Update 'changelog.md'
This commit is contained in:
quindecim
parent
6812a97a54
commit
aab310a596
144
changelog.md
144
changelog.md
|
|
@ -1,33 +1,37 @@
|
|||
# Changelog
|
||||
|
||||
|
||||
## 2.0.43
|
||||
|
||||
##### Updated binary files to 2.0.43 | jedisct1
|
||||
-
|
||||
|
||||
##### Updated config files to 2.0.43 | quindecim
|
||||
-
|
||||
|
||||
|
||||
## 2.0.42-3
|
||||
|
||||
#### Updated binary files to 2.0.42 | jedisct1
|
||||
##### Updated binary files to 2.0.42 | jedisct1
|
||||
-
|
||||
|
||||
|
||||
#### Updated config files to 2.0.42-3 | quindecim
|
||||
##### Updated config files to 2.0.42-3 | quindecim
|
||||
- ⛔️ Disabled properly `IPv6` queries in `post-fs-data.sh` file (no more DNS leaks this time)
|
||||
|
||||
|
||||
## 2.0.42-2
|
||||
|
||||
#### Updated binary files to 2.0.42 | jedisct1
|
||||
##### Updated binary files to 2.0.42 | jedisct1
|
||||
-
|
||||
|
||||
|
||||
#### Updated config files to 2.0.42-2 | quindecim
|
||||
##### Updated config files to 2.0.42-2 | quindecim
|
||||
- ⛔️ Disabled every `IPv6` queries in `post-fs-data.sh` file: `INPUT`, `FORWARD` and `OUTPUT` (to enforce leaks prevention in some cases).
|
||||
|
||||
|
||||
## 2.0.42-1
|
||||
|
||||
#### Updated binary files to 2.0.42 | jedisct1
|
||||
##### Updated binary files to 2.0.42 | jedisct1
|
||||
-
|
||||
|
||||
|
||||
#### Updated config files to 2.0.42-1 | quindecim
|
||||
##### Updated config files to 2.0.42-1 | quindecim
|
||||
- ✅ Added `meganerd` resolver (Non-logging, non-filtering, supports DNSSEC by MegaNerd.nl).
|
||||
- ✅ Enabled `whitelist.txt` file (as placeholder, once the blacklist goes public).
|
||||
- ✅ Optimized relays based on geolocation.
|
||||
|
|
@ -41,7 +45,7 @@
|
|||
|
||||
## 2.0.42
|
||||
|
||||
#### Updated binary files to 2.0.42 | jedisct1
|
||||
##### Updated binary files to 2.0.42 | jedisct1
|
||||
- The current versions of the `dnsdist` load balancer (presumably used
|
||||
by quad9, cleanbrowsing, qualityology, freetsa.org, ffmuc.net,
|
||||
opennic-bongobow, sth-dnscrypt-se, ams-dnscrypt-nl and more)
|
||||
|
|
@ -57,15 +61,13 @@ using them without a relay.
|
|||
more retries if necessary.
|
||||
- Continuous integration has been moved to GitHub Actions.
|
||||
|
||||
|
||||
#### Updated config files to 2.0.42 | quindecim
|
||||
##### Updated config files to 2.0.42 | quindecim
|
||||
- ✅ Enabled `skip_incompatible` option to ignore servers incompatible with anonymization
|
||||
|
||||
|
||||
|
||||
## 2.0.41
|
||||
|
||||
#### Updated binary files to 2.0.41 | jedisct1
|
||||
##### Updated binary files to 2.0.41 | jedisct1
|
||||
- Precompiled binaries for armv5, armv6 and armv7 are available.
|
||||
The default arm builds were not compatible with older CPUs when
|
||||
compiled with Go 1.14. mips64 binaries are explicitly compiled with
|
||||
|
|
@ -76,14 +78,13 @@ resolvers; runtime detection of support for fragments should now do
|
|||
the job.
|
||||
- Runtime detection of support for fragments was actually enabled.
|
||||
|
||||
|
||||
#### Updated config files to 2.0.41 | quindecim
|
||||
##### Updated config files to 2.0.41 | quindecim
|
||||
-
|
||||
|
||||
|
||||
## 2.0.40
|
||||
|
||||
#### Updated binary files to 2.0.40 | jedisct1
|
||||
##### Updated binary files to 2.0.40 | jedisct1
|
||||
- Servers blocking fragmented queries are now automatically detected.
|
||||
- The server name is now only present in query logs when an actual upstream servers was required to resolve a query.
|
||||
- TLS client authentication has been added for DoH.
|
||||
|
|
@ -91,26 +92,25 @@ the job.
|
|||
- DoH RTT computation is now more accurate, especially when CDNs are in the middle.
|
||||
- The forwarding plugin is now more reliable, and handles retries over TCP.
|
||||
|
||||
|
||||
#### Updated config files to 2.0.40 | quindecim
|
||||
##### Updated config files to 2.0.40 | quindecim
|
||||
-
|
||||
|
||||
|
||||
## 2.0.39-2
|
||||
|
||||
#### Updated binary files to 2.0.39 | jedisct1
|
||||
##### Updated binary files to 2.0.39 | jedisct1
|
||||
-
|
||||
|
||||
#### Updated config files to 2.0.39-2 | quindecim
|
||||
##### Updated config files to 2.0.39-2 | quindecim
|
||||
- ⛔️ Removed `blacklist.txt` file *(too many false positives, will be added back in the future, when it reaches a more stable level)*.
|
||||
|
||||
|
||||
## 2.0.39-1
|
||||
|
||||
#### Updated binary files to 2.0.39 | jedisct1
|
||||
##### Updated binary files to 2.0.39 | jedisct1
|
||||
-
|
||||
|
||||
#### Updated config files to 2.0.39-1 | quindecim
|
||||
##### Updated config files to 2.0.39-1 | quindecim
|
||||
- ✅ Implemented automatic redirection. No more third-party apps are required to start it.
|
||||
- ✅ Introduced substrings and wildcards into `blacklist.txt` file and updated to `2020-03-19`.
|
||||
- ⛔️ Removed `ibksturm` resolver and related relays.
|
||||
|
|
@ -119,11 +119,11 @@ the job.
|
|||
|
||||
## 2.0.39
|
||||
|
||||
#### Updated binary files to 2.0.39 | jedisct1
|
||||
##### Updated binary files to 2.0.39 | jedisct1
|
||||
- The Firefox Local DoH service didn't properly work in version 2.0.38;
|
||||
this has been fixed. Thanks to Simon Brand for the report!
|
||||
|
||||
#### Updated config files to 2.0.39 | quindecim
|
||||
##### Updated config files to 2.0.39 | quindecim
|
||||
- ✅ Added `dnswarden-dc3` (DnsCrypt protocol . Non-logging, supports DNSSEC. By https://dnswarden.com).
|
||||
- ✅ Updated `Magisk Module Installer template`. It require `Magisk 19+` from now on.
|
||||
- ✅ Fixed an issue where `dnscrypt-proxy` doesn't detect the config file.
|
||||
|
|
@ -132,7 +132,7 @@ this has been fixed. Thanks to Simon Brand for the report!
|
|||
|
||||
## 2.0.38
|
||||
|
||||
#### Updated binary files to 2.0.38 | jedisct1
|
||||
##### Updated binary files to 2.0.38 | jedisct1
|
||||
- Entries from lists (forwarding, blacklists, whitelists) now support
|
||||
inline comments.
|
||||
- Reliability improvement: queries over UDP are retried after a timeout
|
||||
|
|
@ -149,7 +149,7 @@ stored separately from the application.
|
|||
built using `Go 1.13.7` that fixes a TLS certificate parsing issue present in
|
||||
previous versions of the compiler.
|
||||
|
||||
#### Updated config files to 2.0.38 | quindecim
|
||||
##### Updated config files to 2.0.38 | quindecim
|
||||
- ✅ Added `dnswarden-dc3` (DnsCrypt protocol . Non-logging, supports DNSSEC. By https://dnswarden.com).
|
||||
- ✅ Updated `Magisk Module Installer template`. It require `Magisk 19+` from now on.
|
||||
- ✅ Fixed an issue where `dnscrypt-proxy` doesn't detect the config file.
|
||||
|
|
@ -158,7 +158,7 @@ previous versions of the compiler.
|
|||
|
||||
## 2.0.36
|
||||
|
||||
#### Updated binary files to 2.0.36 | jedisct1
|
||||
##### Updated binary files to 2.0.36 | jedisct1
|
||||
- New option: `block_undelegated`. When enabled, `dnscrypt-proxy` will
|
||||
directly respond to queries for locally-served zones (https://sk.tl/2QqB971U)
|
||||
and nonexistent zones that should have been kept local, but are frequently
|
||||
|
|
@ -169,7 +169,7 @@ set in a question, and the `AD` bit is cleared.
|
|||
security issue affecting non-encrypted/non-authenticated DNS traffic. In
|
||||
`dnscrypt-proxy`, this only affects the forwarding feature.
|
||||
|
||||
#### Updated config files to 2.0.36 | quindecim
|
||||
##### Updated config files to 2.0.36 | quindecim
|
||||
- ✅ Added `dnscrypt.one` resolver (DNSSEC / no logs / uncensored, Germany (Nuremberg), https://dnscrypt.one/)
|
||||
- ✅ Optimized relays based on geolocation
|
||||
- ✅ Updated `blacklist.txt` to `2019-12-22`
|
||||
|
|
@ -177,7 +177,7 @@ security issue affecting non-encrypted/non-authenticated DNS traffic. In
|
|||
|
||||
## 2.0.35
|
||||
|
||||
#### Updated binary files to 2.0.35 | jedisct1
|
||||
##### Updated binary files to 2.0.35 | jedisct1
|
||||
- New option: `block_unqualified` to block `A`/`AAAA` queries with
|
||||
unqualified host names. These will very rarely get an answer from upstream
|
||||
resolvers, but can leak private information to these, as well as to root
|
||||
|
|
@ -187,7 +187,7 @@ along with the pointer. This makes it easier to know what the original
|
|||
query name, so it can be whitelisted, or what the pointer was, so it
|
||||
can be removed from the blacklist.
|
||||
|
||||
#### Updated config files to 2.0.35 | quindecim
|
||||
##### Updated config files to 2.0.35 | quindecim
|
||||
- ✅ Added `scaleway-ams` resolver (DNSSEC/Non-logged/Uncensored in Amsterdam- ARM server donated by Scaleway.com)
|
||||
Maintained by Frank Denis- https://fr.dnscrypt.info)
|
||||
- ✅ Added `ffmuc.net` resolver
|
||||
|
|
@ -200,14 +200,14 @@ https://ffmuc.net/)
|
|||
|
||||
## 2.0.34
|
||||
|
||||
#### Updated binary files to 2.0.34 | jedisct1
|
||||
##### Updated binary files to 2.0.34 | jedisct1
|
||||
- Blacklisted names are now also blocked if they appear in `CNAME`
|
||||
pointers.
|
||||
- `dnscrypt-proxy` can now act as a local DoH *server*. Firefox can
|
||||
be configured to use it, so that ESNI can be enabled without bypassing
|
||||
your DNS proxy.
|
||||
|
||||
#### Updated config files to 2.0.34 | quindecim
|
||||
##### Updated config files to 2.0.34 | quindecim
|
||||
- ✅ Added `ibksturm`- dnscrypt-server (nginx- encrypted-dns- unbound backend), DNSSEC / Non-Logged / Uncensored, OpenNIC and Root DNS-Zone- Hosted in Switzerland by ibksturm, aka Andreas Ziegler)
|
||||
- ✅ Enabled `blacklist.txt` file to prevent `CNAME Cloaking` tracking feature
|
||||
- ✅ Optimized relays based on geolocation
|
||||
|
|
@ -216,7 +216,7 @@ your DNS proxy.
|
|||
|
||||
## 2.0.33
|
||||
|
||||
#### Updated binary files to 2.0.33 | jedisct1
|
||||
##### Updated binary files to 2.0.33 | jedisct1
|
||||
- Fixes an issue that caused some valid queries to return `PARSE_ERROR`.
|
||||
- On certificate errors, the server name is now logged instead of the
|
||||
provider name, which is generally more useful.
|
||||
|
|
@ -241,24 +241,24 @@ work by Alison Winters, thanks!
|
|||
but it includes a `SERVFAIL` error code).
|
||||
- Responses are now always compressed.
|
||||
|
||||
#### Updated config files to 2.0.33 | quindecim
|
||||
##### Updated config files to 2.0.33 | quindecim
|
||||
- ✅ Added `v.dnscrypt.uk-ipv4`- DNSCrypt v2, no logs, uncensored, DNSSEC. Hosted in London UK on Vultr- https://www.dnscrypt.uk
|
||||
- ✅ Optimized relays based on geolocation and set to use other providers different from the main one
|
||||
|
||||
|
||||
## 2.0.31
|
||||
|
||||
#### Updated binary files to 2.0.31 | jedisct1
|
||||
##### Updated binary files to 2.0.31 | jedisct1
|
||||
- This version fixes a startup issue introduced in version 2.0.29, on systems for which the service cannot be automatically installed (such as OpenBSD and FreeBSD). Reported by @5ch17 and Vinícius Zavam, and fixed by Will Elwood, thanks!
|
||||
- This version fixes two regressions introduced in version 2.0.29: DoH server couldn't be reached over IPv6 any more, and the proxy couldn't be interrupted while servers were being benchmarked.
|
||||
|
||||
#### Updated config files to 2.0.31 | quindecim
|
||||
##### Updated config files to 2.0.31 | quindecim
|
||||
- ℹ️ Changed the way to backup an existing .toml file. The old configuration is now backed up with `year-month-day-hour-minute.bak` suffix (thanks to @lindroidux)
|
||||
|
||||
|
||||
## 2.0.29
|
||||
|
||||
#### Updated binary files to 2.0.29 | jedisct1
|
||||
##### Updated binary files to 2.0.29 | jedisct1
|
||||
- Support for Anonymized DNS has been added!
|
||||
- Wait before stopping, fixing an issue with Unbound (thanks to Vladimir Bauer)
|
||||
- DNS stamps are now included in the `-list-all-json` ouptut
|
||||
|
|
@ -271,7 +271,7 @@ but it includes a `SERVFAIL` error code).
|
|||
- Ignore non-TXT records in certificate responses (thanks to Vladimir Bauer)
|
||||
- A lot of internal cleanups, thanks to Markus Linnala
|
||||
|
||||
#### Updated config files to 2.0.29 | quindecim
|
||||
##### Updated config files to 2.0.29 | quindecim
|
||||
- ✅ Enabled `anonymized_dns` feature *(each resolver has 2 relays)*
|
||||
- ✅ Added `scaleway-fr` resolver *(DNSSEC/Non-logging/Uncensored- Maintained by Frank Denis- https://fr.dnscrypt.info)*
|
||||
- ✅ Added `publicarray-au` resolver Australia, *(DNSSEC/OpenNIC/Non-logging/Uncensored- hosted on vultr.com maintained by publicarray- https://dns.seby.io)*
|
||||
|
|
@ -281,7 +281,7 @@ but it includes a `SERVFAIL` error code).
|
|||
|
||||
## 2.0.29-beta.3
|
||||
|
||||
#### Updated binary files to 2.0.29-beta.3 | jedisct1
|
||||
##### Updated binary files to 2.0.29-beta.3 | jedisct1
|
||||
- Support for Anonymized DNSCrypt has been added.
|
||||
- Latency with large responses has actually been reduced.
|
||||
- DNSCrypt certificates can now be retrieved over Tor, proxies, and DNS relays.
|
||||
|
|
@ -290,14 +290,14 @@ but it includes a `SERVFAIL` error code).
|
|||
- Improved logging
|
||||
- Added a workaround for DNS servers using a non-standard provider name.
|
||||
|
||||
#### Updated config files to 2.0.29-beta.3 | quindecim
|
||||
##### Updated config files to 2.0.29-beta.3 | quindecim
|
||||
- ✅ Enabled `anonymized_dns` feature *(each resolver has 2 relays)*
|
||||
- ✅ Added `scaleway-fr` resolver *(DNSSEC/Non-logged/Uncensored- Maintained by Frank Denis- https://fr.dnscrypt.info)*
|
||||
|
||||
|
||||
## 2.0.28
|
||||
|
||||
#### Updated binary files to 2.0.28 | jedisct1
|
||||
##### Updated binary files to 2.0.28 | jedisct1
|
||||
- Invalid server entries are now skipped instead of preventing a source from being used. Thanks to Alison Winters for the contribution!
|
||||
- Truncated responses are immediately retried over TCP instead of waiting for the client to retry. This reduces the latency for large responses.
|
||||
- Responses sent to the local network are assumed to support at least 1252 bytes packets, and use optional information from EDNS up to 4096 bytes. This also reduces latency.
|
||||
|
|
@ -306,106 +306,106 @@ but it includes a `SERVFAIL` error code).
|
|||
|
||||
## 2.0.27
|
||||
|
||||
#### Updated binary files to 2.0.27 | jedisct1
|
||||
##### Updated binary files to 2.0.27 | jedisct1
|
||||
- The X25519 implementation was changed from using the Go standard implementation to using Cloudflare's CIRCL library. Unfortunately, CIRCL appears to be broken on big-endian systems. That change has been reverted.
|
||||
- All the dependencies have been updated.
|
||||
|
||||
#### New maintainer | quindecim
|
||||
|
||||
#### Updated config files to 2.0.27 | quindecim
|
||||
##### New maintainer | quindecim
|
||||
|
||||
|
||||
##### Updated config files to 2.0.27 | quindecim
|
||||
|
||||
|
||||
-----
|
||||
|
||||
|
||||
|
||||
##### v2.8.7 | bluemeda
|
||||
|
||||
###### v2.8.7 | bluemeda
|
||||
- Changed path of configuration file [dnscrypt.toml] from /system/etc/ to /data/media/0/ [or /sdcard]
|
||||
- Updated binary & configuration files to 2.0.25
|
||||
- Removed automatic redirection of dns-request and let dnscrypt-proxy do its job only.
|
||||
|
||||
##### v2.8.5 | bluemeda
|
||||
|
||||
###### v2.8.5 | bluemeda
|
||||
- Fix #40
|
||||
|
||||
##### v2.8.4 | bluemeda
|
||||
|
||||
###### v2.8.4 | bluemeda
|
||||
- Fix failed to copy or backup config file
|
||||
|
||||
##### v2.8.3 | bluemeda
|
||||
|
||||
###### v2.8.3 | bluemeda
|
||||
- Fix permission issue
|
||||
- Add option to replace or backup-restore config file
|
||||
|
||||
##### v2.8.2 | bluemeda
|
||||
|
||||
###### v2.8.2 | bluemeda
|
||||
- Fix "binary file is missing"
|
||||
|
||||
##### v2.8.1 | bluemeda
|
||||
|
||||
###### v2.8.1 | bluemeda
|
||||
- Update Magisk 18100 requirements
|
||||
|
||||
##### v2.8.0 | bluemeda
|
||||
|
||||
###### v2.8.0 | bluemeda
|
||||
- Update binary files 2.0.22
|
||||
|
||||
##### v2.7.0 | bluemeda
|
||||
|
||||
###### v2.7.0 | bluemeda
|
||||
- Update binary files 2.0.21
|
||||
|
||||
##### v2.6.0 | bluemeda
|
||||
|
||||
###### v2.6.0 | bluemeda
|
||||
- Update binary files to 2.0.19
|
||||
|
||||
##### v2.5.0 | bluemeda
|
||||
|
||||
###### v2.5.0 | bluemeda
|
||||
- Update binary files to 2.0.16
|
||||
- add exception for cloudflare fallback resolver.
|
||||
|
||||
##### v2.4.0 | bluemeda
|
||||
|
||||
###### v2.4.0 | bluemeda
|
||||
- Update binary files to 2.0.14
|
||||
|
||||
##### v2.3.0 | bluemeda
|
||||
|
||||
###### v2.3.0 | bluemeda
|
||||
- Update binary files to 2.0.10
|
||||
- Add option to choose auto redirect DNS or manually set with 3rd-party app.
|
||||
|
||||
##### v2.2.0 | bluemeda
|
||||
|
||||
###### v2.2.0 | bluemeda
|
||||
- Update binary files to 2.0.8
|
||||
|
||||
##### v2.1.3 | bluemeda
|
||||
|
||||
###### v2.1.3 | bluemeda
|
||||
- If you have previous version, please uninstall it first then reinstall it again or you can change listen port manually in dnscrypt-proxy.toml file.
|
||||
- Fix Tethering Client cannot Resolve DNSCrypt
|
||||
- Fix Chromecast devices not showing jedisct1/dnscrypt-proxy#226
|
||||
- Add binary files for x86 and x86_64 (test)
|
||||
|
||||
##### v2.1.2 | bluemeda
|
||||
|
||||
###### v2.1.2 | bluemeda
|
||||
- Bug Fixes
|
||||
|
||||
##### v2.1.1 | bluemeda
|
||||
|
||||
###### v2.1.1 | bluemeda
|
||||
- Bug fixes
|
||||
|
||||
##### v2.1 | bluemeda
|
||||
|
||||
###### v2.1 | bluemeda
|
||||
- Bug fixes
|
||||
|
||||
##### v2.0 | bluemeda
|
||||
|
||||
- Resolve download.dnscrypt.info first before executing iptablDon't override dnscrypt-proxy.toml if exist
|
||||
###### v2.0 | bluemeda
|
||||
- Resolve download.dnscrypt.info first before executing iptable
|
||||
- Don't override dnscrypt-proxy.toml if exist
|
||||
- Update binary files to v2.0.6
|
||||
|
||||
##### v1.1 | bluemeda
|
||||
|
||||
###### v1.1 | bluemeda
|
||||
- Change listen port to 5353 (avoid conflict while tethering)
|
||||
|
||||
##### v1.0 | bluemeda
|
||||
|
||||
###### v1.0 | blueme
|
||||
da
|
||||
- Initial release
|
||||
- dnscrypt-proxy v2.0.5
|
||||
|
||||
|
|
|
|||
Loading…
Reference in New Issue