diff --git a/README.md b/README.md
index 5c23fac..bcf3596 100755
--- a/README.md
+++ b/README.md
@@ -34,6 +34,8 @@ Just flash and forget.
 - For more detailed configuration please refer to [official documentation](https://github.com/jedisct1/dnscrypt-proxy/wiki/Configuration)
 
 ## Changelog
+### v2.8.7
+ - Update binaries to 2.0.25
 ### v2.8.5
  - Fix #40
 ### v2.8.4
diff --git a/binary/dnscrypt-proxy-arm b/binary/dnscrypt-proxy-arm
index bf301d2..bbca1f9 100755
Binary files a/binary/dnscrypt-proxy-arm and b/binary/dnscrypt-proxy-arm differ
diff --git a/binary/dnscrypt-proxy-arm64 b/binary/dnscrypt-proxy-arm64
index e5c6b67..e6fd28a 100755
Binary files a/binary/dnscrypt-proxy-arm64 and b/binary/dnscrypt-proxy-arm64 differ
diff --git a/binary/dnscrypt-proxy-x86 b/binary/dnscrypt-proxy-x86
index afa6dc3..7ce15dd 100755
Binary files a/binary/dnscrypt-proxy-x86 and b/binary/dnscrypt-proxy-x86 differ
diff --git a/binary/dnscrypt-proxy-x86_64 b/binary/dnscrypt-proxy-x86_64
index 72ce771..06df028 100755
Binary files a/binary/dnscrypt-proxy-x86_64 and b/binary/dnscrypt-proxy-x86_64 differ
diff --git a/changelog.md b/changelog.md
index 88b108e..4be92f1 100644
--- a/changelog.md
+++ b/changelog.md
@@ -1,5 +1,6 @@
 # Changelog
-## Changelog
+### v2.8.7
+- Update binaries to 2.0.25
 ### v2.8.5
 - Fix #40
 ### v2.8.4
diff --git a/config/example-cloaking-rules.txt b/config/example-cloaking-rules.txt
index e672afb..249410d 100644
--- a/config/example-cloaking-rules.txt
+++ b/config/example-cloaking-rules.txt
@@ -13,6 +13,8 @@ www.google.*             forcesafesearch.google.com
 
 www.bing.com             strict.bing.com
 
+yandex.ru                familysearch.yandex.ru
+
 www.youtube.com          restrictmoderate.youtube.com
 m.youtube.com            restrictmoderate.youtube.com
 youtubei.googleapis.com  restrictmoderate.youtube.com
diff --git a/config/example-dnscrypt-proxy.toml b/config/example-dnscrypt-proxy.toml
index 02b613f..3e6554d 100644
--- a/config/example-dnscrypt-proxy.toml
+++ b/config/example-dnscrypt-proxy.toml
@@ -118,10 +118,15 @@ keepalive = 30
 refused_code_in_responses = false
 
 
-## Load-balancing strategy: 'p2' (default), 'ph', 'fastest' or 'random'
+## Load-balancing strategy: 'p2' (default), 'ph', 'first' or 'random'
 
 # lb_strategy = 'p2'
 
+## Set to `true` to constantly try to estimate the latency of all the resolvers
+## and adjust the load-balancing parameters accordingly, or to `false` to disable.
+
+# lb_estimator = true
+
 
 ## Log level (0-6, default: 2 - 0 is very verbose, 6 only contains fatal errors)
 
@@ -198,10 +203,22 @@ ignore_system_dns = false
 ## initializing the proxy.
 ## Useful if the proxy is automatically started at boot, and network
 ## connectivity is not guaranteed to be immediately available.
-## Use 0 to disable.
+## Use 0 to not test for connectivity at all,
+## and -1 to wait as much as possible.
 
 netprobe_timeout = 60
 
+## Address and port to try initializing a connection to, just to check
+## if the network is up. It can be any address and any port, even if
+## there is nothing answering these on the other side. Just don't use
+## a local address, as the goal is to check for Internet connectivity.
+## On Windows, a datagram with a single, nul byte will be sent, only
+## when the system starts.
+## On other operating systems, the connection will be initialized
+## but nothing will be sent at all.
+
+netprobe_address = "9.9.9.9:53"
+
 
 ## Offline mode - Do not use any remote encrypted servers.
 ## The proxy will remain fully functional to respond to queries that
diff --git a/install.sh b/install.sh
index 3381377..0c41110 100755
--- a/install.sh
+++ b/install.sh
@@ -127,8 +127,8 @@ print_modname() {
   ui_print "*       DNSCrypt-Proxy2       *"
   ui_print "*        Magisk Module        *"
   ui_print "*******************************"
-  ui_print "*        v2.8.6-alpha1        *"
-  ui_print "*           bluemeda          *"
+  ui_print "*           v2.8.7            *"
+  ui_print "*          bluemeda           *"
   ui_print "*******************************"
   ui_print " "
 }
@@ -193,4 +193,4 @@ set_permissions() {
   # set_perm  $MODPATH/system/lib/libart.so       0     0       0644
 }
 
-# You can add more functions to assist your custom script code
\ No newline at end of file
+# You can add more functions to assist your custom script code
diff --git a/module.prop b/module.prop
index 4dead2c..2a5a673 100755
--- a/module.prop
+++ b/module.prop
@@ -1,6 +1,6 @@
 id=dnscrypt-proxy
 name=DNSCrypt-Proxy 2
-version=v2.8.6-alpha1
-versionCode=23
+version=v2.8.7
+versionCode=24
 author=bluemeda
-description=A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2. Using DNSCrypt-proxy 2.0.22
+description=A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2. Using DNSCrypt-proxy 2.0.25