D A R K
M A T T E R

Last modified: Unknown

Starting & Disclaimer

First of all, before you do anything from this guide, all responsibility for your privacy & security depends on you. Do whatever you like, leave this guide if you don't want to learn something to protect yourself, and stay here to stay safe on the internet by using dnscrypt-proxy to configure Anonymized DNS. I strictly suggest you check out all installation steps and especially look at all issues before installing it on your machine. If you're okay with it, then go for installation according to your OS. And my high recommendation is to use this software for your privacy. Lastly, if you're getting a problem that is not defined on this page, go to the dnscrypt-proxy installation page.

Links

Downloads

Name Last Update
dnscrypt-proxy-win64-2.1.0.zip Unknown
dnscrypt-proxy.toml Unknown
blocked-names.txt Unknown
blocked-ips.txt Unknown

Installation (Windows)

Assumption: You rename the downloaded file(s) according to the Name column inside the Downloads section.

Warning: You should consider Windows NCSI configuration after installing the dnscrypt-proxy to protect your privacy in windows.

  1. Download and Extract dnscrypt-proxy-win64-2.1.0.zip at your C: Drive.
  2. Rename dnscrypt-proxy-win64-2.1.0 with dnscrypt-proxy
  3. Commands for PowerShell
  4. cd C:\dnscrypt-proxy\win64
  5. Copy-Item .\example-dnscrypt-proxy.toml .\dnscrypt-proxy.toml
  6. .\dnscrypt-proxy.exe -check
  7. Go to dnscrypt-proxy > win64 & paste these three files named,
    • dnscrypt-proxy.toml
    • blocked-names.txt
    • blocked-ips.txt
  8. Press win+r & Type ncpa.cpl
  9. Open Properties of your connection (It might be ethernet or wifi)
  10. Double click on (TCP/IPv4)
  11. Select Use the following DNS server addresses and type 127.0.0.1 in the first field.
  12. Hit OK twice and close that dialogue
  13. Commands for PowerShell (open with administrator privileges)
  14. cd C:\dnscrypt-proxy\win64
  15. .\dnscrypt-proxy.exe -service install
  16. .\dnscrypt-proxy.exe -service start
  17. Done!

Installation (Linux)

Assumption: You rename the downloaded file(s) according to the Name column inside the Downloads section.

  1. Download files named (Inside your Downloads directory),
    • dnscrypt-proxy.toml
    • blocked-names.txt
    • blocked-ips.txt
  2. Commands for Terminal
  3. wget https://github.com/DNSCrypt/dnscrypt-proxy/releases/download/2.1.0/dnscrypt-proxy-linux_x86_64-2.1.0.tar.gz
  4. Download the latest version of dnscrypt-proxy
  5. sudo tar xvzf dnscrypt-proxy-linux_x86_64-2.1.0.tar.gz -C /etc/ && sudo mv /etc/linux-x86_64 /etc/dnscrypt-proxy
  6. Extract it to /etc/dnscrypt-proxy
  7. sudo systemctl stop systemd-resolved 2> /dev/null && sudo systemctl disable systemd-resolved 2> /dev/null
  8. Stop & Disable systemd-resolved because we can’t uninstall it
  9. sudo apt-get remove resolvconf
  10. Does your system have a directory called /etc/resolvconf (not the resolv.conf file)? If this is the case, remove it. Prompt Ans: Yes, do as I say! or y
  11. sudo mv /etc/resolv.conf /etc/resolv.conf.backup
  12. Make a backup of the /etc/resolv.conf file (important, since this can be a dangling link instead of an actual file)
  13. sudo sh -c "echo 'nameserver 127.0.0.1\noptions edns0' > /etc/resolv.conf"
  14. Change the content of resolv.conf to use localhost as a nameserver
  15. sudo chattr +i /etc/resolv.conf
  16. Prevent it from being modified with each restart
  17. sudo cp /etc/dnscrypt-proxy/example-dnscrypt-proxy.toml /etc/dnscrypt-proxy/dnscrypt-proxy.toml
  18. Just create a configuration file based on the example one
  19. sudo /etc/dnscrypt-proxy/dnscrypt-proxy
  20. And now, for something intense, type the following command. Does it look like it started properly? (Yes, then hit Ctrl + C) If not (System DNS configuration not usable yet), try to reboot your PC and follow this step again.
  21. sudo mv /home/$USERNAME/Downloads/dnscrypt-proxy.toml /home/$USERNAME/Downloads/blocked-names.txt /home/$USERNAME/Downloads/blocked-ips.txt /etc/dnscrypt-proxy/
  22. Move all the downloaded files inside the dnscrypt-proxy’s directory
  23. sudo /etc/dnscrypt-proxy/dnscrypt-proxy -service install
  24. Install the dnscrypt-proxy as system service
  25. sudo /etc/dnscrypt-proxy/dnscrypt-proxy -service start
  26. Start the dnscrypt-proxy
  27. systemctl status dnscrypt-proxy.service
  28. Check status of the dnscrypt-proxy.service (Should be in running state without any error)
  29. Done!

Uninstallation (Linux)

  1. Commands for Terminal
  2. sudo systemctl stop dnscrypt-proxy
  3. Stop the dnscrypt-proxy.service
  4. sudo /etc/dnscrypt-proxy/dnscrypt-proxy -service uninstall
  5. Uninstall the dnscrypt-proxy.service
  6. sudo rm -rvf /etc/dnscrypt-proxy
  7. Remove all files of dnscrypt-proxy
  8. sudo chattr -i /etc/resolv.conf
  9. Remove attribute i so that system can make changes and reconfigure it
  10. sudo mv /etc/resolv.conf.backup /etc/resolv.conf
  11. Restore the backup file /etc/resolv.conf.backup
  12. sudo systemctl enable --now systemd-resolved
  13. Enable and Start the systemd-resolved
  14. sudo systemctl restart NetworkManager
  15. Restart the NetworkManager.service
  16. sudo apt-get install resolvconf -y
  17. If you uninstalled resolvconf, reinstall it with following command
  18. Done!

Changes in dnscrypt-proxy.toml

Warning: If you're in Japan, you should select other server_names (Public Resolver, that is not from Japan)

Warning: If you're in Singapore, you should select other routes (Relay, that is not from Singapore)