Tools Index

Dnscrypt and Dnsmasq

Configure your resolver with a server that don't censorship there for respect your freedom and privacy. Read Tor Dns Resolver for more information.

        $ sudo useradd -M -r -s /bin/false -g net net
        

1. Dnscrypt

        $ prt-get depinst dnscrypt
        

Dnscrypt by default resolves to dnscrypt.eu-nl, check file /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv for a list of compatible servers. Dnscrypt-proxy port from c9-ports contains dnscrypt-proxy init script configured to use dnscrypt.eu-dk resolver and run as nobody user. Basic usage example;

        $ sudo -u net  dnscrypt-proxy --daemonize --resolver-name=<resolver name>
        

2. Dnsmasq

Edit resolv.conf;

        # /etc/resolv.conf.head can replace this line
        nameserver 127.0.0.1
        # CCC server
        # nameserver 213.73.91.35
        # OpenNIC Servers
        # nameserver 192.71.249.83
        # nameserver 5.135.183.146
        

Make sure daemons like dhcpd don't change it, turn on immutable attribute;

        $chattr +i resolv.conf
        

Dnsmasq provides dns caching and dhcpd, example configuration files: dnsmasq.conf (change interface), hosts.dnsmasq.

Check /var/lib/dhcp/dnsmasq.leases to get list of dhcp leases assigned.

Tools Index

This is part of the c9-doc Manual. Copyright (C) 2016 c9 team. See the file Gnu Free Documentation License for copying conditions.