Solved Dnscrypt-proxy and IPFW rules

U

User7

I was install and configure dnscrypt-proxy bunt when I enable IPFW cuts me from DNS, And I can't use it together. I tried use some rules like:

Code: 
ipfw add 007 allow udp from any to 172.0.0.1 dst-port 53 keep-state 
ipfw add 008 allow tcp from any to 172.0.0.1 dst-port 53 keep-state
ipfw add 009 allow udp from me to any dst-port 53 keep-state
ipfw add 010 allow tcp from me to any dst-port 53 keep-state

But still doesn't work. Any idea?
 
Thanks for a request. I had unlocked 443 port before, but my new DNS uses UDP at port 2053, and the solution is unlocking port 2053, or allowing connection only to DNS:
ipfw add 007 allow udp from me to 178.216.201.222 dst-port 2053 keep-state

I tried that before and it didn't work because DHCP sets the default router DNS into /etc/resolv.conf and after reboot IPFW rules don't work anymore. Solution is set chflags(1) on file: chflags schg /etc/resolv.conf
 
User7 said:
I tried that before and it didn't work because DHCP sets the default router DNS into /etc/resolv.conf and after reboot IPFW rules don't work anymore. Solution is set chflags() on file: chflags schg /etc/resolv.conf
Click to expand...

That's a pretty fragile solution. You may want to make a dhclient.conf(5) that sets the options you desire.

EXAMPLE:
Code: 
interface "em3"
{
  supersede domain-name "mydomain.com";
  supersede domain-name-servers 127.0.0.1;
}
 
I have this:

Code: 
#...
#  defaults are usually fine.
#

supercede domain-name-servers 127.0.0.1; # use dnscrypt instead
But DHCP sets the default router DNS. I don't know why. Maybe by tags { } ?
 
You must log in or register to reply here.
Back
Top