Skip to content

Commit a3cbaab

Browse files
committed
Fix bootstrapping
1 parent fe29263 commit a3cbaab

3 files changed

Lines changed: 4 additions & 14 deletions

File tree

README.md

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -38,9 +38,9 @@ All the binary files are downloaded from the [official release page](https://git
3838

3939
- `dnscrypt_ephemeral_keys = true` (create a new, unique key for every single DNS query)
4040

41-
- `bootstrap_resolvers = ['84.200.69.80:53', '84.200.70.40:53']` (use [resolver1.dns.watch](https://dns.watch/) and [resolver2.dns.watch](https://dns.watch/) instead [CloudFlare](https://archive.today/tS1Ln))
41+
- `bootstrap_resolvers = ['185.222.222.222:53']` (use [DNS.SB](https://dns.sb/) instead [CloudFlare](https://archive.today/tS1Ln))
4242

43-
- `netprobe_address = '84.200.69.80:53'` (use [resolver1.dns.watch](https://dns.watch/) instead [CloudFlare](https://archive.today/tS1Ln))
43+
- `netprobe_address = '185.222.222.222:53'` (use [DNS.SB](https://dns.sb/) instead [CloudFlare](https://archive.today/tS1Ln))
4444

4545
- `block_ipv6 = true` (immediately respond to IPv6-related queries with an empty response)
4646

config/dnscrypt-proxy.toml

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -248,7 +248,7 @@ dnscrypt_ephemeral_keys = true
248248
## not be sent there. If you're using DNSCrypt or Anonymized DNS and your
249249
## lists are up to date, these resolvers will not even be used.
250250

251-
bootstrap_resolvers = ['84.200.69.80:53', '84.200.70.40:53']
251+
bootstrap_resolvers = ['185.222.222.222:53']
252252

253253

254254
## Always use the bootstrap resolver before the system DNS settings.
@@ -274,7 +274,7 @@ netprobe_timeout = -1
274274
## On other operating systems, the connection will be initialized
275275
## but nothing will be sent at all.
276276

277-
netprobe_address = '84.200.69.80:53'
277+
netprobe_address = '185.222.222.222:53'
278278

279279

280280
## Offline mode - Do not use any remote encrypted servers.

post-fs-data.sh

Lines changed: 0 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -8,16 +8,6 @@ MODDIR=${0%/*}
88

99
# This script will be executed in post-fs-data mode
1010

11-
# Redirect DNS requests to localhost
12-
iptables -t nat -A OUTPUT -p tcp ! -d 84.200.69.80 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
13-
iptables -t nat -A OUTPUT -p udp ! -d 84.200.69.80 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
14-
iptables -t nat -A OUTPUT -p tcp ! -d 84.200.70.40 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
15-
iptables -t nat -A OUTPUT -p udp ! -d 84.200.70.40 --dport 53 -j DNAT --to-destination 127.0.0.1:5354
16-
# ip6tables -t nat -A OUTPUT -p tcp ! -d 84.200.69.80 --dport 53 -j DNAT --to-destination [::1]:5354
17-
# ip6tables -t nat -A OUTPUT -p udp ! -d 84.200.69.80 --dport 53 -j DNAT --to-destination [::1]:5354
18-
# ip6tables -t nat -A OUTPUT -p tcp ! -d 84.200.70.40 --dport 53 -j DNAT --to-destination [::1]:5354
19-
# ip6tables -t nat -A OUTPUT -p udp ! -d 84.200.70.40 --dport 53 -j DNAT --to-destination [::1]:5354
20-
2111
# Force disable IPv6 OS connections
2212
resetprop net.ipv6.conf.all.accept_redirects 0
2313
resetprop net.ipv6.conf.all.disable_ipv6 1

0 commit comments

Comments
 (0)