./net/dnscrypt-proxy2, DNS proxy with support for encrypted protocols

[ CVSweb ] [ Homepage ] [ RSS ] [ Required by ] [ Add to tracker ]


Branch: CURRENT, Version: 2.0.27, Package name: dnscrypt-proxy2-2.0.27, Maintainer: nia

A flexible DNS proxy, with support for modern encrypted DNS protocols
such as DNSCrypt v2 and DNS-over-HTTP/2.


Required to build:
[pkgtools/cwrappers] [lang/go112]

Master sites:

SHA1: 2bcb0374aa3bb8c4665ecf9a1c98d2aa8998b06b
RMD160: 8c875c4b085e657290ae7bb0c4a3fd0e66eefc8f
Filesize: 2420.788 KB

Version history: (Expand)


CVS history: (Expand)


   2019-09-10 11:30:45 by Nia Alarie | Files touched by this commit (2) | Package updated
Log message:
dnscrypt-proxy2: Update to 2.0.27

* Version 2.0.27
 - The X25519 implementation was changed from using the Go standard
implementation to using Cloudflare's CIRCL library. Unfortunately,
CIRCL appears to be broken on big-endian systems. That change has been
reverted.
 - All the dependencies have been updated.

* Version 2.0.26
 - A new plugin was added to prevent Firefox from bypassing the system
DNS settings.
 - New configuration parameter to set how to respond to blocked
queries: `blocked_query_response`. Responses can now be empty record
sets, REFUSED response codes, or predefined IPv4 and/or IPv6 addresses.
 - The `refused_code_in_responses` and `blocked_query_response` options
have been folded into a new `blocked_query_response` option.
 - The fallback resolver is now accessed using TCP if `force_tcp` has
been set to `true`.
 - CPU usage when enabling DNSCrypt ephemeral keys has been reduced.
 - New command-line option: `-show-certs` to print DoH certificate
hashes.
 - Solaris packages are now provided.
 - DoH servers on a non-standard port, with stamps that don't include
IP addresses, and without working system resolvers can now be properly
bootstrapped.
 - A new option, `query_meta`, is now available to add optional records
to client queries.
   2019-08-14 17:45:52 by Benny Siegert | Files touched by this commit (152) | Package updated
Log message:
Recursive bump of all packages using Go after Go 1.12.8 update.
   2019-06-08 01:47:00 by Nia Alarie | Files touched by this commit (2) | Package updated
Log message:
dnscrypt-proxy2: Update to 2.0.25

* Version 2.0.25
 - The example IP address for network probes didn't work on Windows.
The example configuration file has been updated and the fallback
resolver IP is now used when no netprobe address has been configured.

* Version 2.0.24
 - The query log now includes the time it took to complete the
transaction, the name of the resolver that sent the response and if
the response was served from the cache. Thanks to Ferdinand Holzer for
his help!
 - The list of resolvers, sorted by latency, is now printed after all
the resolvers have been probed.
 - The "fastest" load-balancing strategy has been renamed to \ 
"first".
 - On Windows, a nul byte is sent to the netprobe address. This is
required to check for connectivity on this platform. Thanks to Mathias
Berchtold.
 - The Malwaredomainlist URL was updated to directly parse the host
list. Thanks to Encrypted.Town.
 - The Python script to generate lists of blacklisted domains is now
compatible both with Python 2 and Python 3. Thanks to Simon R.
 - A warning is now displayed for DoH is requested but the server
doesn't speak HTTP/2.
 - A crash with loaded-balanced sets of cloaked names was fixed.
Thanks to @inkblotadmirer for the report.
 - Resolvers are now tried in random order to avoid favoring the first
ones at startup.
   2019-05-27 17:18:35 by Benny Siegert | Files touched by this commit (151) | Package updated
Log message:
Revbump all Go packages after go112 update.
   2019-05-03 09:45:31 by Nia Alarie | Files touched by this commit (2) | Package updated
Log message:
net/dnscrypt-proxy2: Update to version 2.0.23

Changes since 2.0.22:

 - .onion servers are now automatically ignored if Tor routing is not
enabled.
 - Caching of server addresses has been improved, especially when
using proxies.
 - DNSCrypt communications are now automatically forced to using TCP
when a SOCKS proxy has been set up.
   2019-04-16 20:41:21 by Benny Siegert | Files touched by this commit (143) | Package updated
Log message:
Revbump all Go packages after go112 update
   2019-04-02 12:54:20 by Nia Alarie | Files touched by this commit (2) | Package updated
Log message:
net/dnscrypt-proxy2: Update to 2.0.22

The previous version had issues with the .org TLD when used in conjunction with \ 
dnsmasq.

This has been fixed.
   2019-03-24 16:46:55 by Nia Alarie | Files touched by this commit (2) | Package updated
Log message:
net/dnscrypt-proxy2: Update to 2.0.21.

* Startup is now way faster, especially when using DoH servers.
* A new action: CLOAK is logged when queries are being cloaked.
* A cloaking rule can now map to multiple IPv4 and IPv6 addresses, with \ 
load-balancing.
* New option: refused_code_in_responses to return (or not) a REFUSED code on \ 
blacklisted queries. This is disabled by default, in order to work around a bug \ 
in Android Pie.
* Time-based restrictions are now properly handled in the \ 
generate-domains-blacklist.py script.
* Other improvements have been made to the generate-domains-blacklist.py script.
* The Windows service is now installed as NT AUTHORITY\NetworkService.