What's new

DNScrypt dnscrypt installer for asuswrt

  • SNBForums Code of Conduct

    SNBForums is a community for everyone, no matter what their level of experience.

    Please be tolerant and patient of others, especially newcomers. We are all here to share and learn!

    The rules are simple: Be patient, be nice, be helpful or be gone!

Must say the recent updates to installer/manager has improved the overall performance, Now easy to configure setting like Anonymized DNSCrypt(Relays)/Static servers from menu, Updated time handling and the new usage of routers DNS-Filter seems to have eliminated sometimes having reboot issues.
Thanks @SomeWhereOverTheRainBow it feels stable and secure;)
 
Last edited:
Must say the recent updates to installer/manager has improved the overall performance, Now easy to configure setting like Anonymized DNSCrypt(Relays)/Static servers from menu, Updated time handling and the new usage of routers DNS-Filter seems to have eliminated sometimes having reboot issues.
Thanks @SomeWhereOverTheRainBow it feels stable and secure;)
Code:
 Info:  Detected ARMv7 architecture.
 Info:  DI_VERSION=v2.0.10
 Info:  DNSCRYPT_VER=2.0.39
 Info:  Manager file is Up-To-Date!
 Info:  DNS Environment is Ready.
 Info:  JFFS custom scripts and configs are already enabled
 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: 3
 Info:  This operation allows you to configure dnscrypt-proxy

 =>  Do you want to proceed? [y/n]: y
 Info:  Configuring dnscrypt-proxy...
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Found previous dnscrypt-proxy config file
 Info:  How do you want to reconfigure:
 Info:    1) Start from previous settings file
 Info:    2) Start from default config
 =>  Your selection, [1-2]: 1
 Info:  Use previous settings file
 =>  Do you want to redirect all DNS resolutions on your network through this proxy? [y/n]: y
 Info:  DNSFilter is Already on.
 Info:  User can choose to keep any custom dnsfilter values and only redirect non-custom traffic.
 =>  Do you want to redirect only SOME DNS resolutions on your network through this proxy? [y/n]: n
 Info:  User chose to continue redirecting All DNS resolutions instead.
 =>  Do you want to use DNS server over IPv6 (yes only if your connection has IPv6)? [y/n]: y
 Info:  Choose DNS resolving load balancing strategy:
  1) p2 (default)
  2) ph
  3) first
  4) random
 =>  Select your mode, [1-4]: 1
 Info:  Choose how your DNS servers are selected:
  1) Automatically
  2) Manually
  3) Static
 =>  Select your mode, [1-3]: 2
 Info:  Available DNS servers:
  1) a-and-a: Non-logging DoH server in the UK operated by Andrews & Arnold Ltd, a
  2) aaflalo-me: DNS-over-HTTPS server running dns-over-https with PiHole for Adblocking in NL.
  3) aaflalo-me-gcp: Same as aaflalo-me-nyc. Use aaflalo-me-nyc.
  4) aaflalo-me-nyc: DNS-over-HTTPS server running dns-over-https with PiHole for Adblocking in NYC, USA.
  5) adguard-dns: Remove ads and protect your computer from malware
  6) adguard-dns-doh: Remove ads and protect your computer from malware (over DoH)
  7) adguard-dns-family: Adguard DNS with safesearch and adult content blocking
  8) adguard-dns-family-doh: Adguard DNS with safesearch and adult content blocking (over DoH)
  9) adguard-dns-family-ipv6: Adguard DNS with safesearch and adult content blocking
  SNIP+++++++++++++++++++++++++++++++++++++
  239) quad9-doh-ip6-nofilter-alt: sdns://AgYAAAAAAAAAEFsyNjIwOmZlOjpmZToxMF2AABJkbnM5LnF1YWQ5Lm5ldDo0NDMKL2Rucy1xdWVyeQ
  240) quad9-doh-ip6-nofilter-pri: sdns://AgYAAAAAAAAADVsyNjIwOmZlOjoxMF2AABJkbnM5LnF1YWQ5Lm5ldDo0NDMKL2Rucy1xdWVyeQ
  241) qualityology.com: Non-logging, non-filtering, DNSSEC validating server in Los Angeles, California.
  242) rubyfish-ea: Resolver in mainland China, forwarding queries for non-Chinese domains
  243) rubyfish-uw: Resolver in mainland China, forwarding queries for non-Chinese domains
SNIP++++++++++++++++++++++++++++++++++++++
  260) ventricle.us: Public DNSCrypt resolver provided by Jacob Henner
  261) xfinity: Comcast DOH server
  262) yandex: Yandex public DNS server (anycast)
 =>  Please choose DNS server, [1-262]: 5
 =>  Please choose next DNS server or press n to stop, [1-262/n]: 6
 =>  Please choose next DNS server or press n to stop, [1-262/n]: 10
 =>  Please choose next DNS server or press n to stop, [1-262/n]: n
 Info:  Set the DNS server(s) for initializing dnscrypt-proxy
 Info:  and router services (e.g. ntp) at boot
 =>  Default is 9.9.9.9: 1.1.1.1
 =>  2nd Default is 8.8.8.8: 1.0.0.1
 =>  Set log level, default is 2, 0 is the most verbose, [0-6]: 0
 Info:  Writing dnscrypt-proxy configuration...
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Checking for Anonymized Dnscrypt Support
 Info:  Users may specify Wild-card Relay Support (server_name *) with option 1 or option 2
 Info:  All DNSCRYPT Server traffic will be sent through same set of chosen Relays with Wild-Card Option.
 Info:  Option 2 gives users the choice to Setup Relays per Dnscrypt-Server or send all Servers through the Same Relays.
 Info:  Skip allows Users to skip configuring relays.
 Info:  NOTE: You must now redo relays on each reconfiguration...
 Info:  What do you want to do:
  1) Setup Automatic Servers (will disable server_names) with Wild-Card Relay Support
  2) Pick Relays for DNSCRYPT servers (Individually or Wild-Card)
  3) Skip Setting-up Relay Support.
 =>  Your choice, [1-3]: 2
 Info:  Found Servers for Anonymized Dnscrypt Support
 Info:  Choose Relays for DNSCRYPT server
 =>  Do you want to use the same set of relays for all servers? [y/n]: n
 Info:  Found adguard-dns server
 Info:  Available Relay servers:
  1) anon-am-us: Anonymized DNS relay hosted in Seattle - US
  2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/
  3) anon-cs-ca2: Anonymized DNS relay hosted in CA - Vancouver provided by https://cryptostorm.is/
  4) anon-cs-ch: Anonymized DNS relay hosted in Zurich, Switzerland provided by https://cryptostorm.is/
  5) anon-cs-de: Anonymized DNS relay hosted in Dusseldorf, Germany provided by https://cryptostorm.is/
##################################################
  40) anon-scaleway: Anonymized DNS relay hosted in France and maintained by Frank Denis (@jedisct1).
  41) anon-scaleway-ams: Anonymized DNS relay hosted in Amsterdam and maintained by Frank Denis (@jedisct1).
  42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann.
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Found Servers for Anonymized Dnscrypt Support
 Info:  Choose Relays for DNSCRYPT server
 Info:  Found adguard-dns-ipv6 server
 Info:  Available Relay servers:
  1) anon-am-us: Anonymized DNS relay hosted in Seattle - US
  2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/
  3) anon-cs-ca2: Anonymized DNS relay hosted in CA - Vancouver provided by https://cryptostorm.is/
################SNIP####################################################
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Restarting dnscrypt-proxy with new config...
 Info:  Operation completed. You can quit or continue
=====================================================


 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: q
 Info:  Operations have been applied if any has been made
 Info:  In case of anomaly, please reboot your router!
 
*DI_Version=v2.1.0*
Release Notes
  • Relay Option 1 Allows addition of Wildcard (server_name "*") for Relays for Automatic Configuration of Servers (chosen servers get disabled and servers become automatically chosen based on .toml file) or Option 2 Wildcard for All Servers (this only works with dnscrypt servers- other servers get ignored).
  • Relay Option 3 Adds Relays per Chosen Dnscrypt Server (will skip if dnscrypt servers are chosen). Users are able to define relays for each specific Dnscrypt servers, only compatible with servers chosen from public list.
  • Relay Option 4 Skip Setup of Relays allows for the removal of old relay configuration if the user specifies, this is recommended to prevent server relay conflicts if the user did not choose the same set of servers this time around. improvements brought on by users @dugaduga && @Zastoff
  • Addition of dnscrypt servers from dnscrypt-proxy 2 github.
  • New improvements to Cisco mentioned by @DonnyJohnny && @Zastoff
Code:
 Info:  Detected ARMv7 architecture.
 Info:  DI_VERSION=v2.1.0
 Info:  DNSCRYPT_VER=2.0.39
 Info:  Manager file is Up-To-Date!
 Info:  DNS Environment is Ready.
 Info:  JFFS custom scripts and configs are already enabled
 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: 1
 Info:  This operation will install dnscrypt-proxy and related files (<6MB)
 Info:  to jffs, no other data will be changed.
 Info:  Also some start scripts will be installed/modified as required.

 =>  Do you want to install dnscrypt-proxy to /jffs? [y/n]: y
 Info:  installer is up to date. Skipping...
 Info:  manager is up to date. Skipping...
 Info:  DNSCRYPT_VER=2.0.39
 Info:  public-resolvers.md is up to date. Skipping...
 Info:  public-resolvers.md.minisig is up to date. Skipping...
 Info:  relays.md is up to date. Skipping...
 Info:  relays.md.minisig is up to date. Skipping...
 Info:  dnsmasq.postconf file already configured
 Info:  init-start file already configured
 Info:  Configuring dnscrypt-proxy...
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Found previous dnscrypt-proxy config file
 =>  Do you want to use this file without reconfiguring? [y/n]: y
 Info:  Use previous settings file
 Info:  Checking for Anonymized Dnscrypt Support
 Info:  Users may specify Wild-card Relay Support (server_name *) with option 1 (this supports only DNSCrypt Servers).
 Info:  All DNSCRYPT Server traffic will be sent through same set of chosen Relays with Wild-Card Option.
 Info:  Option 2 gives users the choice to Setup Relays per Dnscrypt-Server.
 Info:  Skip allows Users to skip configuring relays.
 Info:  NOTE: You must now redo relays on each reconfiguration...
 Info:  What do you want to do:
  1) Setup Automatic Servers (will disable server_names) or All Servers with Wild-Card Relay Support.
  2) Pick Relays for DNSCRYPT servers (Per Server)
  3) Skip Setting-up Relay Support.
 =>  Your choice, [1-3]: 2
 Info:  Found Servers for Anonymized Dnscrypt Support
 Info:  Choose Relays for DNSCRYPT server
 Info:  Found adguard-dns server
 Info:  Available Relay servers:
  1) anon-am-us: Anonymized DNS relay hosted in Seattle - US
  2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/
  3) anon-cs-ca2: Anonymized DNS relay hosted in CA - Vancouver provided by https://cryptostorm.is/
************************SNIP*******************************************************
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Found Servers for Anonymized Dnscrypt Support
 Info:  Choose Relays for DNSCRYPT server
 Info:  Found adguard-dns-ipv6 server
 Info:  Available Relay servers:
  1) anon-am-us: Anonymized DNS relay hosted in Seattle - US
  2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/
***********************************SNIP********************************************
  42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann.
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Staring dnscrypt-proxy...

Done.
 Info:  For dnscrypt-proxy version 2 to work reliably, you might also want to:
 Info:   - Add swap
 Info:   - Add a RNG
 Info:   - Set your timezone
 Info:  Operation completed. You can quit or continue
=====================================================


 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]:

*Minor Update*

  • Now NextDns and Relay Configuration will Occur with in .TOML file check instead of around .TOML file check for Users and Developers Observation of Failed configurations.
  • Addition of Option 2 and Option 4 (these were minor adjustments of old options).
Code:
  40) anon-scaleway: Anonymized DNS relay hosted in France and maintained by Frank Denis (@jedisct1).
  41) anon-scaleway-ams: Anonymized DNS relay hosted in Amsterdam and maintained by Frank Denis (@jedisct1).
  42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann.
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Staring dnscrypt-proxy...

Done.
 Info:  For dnscrypt-proxy version 2 to work reliably, you might also want to:
 Info:   - Add swap
 Info:   - Add a RNG
 Info:   - Set your timezone
 Info:  Operation completed. You can quit or continue
=====================================================


 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: q
 Info:  Operations have been applied if any has been made
 Info:  In case of anomaly, please reboot your router!
 
Last edited:
*DI_Version=v2.1.0*
Release Notes
  • Relay Option 1 Allows addition of Wildcard (server_name *) for Relays for Automatic Configuration of Servers (chosen servers get disabled and servers become automatically chosen based on .toml file) or Wildcard for All Servers (this only works with dnscrypt servers- other servers get ignored).
  • Relay Option 2 Adds Relays per Chosen Dnscrypt Server (will skip if dnscrypt servers are chosen). Users are able to define relays for each specific Dnscrypt servers, only compatible with servers chosen from public list.
  • Relay Option 3 Skip Setup of Relays.
  • Addition of dnscrypt servers from dnscrypt-proxy 2 github.
  • New improvements to Cisco mentioned by @DonnyJohnny && @Zastoff
Code:
 Info:  Detected ARMv7 architecture.
 Info:  DI_VERSION=v2.1.0
 Info:  DNSCRYPT_VER=2.0.39
 Info:  Manager file is Up-To-Date!
 Info:  DNS Environment is Ready.
 Info:  JFFS custom scripts and configs are already enabled
 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: 1
 Info:  This operation will install dnscrypt-proxy and related files (<6MB)
 Info:  to jffs, no other data will be changed.
 Info:  Also some start scripts will be installed/modified as required.

 =>  Do you want to install dnscrypt-proxy to /jffs? [y/n]: y
 Info:  installer is up to date. Skipping...
 Info:  manager is up to date. Skipping...
 Info:  DNSCRYPT_VER=2.0.39
 Info:  public-resolvers.md is up to date. Skipping...
 Info:  public-resolvers.md.minisig is up to date. Skipping...
 Info:  relays.md is up to date. Skipping...
 Info:  relays.md.minisig is up to date. Skipping...
 Info:  dnsmasq.postconf file already configured
 Info:  init-start file already configured
 Info:  Configuring dnscrypt-proxy...
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Found previous dnscrypt-proxy config file
 =>  Do you want to use this file without reconfiguring? [y/n]: y
 Info:  Use previous settings file
 Info:  Checking for Anonymized Dnscrypt Support
 Info:  Users may specify Wild-card Relay Support (server_name *) with option 1 (this supports only DNSCrypt Servers).
 Info:  All DNSCRYPT Server traffic will be sent through same set of chosen Relays with Wild-Card Option.
 Info:  Option 2 gives users the choice to Setup Relays per Dnscrypt-Server.
 Info:  Skip allows Users to skip configuring relays.
 Info:  NOTE: You must now redo relays on each reconfiguration...
 Info:  What do you want to do:
  1) Setup Automatic Servers (will disable server_names) or All Servers with Wild-Card Relay Support.
  2) Pick Relays for DNSCRYPT servers (Per Server)
  3) Skip Setting-up Relay Support.
 =>  Your choice, [1-3]: 2
 Info:  Found Servers for Anonymized Dnscrypt Support
 Info:  Choose Relays for DNSCRYPT server
 Info:  Found adguard-dns server
 Info:  Available Relay servers:
  1) anon-am-us: Anonymized DNS relay hosted in Seattle - US
  2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/
  3) anon-cs-ca2: Anonymized DNS relay hosted in CA - Vancouver provided by https://cryptostorm.is/
************************SNIP*******************************************************
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Found Servers for Anonymized Dnscrypt Support
 Info:  Choose Relays for DNSCRYPT server
 Info:  Found adguard-dns-ipv6 server
 Info:  Available Relay servers:
  1) anon-am-us: Anonymized DNS relay hosted in Seattle - US
  2) anon-cs-ca: Anonymized DNS relay hosted in CA - Montreal provided by https://cryptostorm.is/
***********************************SNIP********************************************
  42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann.
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Staring dnscrypt-proxy...

Done.
 Info:  For dnscrypt-proxy version 2 to work reliably, you might also want to:
 Info:   - Add swap
 Info:   - Add a RNG
 Info:   - Set your timezone
 Info:  Operation completed. You can quit or continue
=====================================================


 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]:

*Minor Update*

  • Now NextDns and Relay Configuration will Occur with in .TOML file check instead of around .TOML file check for Users and Developers Observation of Failed configurations.
Code:
  40) anon-scaleway: Anonymized DNS relay hosted in France and maintained by Frank Denis (@jedisct1).
  41) anon-scaleway-ams: Anonymized DNS relay hosted in Amsterdam and maintained by Frank Denis (@jedisct1).
  42) anon-skyfighter: Anonymized DNS relay hosted in Netherlands (https://scaleway.com) and maintained by @tuttimann.
  43) anon-tiarap: Anonymized DNS relay hosted in Singapore
  44) anon-v.dnscrypt.uk-ipv4: Anonymized DNS relay hosted in UK on Vultr
 =>  Please choose RELAY server, [1-44]: 1
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 22
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 23
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 24
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 25
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 26
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 27
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 28
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 29
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: 30
 =>  Please choose next RELAY server or press n to stop, [1-44/n]: n
 Info:  Checking dnscrypt-proxy configuration...
 Info:  Staring dnscrypt-proxy...

Done.
 Info:  For dnscrypt-proxy version 2 to work reliably, you might also want to:
 Info:   - Add swap
 Info:   - Add a RNG
 Info:   - Set your timezone
 Info:  Operation completed. You can quit or continue
=====================================================


 Info:  Choose what you want to do:
  1) Install/Update dnscrypt-proxy
  2) Uninstall dnscrypt-proxy
  3) Configure dnscrypt-proxy
  4) Set timezone
  5) Unset timezone
  6) Install (P)RNG
  7) Uninstall (P)RNG
  8) Install swap file
  9) Uninstall ALL
  q) Quit
 =>  Please enter the number that designates your selection:, [1-9/q]: q
 Info:  Operations have been applied if any has been made
 Info:  In case of anomaly, please reboot your router!

The latest two updates, the last one coming out in the last hour or so, automatically removes the line "routes = [" from .toml, I have to manually add it every time I use your installer and installing using the previous configuration, without changes, and skipping route config (3)
 
The latest two updates, the last one coming out in the last hour or so, automatically removes the line "routes = [" from .toml, I have to manually add it every time I use your installer and installing using the previous configuration, without changes, and skipping route config (3)

**New minor update**
Now users with previously selected for routes can skip routes during configuration and keep the same configuration. Read previous post for more details.
 
Last edited:
*DI_Version=v2.1.1*
Please run
Code:
curl -L -s -k -O https://raw.githubusercontent.com/thuantran/dnscrypt-asuswrt-installer/master/installer && sh installer ; rm installer
for updated installer. Installer now updates properly from with inside installer file, to see this please run the above command and then option 1. You can use Y to skip reconfiguration.

This update is to reflect fixes from previous update along with new installer update improvements pointed out by @Zastoff
 
The latest two updates, the last one coming out in the last hour or so, automatically removes the line "routes = [" from .toml, I have to manually add it every time I use your installer and installing using the previous configuration, without changes, and skipping route config (3)
Just wanted to let you know, thank you for the valuable feedback you have provided. We (@Zastoff and I) have resolved your concerns and made improvements as well thanks to your user feedback.
 
Ladies and Gentlemen!
Cisco now support DOH!!!
https://support.opendns.com/hc/en-us/articles/360038086532-Using-DNS-over-HTTPS-DoH-with-OpenDNS

Edited: edited the stamp. Cisco DOH currently don’t support DNSSEC

Code:
[static.'cisco-doh-ipv4-pri']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjIuMjIygAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv4-alt']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjAuMjIwgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv6-pri']
stamp = 'sdns://AgAAAAAAAAAAEVsyNjIwOjExOTozNTo6MzVdgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv6-alt']
stamp = 'sdns://AgAAAAAAAAAAEVsyNjIwOjExOTo1Mzo6NTNdgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv4-family-pri']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjIuMTIzgAAgZG9oLmZhbWlseXNoaWVsZC5vcGVuZG5zLmNvbTo0NDMKL2Rucy1xdWVyeQ'

[static.'cisco-doh-ipv4-family-alt']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjAuMTIzgAAgZG9oLmZhbWlseXNoaWVsZC5vcGVuZG5zLmNvbTo0NDMKL2Rucy1xdWVyeQ'

[static.'cisco-doh-ipv6-family-pri']
stamp = 'sdns://AgAAAAAAAAAAElsyNjIwOjExOTozNTo6MTIzXYAAIGRvaC5mYW1pbHlzaGllbGQub3BlbmRucy5jb206NDQzCi9kbnMtcXVlcnk'

[static.'cisco-doh-ipv6-family-alt']
stamp = 'sdns://AgAAAAAAAAAAElsyNjIwOjExOTo1Mzo6MTIzXYAAIGRvaC5mYW1pbHlzaGllbGQub3BlbmRucy5jb206NDQzCi9kbnMtcXVlcnk'
 
Last edited:
Ladies and Gentlemen!
Cisco now support DOH!!!
https://support.opendns.com/hc/en-us/articles/360038086532-Using-DNS-over-HTTPS-DoH-with-OpenDNS

Edited: edited the stamp. Cisco DOH currently don’t support DNSSEC

Code:
[static.'cisco-doh-ipv4-pri']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjIuMjIygAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv4-alt']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjAuMjIwgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv6-pri']
stamp = 'sdns://AgAAAAAAAAAAEVsyNjIwOjExOTozNTo6MzVdgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv6-alt']
stamp = 'sdns://AgAAAAAAAAAAEVsyNjIwOjExOTo1Mzo6NTNdgAATZG9oLm9wZW5kbnMuY29tOjQ0MwovZG5zLXF1ZXJ5'

[static.'cisco-doh-ipv4-family-pri']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjIuMTIzgAAgZG9oLmZhbWlseXNoaWVsZC5vcGVuZG5zLmNvbTo0NDMKL2Rucy1xdWVyeQ'

[static.'cisco-doh-ipv4-family-alt']
stamp = 'sdns://AgAAAAAAAAAADjIwOC42Ny4yMjAuMTIzgAAgZG9oLmZhbWlseXNoaWVsZC5vcGVuZG5zLmNvbTo0NDMKL2Rucy1xdWVyeQ'

[static.'cisco-doh-ipv6-family-pri']
stamp = 'sdns://AgAAAAAAAAAAElsyNjIwOjExOTozNTo6MTIzXYAAIGRvaC5mYW1pbHlzaGllbGQub3BlbmRucy5jb206NDQzCi9kbnMtcXVlcnk'

[static.'cisco-doh-ipv6-family-alt']
stamp = 'sdns://AgAAAAAAAAAAElsyNjIwOjExOTo1Mzo6MTIzXYAAIGRvaC5mYW1pbHlzaGllbGQub3BlbmRucy5jb206NDQzCi9kbnMtcXVlcnk'

has Dnscrypt-proxy2 placed these inside the list of servers yet?

** if not, Users can add these via the Static option using the installer**
 
has Dnscrypt-proxy2 placed these inside the list of servers yet?

** if not, Users can add these via the Static option using the installer**

the Cisco update not in server list yet.

Lol..
Just realised we can add static server via installer.

but small problem.
Can we add static and mix with those from server list. Currently is either u take static or choose from list and not both.
 
the Cisco update not in server list yet.

Lol..
Just realised we can add static server via installer.

but small problem.
Can we add static and mix with those from server list. Currently is either u take static or choose from list and not both.
The functions for choosing servers will write over server_names when reconfigured
(Auto=server_names disabled, Manual=chosen from public-resovers.md, Static=manually entered server_names and sdns address)
For a sort of mix:
I guess it can be manually configured in dnscrypt-proxy.toml and restart proxy or add servers from public-resolvers.md (sdns address) as static if someone wants to do it from menu.
 
Last edited:
the Cisco update not in server list yet.

Lol..
Just realised we can add static server via installer.

but small problem.
Can we add static and mix with those from server list. Currently is either u take static or choose from list and not both.
yea users would have to look at the public-resolvers list and manually copy out any servers they want to customize to work with static at this time. Haven't had the time to customize it to allow the addition of public resolvers mixed with static. Users can easily copy the sdns stamp of the public resolvers they want to use and just name it whatever they like , or they can simply add the server name from the list to the server name line

server_names = ['example-static' , 'server-name' ]

By the way, @DonnyJohnny I await any pull request if you decide to take this feature request upon yourself ;)....
 
Last edited:
Hi all, noob here. I'm trying to install dnscrypt on a Asus AC-86U with Asuswrt-Merlin Firmware 384.15 via entware. I'm running into an issue where it is asking me to choose a DNS server, but whatever I enter, it gives me an error. Can someone help please?

Code:
 Info:  Available DNS servers:
awk: /jffs/dnscrypt/public-resolvers.md: No such file or directory
awk: /jffs/dnscrypt/public-resolvers.md: No such file or directory
 =>  Please choose DNS server, [1-0]: 1
 *** Error:  Chosen number is not in range! Retrying...
 =>  Please choose DNS server, [1-0]: 0
 *** Error:  Chosen number is not in range! Retrying...
 =>  Please choose DNS server, [1-0]:
 *** Error:  Invalid character entered! Retrying...
 =>  Please choose DNS server, [1-0]: 1.1.1.1
 *** Error:  Invalid character entered! Retrying...

And here is everything leading up to it:

upload_2020-2-23_2-30-32.png
 
Hi all, noob here. I'm trying to install dnscrypt on a Asus AC-86U with Asuswrt-Merlin Firmware 384.15 via entware. I'm running into an issue where it is asking me to choose a DNS server, but whatever I enter, it gives me an error. Can someone help please?

Code:
 Info:  Available DNS servers:
awk: /jffs/dnscrypt/public-resolvers.md: No such file or directory
awk: /jffs/dnscrypt/public-resolvers.md: No such file or directory
 =>  Please choose DNS server, [1-0]: 1
 *** Error:  Chosen number is not in range! Retrying...
 =>  Please choose DNS server, [1-0]: 0
 *** Error:  Chosen number is not in range! Retrying...
 =>  Please choose DNS server, [1-0]:
 *** Error:  Invalid character entered! Retrying...
 =>  Please choose DNS server, [1-0]: 1.1.1.1
 *** Error:  Invalid character entered! Retrying...

And here is everything leading up to it:

View attachment 21565
Make sure you have working WAN DNS server and stable internet connection and re run installer option 1) install/update so you get the correct files downloaded
edit
Welcome to the forum :)
 
Last edited:
Make sure you have working WAN DNS server and stable internet connection and re run installer option 1) install/update so you get the correct files downloaded

Thank you for your quick reply! I do have stable 100Mbps internet connection (just ran a ookla speed test). Could there be an issue caused by my running an OpenVPN Client as well as Pi-hole? My DNS was set to my VPN's DNS servers, but my internet seems to be working just fine.

I previous had to unselect the DNS-over-TLS option under "DNS Privacy Protocol" under the WAN DNS Settings in order for the dnscrypt installation to even begin. Is there a reason I should not be using this DoT menu option, but instead install/use dnscrypt? If so, could you recommend if it would be beter to install dnscrypt on the router or on the raspberry pi (zero W)?
 

Sign Up For SNBForums Daily Digest

Get an update of what's new every day delivered to your mailbox. Sign up here!
Top