d3cim
/
dnscrypt-proxy-android
mirror of https://github.com/d3cim/dnscrypt-proxy-android.git
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
Hardened dnscrypt-proxy module for Android.
367 Commits 1 Branch 15 Tags 353 MiB
Shell 100%
Go to file
quindecim 41fe7bee47 [New Magisk module template] - structural update 2020-01-04 18:03:49 -05:00
META-INF/com/google/android Require Magisk v19.0+ 2020-01-02 05:40:48 -05:00
binary Update binary files to 2.0.36 2019-12-22 14:14:08 -05:00
config Upstream 2020-01-04 17:09:55 -05:00
.gitattributes initial release 2018-02-27 21:42:14 +07:00
.gitignore add gitignore 2018-02-27 22:08:08 +07:00
README.md Updated resolvers 2019-12-30 16:05:35 -05:00
changelog.md Update to 2.0.36 2019-12-22 14:24:41 -05:00
module.prop Update to 2.0.36 2019-12-22 14:24:41 -05:00
post-fs-data.sh [New Magisk module template] - structural update 2020-01-04 18:03:49 -05:00
service.sh [New Magisk module template] - structural update 2020-01-04 18:03:49 -05:00

README.md

DNSCrypt Proxy 2 for Android | privacy oriented

A flexible DNS proxy, with support for modern encrypted DNS protocols such as DNSCrypt v2, DNS-over-HTTPS and Anonymized DNSCrypt.

Features

Pre-built binaries

Up-to-date, pre-built binaries are available for:

  • Android/arm
  • Android/arm64
  • Android/x86
  • Android/x86_64

Differences between default DNSCrypt Proxy project

- CONFIG. FILE: (dnscrypt-proxy.toml)
  • ✅ DNSSEC required
  • ✅ Enabled dnscrypt_ephemeral_keys feature (create a new, unique key for every single DNS query)
  • ✅ Enabled anonymized_dns feature (each resolver has 2 relays)
  • ✅ Enabled blacklist file to prevent CNAME Cloaking tracking feature
  • ⛔️ DoH disabled
  • ⛔️ IPv6 disabled
  • ℹ️ Setrefused response to blocked queries
  • ℹ️ Set DNS query max. response time from 5000 to 1500, in ms.
  • ℹ️ Use UncensoredDNS as fallback resolver instead CloudFlare
  • ℹ️ Use dnscrypt.nl-ns0 (NL), dnscrypt.eu-dk (DK), dnscrypt.eu-nl (NL), dnscrypt.one (DE), dnscrypt.uk-ipv4 (UK), dnswarden-dc1 (DE), dnswarden-dc2 (DE), dnswarden-dc3 (DE), ffmuc.net (DE), ibksturm (CH), publicarray-au (AUS), publicarray-au2 (AUS), scaleway-ams (NL), scaleway-fr (FR) and v.dnscrypt.uk-ipv4 (UK)

Installation

  1. Download latest .zip file from here or from dnscrypt-proxy-android | CHANNEL on Telegram and flash it with Magisk Manager App or with your Recovery.
  2. Reboot.
  3. Open AFWall+ and set custom script:

ENTER SCRIPT:

iptables -t nat -A OUTPUT -p tcp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53
iptables -t nat -A OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53

SHUTDOWN SCRIPT:

iptables -t nat -D OUTPUT -p tcp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53
iptables -t nat -D OUTPUT -p udp ! -d 91.239.100.100 --dport 53 -j DNAT --to-destination 127.0.0.1:53

Configuration (post-installing)

  • You can edit dnscrypt-proxy.toml as you wish located on /sdcard/dnscrypt-proxy/dnscrypt-proxy.toml [or /data/media/0/dnscrypt-proxy/dnscrypt-proxy.toml]
  • For more detailed configuration please refer to official documentation
  • FOR MORE SUPPORT ON A GOOD PRIVACY-ORIENTED SETUP, JOIN dnscrypt-proxy-android | CHAT ON TELEGRAM

Changelog

Full changelog

Credit