I got it. Not really sure what did it other than make sure the listeners were up and validate the DNSMasq and DNS server configurations were correct. Hope this information helps:
Non-authoritative answer:
debug.opendns.com text =
"server 5.REDACTED"
...
debug.opendns.com text =
"source REDACTED_WAN_IP:54226"
debug.opendns.com text =
"dnscrypt enabled (REDACTED)"
...
OBSERVATIONS:
You get more information if you don't "daemonize" the process, at least initially until you get it going:
Code:
root@R7000:~# dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443
Whereas daemonizing (-d switch) gives you:
Code:
root@R7000:~# dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv -d
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
root@R7000:~#
I run to the weird case. Already installed dnscrypt-proxy through opkg as you mentioned above but can not start it.
root@asus# dnscrypt-proxy -V
-sh: dnscrypt-proxy: not found
# nvram get DD_BOARD
Asus RT-AC68U
~# which dnscrypt-proxy
/opt/usr/sbin/dnscrypt-proxy
or :
#dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
sh: dnscrypt-proxy: not found
Looks like here is the issue:
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.
I am not an advanced user at all and am waiting until Kong can put this in the firmware... but running dnscrypt on my mac laptop and everything is slow. Can't watch a youtube or twitch video without constant buffering and I picked the dnscrypt server that is right in my city.
I run to the weird case. Already installed dnscrypt-proxy through opkg as you mentioned above but can not start it.
root@asus# dnscrypt-proxy -V
-sh: dnscrypt-proxy: not found
# nvram get DD_BOARD
Asus RT-AC68U
~# which dnscrypt-proxy
/opt/usr/sbin/dnscrypt-proxy
or :
#dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
sh: dnscrypt-proxy: not found
Looks like here is the issue:
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.
I'm not sure what this error is or how to fix it. Is Kong's repo compatible with your unit? _________________ R7000 Nighthawk - DD-WRT v3.0-r50308
R7000 Nighthawk - DD-WRT v3.0-r50308
~~~~~~~~~~Dismantled for learning opportunities~~~~~~~~~~
WRT54Gv2
WRT54Gv8.2
~~~~~~~~~~Other Settings~~~~~~~~~
https://nextdns.io/?from=2d3sq39x https://pi-hole.net/ https://github.com/DNSCrypt/dnscrypt-proxy
I got this errors out looks like it doesn't work either:
ln: ld-linux.so.3: Operation not permitted
ln: libc.so.6: Operation not permitted
Info: Basic packages installation...
sh: /opt/bin/opkg: not found
sh: /opt/bin/opkg: not found
Connecting to pkg.entware.net (81.4.123.217:80)
wget: can't open '/opt/usr/lib/locale/locale-archive': No such file or directory
Info: Congratulations!
Info: If there are no errors above then Entware-ng was successfully initialized.
Info: Add /opt/bin & /opt/sbin to your PATH variable
Info: Add '/opt/etc/init.d/rc.unslung start' to startup script for Entware-ng services to start
Info: Found a Bug? Please report at https://github.com/Entware-ng/Entware-ng/issues
So assuming it DOES NOT work with Router ModelAsus RT-AC68U yet. And we need to wait from KONG to push it to firmware update
My Firmware Version DD-WRT v3.0-r30910M kongac (12/02/16)
Last edited by kratosvn on Sun Dec 11, 2016 18:45; edited 3 times in total
I run to the weird case. Already installed dnscrypt-proxy through opkg as you mentioned above but can not start it.
root@asus# dnscrypt-proxy -V
-sh: dnscrypt-proxy: not found
# nvram get DD_BOARD
Asus RT-AC68U
~# which dnscrypt-proxy
/opt/usr/sbin/dnscrypt-proxy
or :
#dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
sh: dnscrypt-proxy: not found
Looks like here is the issue:
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.
I'm not sure what this error is or how to fix it. Is Kong's repo compatible with your unit?
I think so my router CPU ModelBroadcom BCM4708
# opkg print-architecture
arch all 1
arch noarch 1
arch bcm53xx 10
# opkg status dnscrypt-proxy
Package: dnscrypt-proxy
Version: 1.7.0-1
Depends: libc, libsodium, dnscrypt-proxy-resolvers
Status: install user installed
Architecture: bcm53xx
You'll need the ARM7 packages, I believe for your router.
Though, the Entware installer shouldn't be throwing errors like that. If however you've been using bootstrap it could be causing conflicts, you might want to hold off until perhaps Kong chimes in.
Or wipe your USB storage and start fresh. _________________ James
Main router:
Netgear R7000 overclocked to 1.2GHz - DD-WRT v3.0-r35965M kongac
IPv6 6in4 (HE.net), OpenVPN (with PBR and split tunnelling), Entware, dnsmasq with ipset
You'll need the ARM7 packages, I believe for your router.
Though, the Entware installer shouldn't be throwing errors like that. If however you've been using bootstrap it could be causing conflicts, you might want to hold off until perhaps Kong chimes in.
Or wipe your USB storage and start fresh.
how can I install to use ipkg ?
# ipkg
-sh: ipkg: not found
The dnscrypt package from my repo works fine, see command output on latest build with dnscrypt installed from my repo:
dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443
You are either not running my build and using my repo, or you have some conflicting package repo in use.
Note: Only my repo is compatible with dd-wrt, all other package repos will not fully work with dd-wrt as they are not using a dd-wrt toolchain to compile packages.
The dnscrypt package from my repo works fine, see command output on latest build with dnscrypt installed from my repo:
dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443
You are either not running my build and using my repo, or you have some conflicting package repo in use.
Note: Only my repo is compatible with dd-wrt, all other package repos will not fully work with dd-wrt as they are not using a dd-wrt toolchain to compile packages.
In my private builds I already included dnscrypt.
Yeah don't know why but I wiped my /opt and "bootstrap" opkg again but looks like still doesn't work. Even tried it with fresh router with your different build still the same Err. Also I am pretty sure I am using only packages from your repo. See below
---
# opkg install dnscrypt-proxy-resolvers dnscrypt-proxy
Installing dnscrypt-proxy-resolvers (1.7.0+git-20160829-65a9553-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy-resolvers_1.7.0+git-20160829-65a9553-1_bcm53xx.ipk.
Installing libc (1.1.14-1) to root...
Downloading http://www.desipro.de/musl/base/libc_1.1.14-1_bcm53xx.ipk.
Installing libgcc (5.3.0-1) to root...
Downloading http://www.desipro.de/musl/base/libgcc_5.3.0-1_bcm53xx.ipk.
Installing dnscrypt-proxy (1.7.0-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy_1.7.0-1_bcm53xx.ipk.
Installing libsodium (1.0.11-2) to root...
Downloading http://www.desipro.de/musl/packages/libsodium_1.0.11-2_bcm53xx.ipk.
Configuring libgcc.
Configuring libc.
Configuring libsodium.
Configuring dnscrypt-proxy-resolvers.
Configuring dnscrypt-proxy.
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.
The dnscrypt package from my repo works fine, see command output on latest build with dnscrypt installed from my repo:
dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443
You are either not running my build and using my repo, or you have some conflicting package repo in use.
Note: Only my repo is compatible with dd-wrt, all other package repos will not fully work with dd-wrt as they are not using a dd-wrt toolchain to compile packages.
In my private builds I already included dnscrypt.
Yeah don't know why but I wiped my /opt and "bootstrap" opkg again but looks like still doesn't work. Even tried it with fresh router with your different build still the same Err. Also I am pretty sure I am using only packages from your repo. See below
---
# opkg install dnscrypt-proxy-resolvers dnscrypt-proxy
Installing dnscrypt-proxy-resolvers (1.7.0+git-20160829-65a9553-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy-resolvers_1.7.0+git-20160829-65a9553-1_bcm53xx.ipk.
Installing libc (1.1.14-1) to root...
Downloading http://www.desipro.de/musl/base/libc_1.1.14-1_bcm53xx.ipk.
Installing libgcc (5.3.0-1) to root...
Downloading http://www.desipro.de/musl/base/libgcc_5.3.0-1_bcm53xx.ipk.
Installing dnscrypt-proxy (1.7.0-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy_1.7.0-1_bcm53xx.ipk.
Installing libsodium (1.0.11-2) to root...
Downloading http://www.desipro.de/musl/packages/libsodium_1.0.11-2_bcm53xx.ipk.
Configuring libgcc.
Configuring libc.
Configuring libsodium.
Configuring dnscrypt-proxy-resolvers.
Configuring dnscrypt-proxy.
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.
The dnscrypt package from my repo works fine, see command output on latest build with dnscrypt installed from my repo:
dnscrypt-proxy -a 127.0.0.53:5353 -R cisco -L /opt/usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv
[INFO] - [cisco] does not support DNS Security Extensions
[WARNING] - [cisco] logs your activity - a different provider might be better a choice if privacy is a concern
[NOTICE] Starting dnscrypt-proxy 1.7.0
[INFO] Generating a new session key pair
[INFO] Done
[INFO] Server certificate with serial #1463092899 received
[INFO] This certificate is valid
[INFO] Chosen certificate #1463092899 is valid from [2016-05-12] to [2017-05-12]
[INFO] Server key fingerprint is ABA1:F000:D394:8045:672D:73E0:EAE6:F181:19D0:2A62:3791:EFAD:B04E:40B7:B6F9:C40B
[NOTICE] Proxying from 127.0.0.53:5353 to 208.67.220.220:443
You are either not running my build and using my repo, or you have some conflicting package repo in use.
Note: Only my repo is compatible with dd-wrt, all other package repos will not fully work with dd-wrt as they are not using a dd-wrt toolchain to compile packages.
In my private builds I already included dnscrypt.
Yeah don't know why but I wiped my /opt and "bootstrap" opkg again but looks like still doesn't work. Even tried it with fresh router with your different build still the same Err. Also I am pretty sure I am using only packages from your repo. See below
---
# opkg install dnscrypt-proxy-resolvers dnscrypt-proxy
Installing dnscrypt-proxy-resolvers (1.7.0+git-20160829-65a9553-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy-resolvers_1.7.0+git-20160829-65a9553-1_bcm53xx.ipk.
Installing libc (1.1.14-1) to root...
Downloading http://www.desipro.de/musl/base/libc_1.1.14-1_bcm53xx.ipk.
Installing libgcc (5.3.0-1) to root...
Downloading http://www.desipro.de/musl/base/libgcc_5.3.0-1_bcm53xx.ipk.
Installing dnscrypt-proxy (1.7.0-1) to root...
Downloading http://www.desipro.de/musl/packages/dnscrypt-proxy_1.7.0-1_bcm53xx.ipk.
Installing libsodium (1.0.11-2) to root...
Downloading http://www.desipro.de/musl/packages/libsodium_1.0.11-2_bcm53xx.ipk.
Configuring libgcc.
Configuring libc.
Configuring libsodium.
Configuring dnscrypt-proxy-resolvers.
Configuring dnscrypt-proxy.
Collected errors:
* extract_archive: Cannot create symlink from ./lib/ld-musl-arm.so.1 to 'libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/bin/ldd to '../../lib/libc.so': Operation not permitted.
* extract_archive: Cannot create symlink from ./usr/lib/libsodium.so.18 to 'libsodium.so.18.1.1': Operation not permitted.
Posted: Sun Jan 29, 2017 15:48 Post subject: dnscrypt-proxy on tp-link archer c7v2
Noob question here:
In order to start using and setting up dnscrypt-proxy do I need to upload all the files from
http://files.lancethepants.com/Binaries/dnscrypt-proxy/arm/dnscrypt-proxy%201.9.1/
to /jffs?
I have just enabled and formated jffs (Total / Free Size 2,240.00 KB / 2,044.00 KB)
There is only a /tmp dir there, shall I create another dir e.g /bin or /dnscrypt-proxy?
Joined: 03 Jan 2017 Posts: 49 Location: Lindau, Germany
Posted: Sun Jan 29, 2017 16:22 Post subject: Re: dnscrypt-proxy on tp-link archer c7v2
t81 wrote:
Noob question here:
In order to start using and setting up dnscrypt-proxy do I need to upload all the files from
http://files.lancethepants.com/Binaries/dnscrypt-proxy/arm/dnscrypt-proxy%201.9.1/
to /jffs?
I have just enabled and formated jffs (Total / Free Size 2,240.00 KB / 2,044.00 KB)
There is only a /tmp dir there, shall I create another dir e.g /bin or /dnscrypt-proxy?
In the last KONG releases dnscrypt is already implemented. It can be enabled by GUI. So normally no need to upload anything.