Skip to content

Instantly share code, notes, and snippets.

@lucasallan

lucasallan/gist:63fc66b69282364e2db2

Last active January 22, 2016 23:40
Show Gist options
  • Save lucasallan/63fc66b69282364e2db2 to your computer and use it in GitHub Desktop.
Save lucasallan/63fc66b69282364e2db2 to your computer and use it in GitHub Desktop.
Download ZIP
do not update resolv.conf
Raw
gistfile1.md

sudo apt-get install libsodium-dev

sudo vim /etc/systemd/system/dnscrypt.service

[Unit]
Description=A tool for securing communications between a client and a DNS resolver.
After=network.target
Wants=network.target dnscrypt-proxy-backup.service

[Service]
ExecStart=/usr/local/sbin/dnscrypt-proxy --ephemeral-keys --resolver-name=Cisco
Restart=on-abort

[Install]
WantedBy=multi-user.target

sudo systemctl start dnscrypt.service

sudo systemctl status -l dnscrypt.service

....
Jan 22 15:31:46 sh286 dnscrypt-proxy[17757]: [NOTICE] Proxying from 127.0.0.1:53 to 208.67.220.220:443

sudo systemctl enable dnscrypt.service

sudo vim /etc/resolv.conf

nameserver 127.0.0.1

sudo vim /etc/NetworkManager/NetworkManager.conf And add this to the [main] section:

dns=none

sudo service NetworkManager restart

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment