Configure your resolver with a server that don't censorship there for respect your freedom and privacy. Read Tor Dns Resolver for more information.
$ prt-get depinst dnscrypt
Dnscrypt by default resolves to dnscrypt.eu-nl, check file /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv for a list of compatible servers. Dnscrypt-proxy port from c9-ports contains dnscrypt-proxy init script configured to use dnscrypt.eu-dk resolver and run as nobody user. Basic usage example;
$ sudo -u nobody dnscrypt-proxy --daemonize --resolver-name=<resolver name>
Edit resolv.conf;
# /etc/resolv.conf.head can replace this line nameserver 127.0.0.1 # CCC server # nameserver 213.73.91.35 # OpenNIC Servers # nameserver 192.71.249.83 # nameserver 5.135.183.146
Make sure daemons like dhcpd don't change it, turn on immutable attribute;
$chattr +i resolv.conf
Dnsmasq provides dns caching and dhcpd, example configuration files: dnsmasq.conf (change interface), hosts.dnsmasq.
Tools IndexThis is part of the c9-doc Manual. Copyright (C) 2016 c9 team. See the file Gnu Free Documentation License for copying conditions.