00:00
1. Download latest `.zip` file from here or from [MY TELEGRAM CHANNEL](https://t.me/dnscrypt_proxy) and then flash it in Magisk Manager App or in Recovery.
2019-10-01 10:03:11 +00:00
2. Reboot.
2019-10-01 20:57:13 +00:00
3. Open AFWall+ and set custom script:
2019-10-01 10:03:11 +00:00
**ENTER SCRIPT:**
```
2019-10-01 20:57:13 +00:00
iptables -t nat -A OUTPUT -p tcp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53
iptables -t nat -A OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53
2019-10-01 10:03:11 +00:00
```
**SHUTDOWN SCRIPT:**
```
2019-10-01 20:57:13 +00:00
iptables -t nat -D OUTPUT -p tcp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53
iptables -t nat -D OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53
2019-10-01 10:03:11 +00:00
```
2019-10-01 20:57:13 +00:00
### Configuration (post-installing)
2019-10-01 10:39:00 +00:00
2019-10-01 20:57:13 +00:00
- You can edit `dnscrypt-proxy.toml` as you wish located on `/sdcard/dnscrypt-proxy/dnscrypt-proxy.toml` [or /data/media/0/dnscrypt-proxy/dnscrypt-proxy.toml]
2019-04-24 03:04:58 +00:00
- For more detailed configuration please refer to [official documentation](https://github.com/jedisct1/dnscrypt-proxy/wiki/Configuration)
2019-10-01 10:39:00 +00:00
- FOR MORE SUPPORT ON A GOOD PRIVACY-ORIENTED SETUP, JOIN [MY TELEGRAM CHAT](https://t.me/qd_invitation)
2018-02-27 14:59:15 +00:00
## Changelog
2019-10-01 10:03:11 +00:00
2019-10-01 20:57:13 +00:00
#### v2.0.27
2019-10-01 10:03:11 +00:00
2019-10-01 20:57:13 +00:00
* updated binary & configuration files to 2.0.27 | jedisct1
* uploaded privacy config to 2.0.27 | quindecim
2018-04-17 09:12:54 +00:00
2019-04-30 06:40:41 +00:00
[Full changelog](changelog.md)
2018-02-27 14:42:14 +00:00
2018-02-27 14:59:15 +00:00
## Credit
2018-04-17 09:12:54 +00:00
- DNSCrypt-Proxy2 upstream | [jedisct1](https://github.com/jedisct1/dnscrypt-proxy)
2019-09-17 15:23:38 +00:00
- [bluemeda](https://github.com/bluemeda) for the original module
2019-05-01 04:38:17 +00:00
- [All contributor](https://github.com/Magisk-Modules-Repo/dnscrypt-proxy/graphs/contributors)