Dnscrypt on dd-wrt

Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware
Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8  Next
Author Message
kratosvn
DD-WRT Novice


Joined: 24 May 2015
Posts: 42

PostPosted: Sat Dec 10, 2016 20:52    Post subject: Reply with quote
HalfBit wrote:
I got it. Not really sure what did it other than make sure the listeners were up and validate the DNSMasq and DNS server configurations were correct. Hope this information helps:

PREREQUISITES:
See my previous post here on installing the necessary packages: http://www.dd-wrt.com/phpBB2/viewtopic.php?p=1048255#1048255

RUN DNSCRYPT-PROXY:
Code:
dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv -d

CONFIGURATION:
Code:
root@R7000:~# nvram get DD_BOARD
Netgear R7000

root@R7000:~# nvram get os_version
29300M

root@R7000:~# dnscrypt-proxy -V
dnscrypt-proxy 1.7.0
it is there already:
~# which dnscrypt-proxy
/opt/usr/sbin/dnscrypt-proxy

root@R7000:~# nvram get wan_dns
127.0.0.53 127.0.0.1 127.0.0.2

root@R7000:~# cat /tmp/resolv.dnsmasq
nameserver 127.0.0.53
nameserver 127.0.0.1
nameserver 127.0.0.2

root@R7000:~# cat /tmp/dnsmasq.conf
interface=br0,wl0.1
resolv-file=/tmp/resolv.dnsmasq
all-servers
strict-order
dhcp-leasefile=/tmp/dnsmasq.leases
dhcp-lease-max=29
dhcp-option=br0,--- REDACTED NETWORK INFO ---
dhcp-option=wl0.1,--- REDACTED NETWORK INFO ---
dhcp-authoritative
dhcp-range=br0,--- REDACTED NETWORK INFO ---
dhcp-range=--- REDACTED NETWORK INFO ---
--- REDACTED LEASE INFO ---
stop-dns-rebind
addn-hosts=/opt/hosts
server=127.0.0.53#5353
bogus-priv
domain-needed
no-negcache

root@R7000:~# netstat -an | grep 5353
tcp        0      0 127.0.0.53:5353       0.0.0.0:*               LISTEN
udp        0      0 127.0.0.53:5353       0.0.0.0:*

root@R7000:~# ps | grep dnsc
 5483 root      1148 S    grep dnsc
22599 root      1112 S    dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv -d

VALIDATION:
Once I kill the DNSCrypt process, either with
Code:
killall dnscrypt-proxy
or
kill <processID>

I no longer get DNS resolutions. I can also validate looking up the TXT DNS record for debug.opendns.com from a Windows 10 client:
Quote:
C:\>nslookup -type=txt debug.opendns.com.
Server: R7000
Address: 192.168.1.1

Non-authoritative answer:
debug.opendns.com text =

"server 5.REDACTED"

...

debug.opendns.com text =

"source REDACTED_WAN_IP:54226"
debug.opendns.com text =

"dnscrypt enabled (REDACTED)"

...

OBSERVATIONS:
You get more information if you don't "daemonize" the process, at least initially until you get it going:
Code:
root@R7000:~# dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443

Whereas daemonizing (-d switch) gives you:
Code:
root@R7000:~# dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv -d
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
root@R7000:~#

For additional networks/VAPs, more configuration is necessary. See my next post here: http://www.dd-wrt.com/phpBB2/viewtopic.php?p=1049346#1049346


I run to the weird case. Already installed dnscrypt-proxy through opkg as you mentioned above but can not start it.
root@asus# dnscrypt-proxy -V
-sh: dnscrypt-proxy: not found
# nvram get DD_BOARD
Asus RT-AC68U
~# which dnscrypt-proxy
/opt/usr/sbin/dnscrypt-proxy

or :
#dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
sh: dnscrypt-proxy: not found

Looks like here is the issue:
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.
Sponsor
e3000usr
DD-WRT User


Joined: 09 Jul 2014
Posts: 183

PostPosted: Sun Dec 11, 2016 0:04    Post subject: Reply with quote
I am not an advanced user at all and am waiting until Kong can put this in the firmware... but running dnscrypt on my mac laptop and everything is slow. Can't watch a youtube or twitch video without constant buffering and I picked the dnscrypt server that is right in my city.
HalfBit
DD-WRT Guru


Joined: 04 Sep 2009
Posts: 776
Location: AR, USA

PostPosted: Sun Dec 11, 2016 2:40    Post subject: Reply with quote
kratosvn wrote:
I run to the weird case. Already installed dnscrypt-proxy through opkg as you mentioned above but can not start it.
root@asus# dnscrypt-proxy -V
-sh: dnscrypt-proxy: not found
# nvram get DD_BOARD
Asus RT-AC68U
~# which dnscrypt-proxy
/opt/usr/sbin/dnscrypt-proxy

or :
#dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
sh: dnscrypt-proxy: not found

Looks like here is the issue:
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.

I'm not sure what this error is or how to fix it. Is Kong's repo compatible with your unit?

_________________
R7000 Nighthawk - DD-WRT v3.0-r50308
R7000 Nighthawk - DD-WRT v3.0-r50308
~~~~~~~~~~Dismantled for learning opportunities~~~~~~~~~~
WRT54Gv2
WRT54Gv8.2
~~~~~~~~~~Other Settings~~~~~~~~~
https://nextdns.io/?from=2d3sq39x
https://pi-hole.net/
https://github.com/DNSCrypt/dnscrypt-proxy
James2k
DD-WRT Guru


Joined: 23 Oct 2011
Posts: 549

PostPosted: Sun Dec 11, 2016 8:58    Post subject: Reply with quote
The Entware package of dnscrypt-proxy works fine, how are you installing the ipkg?
_________________
James

Main router:

Netgear R7000 overclocked to 1.2GHz - DD-WRT v3.0-r35965M kongac

IPv6 6in4 (HE.net), OpenVPN (with PBR and split tunnelling), Entware, dnsmasq with ipset

Easy ipset support for the R7000

VPN speed: Download: 77.96 Mbps Upload: 5.00 Mbps (AES-128-CBC HMAC-SHA1)

Yes you can get 50 Mbps+ with OpenVPN on a R7000 if you configure it properly!

Previous routers:

ASUS RT-N66U - The Dark Knight
WNR2000v3 - Bought on the cheap for someone else, neutered crap
WNR3500Lv1 - First venture into the DD-WRT world
kratosvn
DD-WRT Novice


Joined: 24 May 2015
Posts: 42

PostPosted: Sun Dec 11, 2016 18:31    Post subject: Reply with quote
James2k wrote:
The Entware package of dnscrypt-proxy works fine, how are you installing the ipkg?

I installed it using "bootstrap". Looks like it doesnt support it yet.
# /opt/etc/init.d/dnscrypt-proxy start
/bin/sh: can't open '/etc/rc.common'

do you know how can I install entware package of dnscrypt-proxy without using bootstrap ?

when I tried without bootstrap:
wget -O - http://pkg.entware.net/binaries/armv7/installer/entware_install.sh | sh

I got this errors out looks like it doesn't work either:
ln: ld-linux.so.3: Operation not permitted
ln: libc.so.6: Operation not permitted
Info: Basic packages installation...
sh: /opt/bin/opkg: not found
sh: /opt/bin/opkg: not found
Connecting to pkg.entware.net (81.4.123.217:80)
wget: can't open '/opt/usr/lib/locale/locale-archive': No such file or directory
Info: Congratulations!
Info: If there are no errors above then Entware-ng was successfully initialized.
Info: Add /opt/bin & /opt/sbin to your PATH variable
Info: Add '/opt/etc/init.d/rc.unslung start' to startup script for Entware-ng services to start
Info: Found a Bug? Please report at https://github.com/Entware-ng/Entware-ng/issues

So assuming it DOES NOT work with Router ModelAsus RT-AC68U yet. And we need to wait from KONG to push it to firmware update
My Firmware Version DD-WRT v3.0-r30910M kongac (12/02/16)


Last edited by kratosvn on Sun Dec 11, 2016 18:45; edited 3 times in total
kratosvn
DD-WRT Novice


Joined: 24 May 2015
Posts: 42

PostPosted: Sun Dec 11, 2016 18:34    Post subject: Reply with quote
HalfBit wrote:
kratosvn wrote:
I run to the weird case. Already installed dnscrypt-proxy through opkg as you mentioned above but can not start it.
root@asus# dnscrypt-proxy -V
-sh: dnscrypt-proxy: not found
# nvram get DD_BOARD
Asus RT-AC68U
~# which dnscrypt-proxy
/opt/usr/sbin/dnscrypt-proxy

or :
#dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
sh: dnscrypt-proxy: not found

Looks like here is the issue:
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.

I'm not sure what this error is or how to fix it. Is Kong's repo compatible with your unit?

I think so my router CPU ModelBroadcom BCM4708
# opkg print-architecture
arch all 1
arch noarch 1
arch bcm53xx 10

# opkg status dnscrypt-proxy
Package: dnscrypt-proxy
Version: 1.7.0-1
Depends: libc, libsodium, dnscrypt-proxy-resolvers
Status: install user installed
Architecture: bcm53xx
James2k
DD-WRT Guru


Joined: 23 Oct 2011
Posts: 549

PostPosted: Sun Dec 11, 2016 18:46    Post subject: Reply with quote
Try grabbing the ipkg from here:

http://pkg.entware.net/binaries/armv7/

You'll need the ARM7 packages, I believe for your router.

Though, the Entware installer shouldn't be throwing errors like that. If however you've been using bootstrap it could be causing conflicts, you might want to hold off until perhaps Kong chimes in.

Or wipe your USB storage and start fresh.

_________________
James

Main router:

Netgear R7000 overclocked to 1.2GHz - DD-WRT v3.0-r35965M kongac

IPv6 6in4 (HE.net), OpenVPN (with PBR and split tunnelling), Entware, dnsmasq with ipset

Easy ipset support for the R7000

VPN speed: Download: 77.96 Mbps Upload: 5.00 Mbps (AES-128-CBC HMAC-SHA1)

Yes you can get 50 Mbps+ with OpenVPN on a R7000 if you configure it properly!

Previous routers:

ASUS RT-N66U - The Dark Knight
WNR2000v3 - Bought on the cheap for someone else, neutered crap
WNR3500Lv1 - First venture into the DD-WRT world
kratosvn
DD-WRT Novice


Joined: 24 May 2015
Posts: 42

PostPosted: Sun Dec 11, 2016 19:25    Post subject: Reply with quote
James2k wrote:
Try grabbing the ipkg from here:

http://pkg.entware.net/binaries/armv7/

You'll need the ARM7 packages, I believe for your router.

Though, the Entware installer shouldn't be throwing errors like that. If however you've been using bootstrap it could be causing conflicts, you might want to hold off until perhaps Kong chimes in.

Or wipe your USB storage and start fresh.

how can I install to use ipkg ?
# ipkg
-sh: ipkg: not found
James2k
DD-WRT Guru


Joined: 23 Oct 2011
Posts: 549

PostPosted: Sun Dec 11, 2016 19:30    Post subject: Reply with quote
You can install them with opkg still, you may have to use the force parameter.
_________________
James

Main router:

Netgear R7000 overclocked to 1.2GHz - DD-WRT v3.0-r35965M kongac

IPv6 6in4 (HE.net), OpenVPN (with PBR and split tunnelling), Entware, dnsmasq with ipset

Easy ipset support for the R7000

VPN speed: Download: 77.96 Mbps Upload: 5.00 Mbps (AES-128-CBC HMAC-SHA1)

Yes you can get 50 Mbps+ with OpenVPN on a R7000 if you configure it properly!

Previous routers:

ASUS RT-N66U - The Dark Knight
WNR2000v3 - Bought on the cheap for someone else, neutered crap
WNR3500Lv1 - First venture into the DD-WRT world
<Kong>
DD-WRT Guru


Joined: 15 Dec 2010
Posts: 4339
Location: Germany

PostPosted: Sun Dec 11, 2016 20:15    Post subject: Reply with quote
The dnscrypt package from my repo works fine, see command output on latest build with dnscrypt installed from my repo:

dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443

You are either not running my build and using my repo, or you have some conflicting package repo in use.

Note: Only my repo is compatible with dd-wrt, all other package repos will not fully work with dd-wrt as they are not using a dd-wrt toolchain to compile packages.

In my private builds I already included dnscrypt.

_________________
KONG PB's: http://www.desipro.de/ddwrt/
KONG Info: http://tips.desipro.de/
kratosvn
DD-WRT Novice


Joined: 24 May 2015
Posts: 42

PostPosted: Sun Dec 11, 2016 20:26    Post subject: Reply with quote
<Kong> wrote:
The dnscrypt package from my repo works fine, see command output on latest build with dnscrypt installed from my repo:

dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443

You are either not running my build and using my repo, or you have some conflicting package repo in use.

Note: Only my repo is compatible with dd-wrt, all other package repos will not fully work with dd-wrt as they are not using a dd-wrt toolchain to compile packages.

In my private builds I already included dnscrypt.

Yeah don't know why but I wiped my /opt and "bootstrap" opkg again but looks like still doesn't work. Even tried it with fresh router with your different build still the same Err. Also I am pretty sure I am using only packages from your repo. See below
---
# opkg install dnscrypt-proxy-resolvers dnscrypt-proxy
Installing dnscrypt-proxy-resolvers (1.7.0+git-20160829-65a9553-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy-resolvers_1.7.0+git-20160829-65a9553-1_bcm53xx.ipk.
Installing libc (1.1.14-1) to root...
Downloading http://www.desipro.de/musl/base/libc_1.1.14-1_bcm53xx.ipk.
Installing libgcc (5.3.0-1) to root...
Downloading http://www.desipro.de/musl/base/libgcc_5.3.0-1_bcm53xx.ipk.
Installing dnscrypt-proxy (1.7.0-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy_1.7.0-1_bcm53xx.ipk.
Installing libsodium (1.0.11-2) to root...
Downloading http://www.desipro.de/musl/packages/libsodium_1.0.11-2_bcm53xx.ipk.
Configuring libgcc.
Configuring libc.
Configuring libsodium.
Configuring dnscrypt-proxy-resolvers.
Configuring dnscrypt-proxy.
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.

# dnscrypt-proxy
-sh: dnscrypt-proxy: not found

--- my opkg.conf:
src/gz base http://www.desipro.de/musl/base
src/gz kernel http://www.desipro.de/musl/kernel
src/gz luci http://www.desipro.de/musl/luci
src/gz management http://www.desipro.de/musl/management
src/gz packages http://www.desipro.de/musl/packages
src/gz routing http://www.desipro.de/musl/routing
src/gz targets http://www.desipro.de/musl/targets
src/gz telephony http://www.desipro.de/musl/telephony
dest root /opt
dest ram /tmp
lists_dir ext /opt/var/opkg-lists
option overlay_root /overlay
option check_signature 1

---- Also:
# opkg list-installed
dnscrypt-proxy - 1.7.0-1
dnscrypt-proxy-resolvers - 1.7.0+git-20160829-65a9553-1
libc - 1.1.14-1
libgcc - 5.3.0-1
libsodium - 1.0.11-2
<Kong>
DD-WRT Guru


Joined: 15 Dec 2010
Posts: 4339
Location: Germany

PostPosted: Sun Dec 11, 2016 20:49    Post subject: Reply with quote
kratosvn wrote:
<Kong> wrote:
The dnscrypt package from my repo works fine, see command output on latest build with dnscrypt installed from my repo:

dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443

You are either not running my build and using my repo, or you have some conflicting package repo in use.

Note: Only my repo is compatible with dd-wrt, all other package repos will not fully work with dd-wrt as they are not using a dd-wrt toolchain to compile packages.

In my private builds I already included dnscrypt.

Yeah don't know why but I wiped my /opt and "bootstrap" opkg again but looks like still doesn't work. Even tried it with fresh router with your different build still the same Err. Also I am pretty sure I am using only packages from your repo. See below
---
# opkg install dnscrypt-proxy-resolvers dnscrypt-proxy
Installing dnscrypt-proxy-resolvers (1.7.0+git-20160829-65a9553-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy-resolvers_1.7.0+git-20160829-65a9553-1_bcm53xx.ipk.
Installing libc (1.1.14-1) to root...
Downloading http://www.desipro.de/musl/base/libc_1.1.14-1_bcm53xx.ipk.
Installing libgcc (5.3.0-1) to root...
Downloading http://www.desipro.de/musl/base/libgcc_5.3.0-1_bcm53xx.ipk.
Installing dnscrypt-proxy (1.7.0-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy_1.7.0-1_bcm53xx.ipk.
Installing libsodium (1.0.11-2) to root...
Downloading http://www.desipro.de/musl/packages/libsodium_1.0.11-2_bcm53xx.ipk.
Configuring libgcc.
Configuring libc.
Configuring libsodium.
Configuring dnscrypt-proxy-resolvers.
Configuring dnscrypt-proxy.
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.

# dnscrypt-proxy
-sh: dnscrypt-proxy: not found

--- my opkg.conf:
src/gz base http://www.desipro.de/musl/base
src/gz kernel http://www.desipro.de/musl/kernel
src/gz luci http://www.desipro.de/musl/luci
src/gz management http://www.desipro.de/musl/management
src/gz packages http://www.desipro.de/musl/packages
src/gz routing http://www.desipro.de/musl/routing
src/gz targets http://www.desipro.de/musl/targets
src/gz telephony http://www.desipro.de/musl/telephony
dest root /opt
dest ram /tmp
lists_dir ext /opt/var/opkg-lists
option overlay_root /overlay
option check_signature 1

---- Also:
# opkg list-installed
dnscrypt-proxy - 1.7.0-1
dnscrypt-proxy-resolvers - 1.7.0+git-20160829-65a9553-1
libc - 1.1.14-1
libgcc - 5.3.0-1
libsodium - 1.0.11-2


run this command and show me the output:

ls -la `which dnscrypt-proxy`

_________________
KONG PB's: http://www.desipro.de/ddwrt/
KONG Info: http://tips.desipro.de/
kratosvn
DD-WRT Novice


Joined: 24 May 2015
Posts: 42

PostPosted: Sun Dec 11, 2016 23:24    Post subject: Reply with quote
<Kong> wrote:
kratosvn wrote:
<Kong> wrote:
The dnscrypt package from my repo works fine, see command output on latest build with dnscrypt installed from my repo:

dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443

You are either not running my build and using my repo, or you have some conflicting package repo in use.

Note: Only my repo is compatible with dd-wrt, all other package repos will not fully work with dd-wrt as they are not using a dd-wrt toolchain to compile packages.

In my private builds I already included dnscrypt.

Yeah don't know why but I wiped my /opt and "bootstrap" opkg again but looks like still doesn't work. Even tried it with fresh router with your different build still the same Err. Also I am pretty sure I am using only packages from your repo. See below
---
# opkg install dnscrypt-proxy-resolvers dnscrypt-proxy
Installing dnscrypt-proxy-resolvers (1.7.0+git-20160829-65a9553-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy-resolvers_1.7.0+git-20160829-65a9553-1_bcm53xx.ipk.
Installing libc (1.1.14-1) to root...
Downloading http://www.desipro.de/musl/base/libc_1.1.14-1_bcm53xx.ipk.
Installing libgcc (5.3.0-1) to root...
Downloading http://www.desipro.de/musl/base/libgcc_5.3.0-1_bcm53xx.ipk.
Installing dnscrypt-proxy (1.7.0-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy_1.7.0-1_bcm53xx.ipk.
Installing libsodium (1.0.11-2) to root...
Downloading http://www.desipro.de/musl/packages/libsodium_1.0.11-2_bcm53xx.ipk.
Configuring libgcc.
Configuring libc.
Configuring libsodium.
Configuring dnscrypt-proxy-resolvers.
Configuring dnscrypt-proxy.
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.

# dnscrypt-proxy
-sh: dnscrypt-proxy: not found

--- my opkg.conf:
src/gz base http://www.desipro.de/musl/base
src/gz kernel http://www.desipro.de/musl/kernel
src/gz luci http://www.desipro.de/musl/luci
src/gz management http://www.desipro.de/musl/management
src/gz packages http://www.desipro.de/musl/packages
src/gz routing http://www.desipro.de/musl/routing
src/gz targets http://www.desipro.de/musl/targets
src/gz telephony http://www.desipro.de/musl/telephony
dest root /opt
dest ram /tmp
lists_dir ext /opt/var/opkg-lists
option overlay_root /overlay
option check_signature 1

---- Also:
# opkg list-installed
dnscrypt-proxy - 1.7.0-1
dnscrypt-proxy-resolvers - 1.7.0+git-20160829-65a9553-1
libc - 1.1.14-1
libgcc - 5.3.0-1
libsodium - 1.0.11-2


run this command and show me the output:

ls -la `which dnscrypt-proxy`

there you go:
# ls -la `which dnscrypt-proxy`
-rwxr-xr-x 1 root root 115144 Aug 16 14:42 /opt/usr/sbin/dnscrypt-proxy
t81
DD-WRT User


Joined: 04 Nov 2015
Posts: 59

PostPosted: Sun Jan 29, 2017 15:48    Post subject: dnscrypt-proxy on tp-link archer c7v2 Reply with quote
Noob question here:
In order to start using and setting up dnscrypt-proxy do I need to upload all the files from
http://files.lancethepants.com/Binaries/dnscrypt-proxy/arm/dnscrypt-proxy%201.9.1/
to /jffs?
I have just enabled and formated jffs (Total / Free Size 2,240.00 KB / 2,044.00 KB)
There is only a /tmp dir there, shall I create another dir e.g /bin or /dnscrypt-proxy?
r6300v2usr
DD-WRT Novice


Joined: 03 Jan 2017
Posts: 49
Location: Lindau, Germany

PostPosted: Sun Jan 29, 2017 16:22    Post subject: Re: dnscrypt-proxy on tp-link archer c7v2 Reply with quote
t81 wrote:
Noob question here:
In order to start using and setting up dnscrypt-proxy do I need to upload all the files from
http://files.lancethepants.com/Binaries/dnscrypt-proxy/arm/dnscrypt-proxy%201.9.1/
to /jffs?
I have just enabled and formated jffs (Total / Free Size 2,240.00 KB / 2,044.00 KB)
There is only a /tmp dir there, shall I create another dir e.g /bin or /dnscrypt-proxy?


In the last KONG releases dnscrypt is already implemented. It can be enabled by GUI. So normally no need to upload anything.
Goto page Previous  1, 2, 3, 4, 5, 6, 7, 8  Next Display posts from previous:    Page 7 of 8
Post new topic   Reply to topic    DD-WRT Forum Index -> Broadcom SoC based Hardware All times are GMT

Navigation

 
Jump to:  
You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum
You cannot vote in polls in this forum
You can attach files in this forum
You can download files in this forum