Arch Linux

othersamo_

Member

From: Braislava

Registered: 2020-10-26

Posts: 163

DNS Conflicting

Hello,
I tried setting up dnscrypt-proxy but it ended up in a state with everything contradictory. My goal is to use adguard dns.
I followed the wiki article:https://wiki.archlinux.org/title/Dnscrypt-proxy

My /etc/dnscrypt-proxy/dnscrypt-proxy.toml is default, only contains:

server_names = ['adguard-dns', 'adguard-dns-doh']

My /etc/resolv.conf looks like the one on the wiki.

I had small issues with stuff listening on port 53. It was systemd-resolved, so I disabled it. This is what  ss -lp 'sport = :domain' shows.

Netid            State             Recv-Q             Send-Q                         Local Address:Port                           Peer Address:Port            Process                                              
udp              UNCONN            0                  0                                  127.0.0.1:domain                              0.0.0.0:*                users:(("dnscrypt-proxy",pid=5731,fd=5))            
udp              UNCONN            0                  0                              192.168.122.1:domain                              0.0.0.0:*                users:(("dnsmasq",pid=1051,fd=5))                   
tcp              LISTEN            0                  4096                               127.0.0.1:domain                              0.0.0.0:*                users:(("dnscrypt-proxy",pid=5731,fd=6))            
tcp              LISTEN            0                  32                             192.168.122.1:domain                              0.0.0.0:*                users:(("dnsmasq",pid=1051,fd=6))                   
mptcp            LISTEN            0                  4096                               127.0.0.1:domain                              0.0.0.0:*                users:(("dnscrypt-proxy",pid=5731,fd=6))            

In addition, I modified /etc/NetworkManager/conf.d/dns.conf :

[main]
dns=none

But when I open the DnsLeak test (and turn off the dns override in Firefox):

156.146.33.97	None	Datacamp	Frankfurt am Main, Germany
79.127.211.213	dns.adguard-dns.com.	Datacamp	Frankfurt am Main, Germany 

On the other hand, nmcli dev show | grep DNS returns:

IP4.DNS[1]:                             1.1.1.1
IP4.DNS[2]:                             1.0.0.1

Can anyone help me explain what's going on?

---

"Why join the navy if you can be a pirate?"
- Steve Jobs

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 78,379

Re: DNS Conflicting

On the other hand, nmcli dev show | grep DNS returns:

Those are gonna be fallback servers?
=> don't grep, look at the context.

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc

othersamo_

Member

From: Braislava

Registered: 2020-10-26

Posts: 163

Re: DNS Conflicting

I do not know whether they are fallback servers but they have been taken probably from my router as that's what set up there. However, it makes me unsure whether dnscrypt-proxy actually does sth.

---

"Why join the navy if you can be a pirate?"
- Steve Jobs

seth

Member

From: Won't reply 2 private help req

Registered: 2012-09-03

Posts: 78,379

Re: DNS Conflicting

don't grep

There's probably an explanation next to them

makes me unsure whether dnscrypt-proxy actually does sth

The dnsleak test only shows the adguard servers you explicitly configured?

---

How to upload text · How to boot w/o GUI · Disable Windows Fast-Start! · Fix your xinitrc