[Fork] Asuswrt-Merlin 374.43 LTS - DNS over TLS Beta - CLOSED

[Deleted member 27741]

Thanks for your conversation and explanation, gentlemen. Encrypted DNS IS DA COOLEST!

 

[bbunge]

Must have something wrong in my CleanBrowsing add for stubby. Or, they do not support DNSSEC even though they say they do...

 

[Deleted member 27741]

This (notice the IPV6 address is kept out) has worked for me, I think I had strict DNSSEC off though...
Mine-
"Cleanbrowsing",185.228.168.10,,853,adult-filter-dns.cleanbrowsing.org,,,yes,yes
Yours-
"Cleanbrowsing-Adult",185.228.168.10:853,2a0d:2a00:1::1,853,adult-filter-dns.cleanbrowsing.org,,,yes,yes

Pretty much the same, first name and IPV6 are different though. Wait, the port number after the IP address is different as well.

 

[john9527]

Must have something wrong in my CleanBrowsing add for stubby. Or, they do not support DNSSEC even though they say they do...

You included the port number on the ipv4 addresses....the port is a separate field

EDIT: Cleanbrowsing looks like a legitimate service. I already built the final release, but will add them to be picked up by the updater script.

 

[john9527]

Early access to the new release for Beta testers!

While I make some changes to the final release notes, the formal release of DoT support (34E3/34L3) is now available at
Download http://bit.ly/1UGjcOX

Changes since the last beta release

• The log file has now been fixed and can be found at /var/tmp/stubby/stubby.log
• The name of the nvram variable to set the loglevel has been changed from stubby_log to stubby_loglevel for clarity
• The popup help for DNSSEC now includes info on strict mode
• The dnsmasq syslog for sites that do not support DNSSEC now include the failing domain
• Fix for being prompted to select DoT servers, even if DoT is not enabled
• An updater for the DoT resolvers list is now included - run 'stubby-update-resolvers.sh' from the command line. Some new resolvers have already been added since the final build, so an update is recommended.
• Hovering on a DoT selection will now provide a popup with the details associated with that server

Thanks again to all those who participated in the Beta. Your feedback was invaluable.

 

[bbunge]

34E3 running well on my RT-AC66U_B1 after update from the Beta.
For those who created a custom stubby-resolvers.csv and made changes to NVRAM, running the script 'stubby-update-resolvers.sh' from a terminal (Putty in my case) downloaded a new file in /jffs/etc/ and set the NVRAM entry accordingly.

Thanks John!

 

[blueshark]

updated mine, seams to work nice

 

[john9527]

Final release is out! Thanks again for everyone's help.

Please move any further discussion on DoT to the main thread.

@RMerlin - Would you please lock this thread? Thanks.