{"id":16641921,"url":"https://github.com/ptr1337/hardened-anonymized-dnscrypt-proxy","last_synced_at":"2025-09-14T07:12:21.885Z","repository":{"id":119298927,"uuid":"394119636","full_name":"ptr1337/Hardened-Anonymized-DNSCrypt-Proxy","owner":"ptr1337","description":"Wipe Snoopers Out Of Your Networks","archived":false,"fork":false,"pushed_at":"2021-11-19T16:09:59.000Z","size":267,"stargazers_count":2,"open_issues_count":0,"forks_count":2,"subscribers_count":0,"default_branch":"main","last_synced_at":"2025-01-18T15:53:05.938Z","etag":null,"topics":[],"latest_commit_sha":null,"homepage":"","language":"Shell","has_issues":false,"has_wiki":null,"has_pages":null,"mirror_url":null,"source_name":null,"license":null,"status":null,"scm":"git","pull_requests_enabled":true,"icon_url":"https://github.com/ptr1337.png","metadata":{"files":{"readme":"README.md","changelog":null,"contributing":null,"funding":null,"license":null,"code_of_conduct":null,"threat_model":null,"audit":null,"citation":null,"codeowners":null,"security":null,"support":null,"governance":null,"roadmap":null,"authors":null,"dei":null,"publiccode":null,"codemeta":null}},"created_at":"2021-08-09T02:16:30.000Z","updated_at":"2024-04-10T21:57:19.000Z","dependencies_parsed_at":null,"dependency_job_id":"0809eb9c-e7fc-41ce-a4bf-b9d079a545f1","html_url":"https://github.com/ptr1337/Hardened-Anonymized-DNSCrypt-Proxy","commit_stats":null,"previous_names":[],"tags_count":0,"template":false,"template_full_name":null,"repository_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ptr1337%2FHardened-Anonymized-DNSCrypt-Proxy","tags_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ptr1337%2FHardened-Anonymized-DNSCrypt-Proxy/tags","releases_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ptr1337%2FHardened-Anonymized-DNSCrypt-Proxy/releases","manifests_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories/ptr1337%2FHardened-Anonymized-DNSCrypt-Proxy/manifests","owner_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners/ptr1337","download_url":"https://codeload.github.com/ptr1337/Hardened-Anonymized-DNSCrypt-Proxy/tar.gz/refs/heads/main","host":{"name":"GitHub","url":"https://github.com","kind":"github","repositories_count":243165048,"owners_count":20246719,"icon_url":"https://github.com/github.png","version":null,"created_at":"2022-05-30T11:31:42.601Z","updated_at":"2022-07-04T15:15:14.044Z","host_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub","repositories_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repositories","repository_names_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/repository_names","owners_url":"https://repos.ecosyste.ms/api/v1/hosts/GitHub/owners"}},"keywords":[],"created_at":"2024-10-12T07:48:16.902Z","updated_at":"2025-03-12T05:28:54.565Z","avatar_url":"https://github.com/ptr1337.png","language":"Shell","funding_links":[],"categories":[],"sub_categories":[],"readme":"\u003ch1 align=center\u003eHardened-Anonymized-DNSCrypt-Proxy\u003c/h1\u003e\n\u003cp align=center\u003eWipe Snoopers Out Of Your Networks\u003c/p\u003e\n\nA flexible DNS proxy, with support for modern encrypted DNS protocols such as [DNSCrypt v2](https://dnscrypt.info/protocol), [DNS-over-HTTPS](https://www.rfc-editor.org/rfc/rfc8484.txt) and [Anonymized DNSCrypt](https://github.com/DNSCrypt/dnscrypt-protocol/blob/master/ANONYMIZED-DNSCRYPT.txt).\n\n\n## Features\n\n- For all features please refer to the [OFFICIAL PAGE](https://github.com/DNSCrypt/dnscrypt-proxy#features)\n- All binary files are downloaded from the [OFFICIAL RELEASE PAGE](https://github.com/DNSCrypt/dnscrypt-proxy/releases)\n\n\n## Why This Project ?\n\nThere Are Automated DNSCrypt-Proxy Client For Both [Windows](https://github.com/bitbeans/SimpleDnsCrypt) \u0026 [Android (Magisk Module)](https://codeberg.org/quindecim/dnscrypt-proxy-android) \u003cbr/\u003e\nBut For Linux, People Find It Hard To Configure DNSCrypt-Proxy Manually. But I Wanted To Keep It Simple, So It's Here !\n\n\n## Supported Linux Distributions\n\n`Any Linux Distro With SystemD \u0026 NetworkManager`\n\n\n## Differences From The Main DNSCrypt-Proxy Project\n\n- `server_names` = `acsacsar-ams-ipv4` [NLD], `altername` [RUS], `ams-dnscrypt-nl` [NLD], `bcn-dnscrypt` [ESP], `d0wn-tz-ns1` [TZA], `dct-ru1` [RUS], `dct-ru2` [RUS], `dns.watch` [DEU], `dnscrypt.be` [BEL], `dnscrypt.ca-1` [CAN], `dnscrypt.ca-2` [CAN], `dnscrypt.eu-nl` [NLD], `dnscrypt.pl` [POL], `dnscrypt.uk-ipv4` [GBR], `dnswarden-asia-uncensor-dcv4` [SGP], `dnswarden-eu-uncensor-dcv4` [DEU], `dnswarden-us-uncensor-dcv4` [USA], `gombadi-syd` [AUS], `meganerd` [NLD], `moulticast-ca-ipv4` [CAN], `moulticast-de-ipv4` [DEU], `moulticast-fr-ipv4` [FRA], `moulticast-sg-ipv4` [SGP], `moulticast-uk-ipv4` [GBR], `pf-dnscrypt` [CHE], `plan9-dns` [USA], `plan9-ns2` [USA], `pryv8boi` [DEU], `pwoss.org-dnscrypt` [DEU], `resolver4.dns.openinternet.io` [USA], `scaleway-ams` [NLD], `scaleway-fr` [FRA], `serbica` [NLD], `sg-dn53` [SGP], `v.dnscrypt.uk-ipv4` [GBR], `zackptg5-us-il-ipv4` [USA], `zackptg5-us-pit-ipv4` [USA] are the resolvers in use.\n\n- `doh_servers` = `false` (disable servers implementing the `DNS-over-HTTPS` protocol)\n\n- `require_dnssec` = `true` (server must support `DNSSEC` security extension)\n\n- `timeout` = `1000` (set the max. response time of a single DNS query from `5000` to `1000` ms.)\n\n- `blocked_query_response` = `'refused'` (set `refused` response to blocked queries)\n\n- `log_level` = `0` (set the log level of the `dnscrypt-proxy.log` file to very verbose, but still keep it disabled by default)\n\n- `dnscrypt_ephemeral_keys` = `true` (create a new, unique key for every single DNS query)\n\n- `bootstrap_resolvers` = `['91.239.100.100:53', '89.233.43.71:53']` (use [UncensoredDNS (Anycast \u0026 Unicast)](https://blog.uncensoreddns.org/) instead [CloudFlare](https://iscloudflaresafeyet.com/))\n\n- `netprobe_address` = `'91.239.100.100:53'` (use [UncensoredDNS (Anycast)](https://blog.uncensoreddns.org/) instead [CloudFlare](https://iscloudflaresafeyet.com/))\n\n- `block_ipv6` = `true` (immediately respond to IPv6-related queries with an empty response)\n\n- `blocked_names_file`, `blocked_ips_file`, `allowed_names_file` and `allowed_ips_file` options enabled. (you can now filter your web content, to know how, please refer to the [official documentation](https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Filters) or take a look at my [block repository](https://codeberg.org/quindecim/block))\n\n- `anonymized_dns` feature enabled. (`routes` are indirect ways to reach DNSCrypt servers, each resolver has 2 relays assigned)\n\n- `skip_incompatible` = `true` (skip resolvers incompatible with anonymization instead of using them directly)\n\n- `direct_cert_fallback` = `false` (prevent direct connections through the resolvers for failed certificate retrieved via relay)\n\n\n## Configure/Deconfigure [Copy-Paste]\n\n    git clone https://github.com/BL4CKH47H4CK3R/Hardened-Anonymized-DNSCrypt-Proxy\n    cd \"$(basename \"$_\" .git)\"\n    chmod +x run.sh \u0026\u0026 sudo ./run.sh\n    ### Filters (optional)\n\n\n## Filters [Optional]\n\nFilters are a powerful set of built-in features, that let you control exactly what domain names and IP addresses your device are allowed to connect to. This can be used to block ads, trackers, malware, or anything you don't want your device to load.\nTo know more about it, you can check the official documentation [DNSCrypt-Proxy-Filters](https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Filters)\n\n\n## DNS Leak Testing [Websites]\n\n- [IPLeak](https://ipleak.net)\n- [DNSLeakTest](https://www.dnsleaktest.com)\n- [BrowserLeaks](https://browserleaks.com/dns)\n\n\n## Configuration [Post Installing]\n\n- You can edit `dnscrypt-proxy.toml` as you wish located on `/etc/dnscrypt-proxy/dnscrypt-proxy.toml`\n- For more detailed configuration please refer to [official documentation](https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Configuration)\n\n\n## Credits\n\n[Frank Denis](https://github.com/jedisct1) \u0026 All Other Contributors\nFor This Awesome [Project](https://github.com/DNSCrypt/dnscrypt-proxy)\n","project_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fptr1337%2Fhardened-anonymized-dnscrypt-proxy","html_url":"https://awesome.ecosyste.ms/projects/github.com%2Fptr1337%2Fhardened-anonymized-dnscrypt-proxy","lists_url":"https://awesome.ecosyste.ms/api/v1/projects/github.com%2Fptr1337%2Fhardened-anonymized-dnscrypt-proxy/lists"}