Hardened dnscrypt-proxy module for Android.
Go to file
lucenera 2eb96d1e9c
Instructions for new conf
There is an entry that changes in the configuration file compared to the previous version. Creating a script to make changes to the old file would make little sense, because you should add as many lines as there are any changes between the various versions and take into account the version from which you start to update. In this case, it is easier to add an instruction.
2019-09-14 00:52:53 +02:00
META-INF/com/google/android magisk 18.1 2019-04-23 16:46:32 +07:00
binary remove bin wrong name 2019-09-13 15:16:24 +02:00
common updated service.sh 2019-06-13 08:58:26 +00:00
config Add files via upload 2019-09-13 15:46:42 +02:00
.gitattributes initial release 2018-02-27 21:42:14 +07:00
.gitignore add gitignore 2018-02-27 22:08:08 +07:00
README.md Instructions for new conf 2019-09-14 00:52:53 +02:00
changelog.md Info on the new version 2019-09-13 14:05:58 +02:00
install.sh New module number version 2019-09-13 15:22:29 +02:00
module.prop New module number version in description 2019-09-13 15:24:45 +02:00

README.md

DNSCrypt Proxy 2 for Android

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2.

Features

Installation

  • Download .zip module, flash it in Magisk Manager App or in Recovery and follow the instructions.
  • For version 2.9.0 delete the configuration file in the dnscrypt-proxy folder on the internal storage to allow the installation script to copy the new version of the file that has a different entry (blocked_query_response)

Set DNS server manually with 3rd-party app (not included in this module)

  • DNS server address is 127.0.0.1:5354 for ipv4 and [::1]:5354 for ipv6
  • If you use AfWall, you can write this enter custom script
    iptables -t nat -A OUTPUT -p tcp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
    iptables -t nat -A OUTPUT -p udp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
    ip6tables -t nat -A OUTPUT -p tcp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination [::1]:5354
    ip6tables -t nat -A OUTPUT -p udp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination [::1]:5354
    
    and this shutdown script
    iptables -t nat -D OUTPUT -p tcp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
    iptables -t nat -D OUTPUT -p udp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
    ip6tables -t nat -D OUTPUT -p tcp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination [::1]:5354
    ip6tables -t nat -D OUTPUT -p udp ! -d 9.9.9.9 --dport 53 -j DNAT --to-destination [::1]:5354
    

Configuration (post-installing)

  • Configuration located on /sdcard/dnscrypt-proxy/dnscrypt-proxy.toml [or /data/media/0/dnscrypt-proxy/dnscrypt-proxy.toml]
  • For more detailed configuration please refer to official documentation

Changelog

v2.9.0

v2.8.7

  • changed path of configuration file [dnscrypt-toml] from /system/etc/ to /data/media/0/ [or /sdcard]
  • updated binary & configuration files to 2.0.25
  • Removed automatic redirection of dns-request and let dnscrypt-proxy do its job only.

v2.8.5

  • Fix #40

v2.8.4

  • Fix failed to copy or backup config file

v2.8.3

  • Fix permission issue
  • Add option to replace or backup-restore config file

v2.8.2

  • Fix "binary file is missing"

v2.8.1

  • Update Magisk 18100 requirements

v2.8.0

  • Update binary files to 2.0.22

v2.7.0

  • Update binary files to 2.0.21

Full changelog

Credit