Mikaela/shell-things
1
0
Fork 0
mirror of https://gitea.blesmrt.net/mikaela/shell-things.git synced 2025-01-22 10:04:34 +01:00
Code Issues Projects Releases Wiki Activity

dnscrypt-proxy: more thinking for #92

Browse Source 
* Comment that the fastest server is automatically picked.
* Explicitly don't filter AAAA requests.
* Require provider to not do filtering
    * which is implied by DNSSEC which would get broken.
* Use Google DNS B as fallback resolver and explain what it does in
  comment.
* Add commented options for using Tor.
This commit is contained in:
Aminda Suomalainen 2018-10-08 20:39:48 +03:00
parent 4e52673b7d
commit 5d2b138b3e
No known key found for this signature in database
GPG Key ID: 0C207F07B2F32B67
1 changed files with 13 additions and 1 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

14
etc/dnscrypt-proxy/dnscrypt-proxy.toml
View File

@ -1,14 +1,26 @@
# Empty listen_addresses to use systemd socket activation # Empty listen_addresses to use systemd socket activation
listen_addresses = [] listen_addresses = []
# The fastest working servers are automatically picked.
server_names = ['cloudflare-ipv6', 'cloudflare', 'google'] server_names = ['cloudflare-ipv6', 'cloudflare', 'google']
ipv4_servers = true ipv4_servers = true
ipv6_servers = true ipv6_servers = true
block_ipv6 = false
require_dnssec = true require_dnssec = true
fallback_resolver = '208.67.220.220:53' require_nofilter = true
# Use Google DNS B for resolving the server_names[] if the system
# resolver is broken (which it is for me as it points directly to
# dnscrypt-proxy which is not functional at that time.
# The example config recommends DNSSEC support which OpenDNS is missing.
# China: 114.114.114.114:53 according to the example file.
fallback_resolver = '8.8.4.4:53'
cache = true cache = true
cache_size = 10000 cache_size = 10000
# Tor if necessary
#force_tcp = true
#proxy = "socks5://127.0.0.1:9050"
[query_log] [query_log]
file = '/var/log/dnscrypt-proxy/query.log' file = '/var/log/dnscrypt-proxy/query.log'