dnscrypt-proxy 2 - A flexible DNS proxy, with support for encrypted DNS protocols.
blocked_query_response
. Responses can now be empty record sets, REFUSED
response codes, or predefined IPv4 and/or IPv6 addresses.refused_code_in_responses
and blocked_query_response
options have been folded into a new blocked_query_response
option.force_tcp
has been set to true
.-show-certs
to print DoH certificate hashes.query_meta
, is now available to add optional records to client queries.The example IP address for network probes didn't work on Windows - This is a regression introduced in version 2.0.24.
The example configuration file has been updated and the fallback resolver IP is now used when no netprobe address has been configured.
The previous version had issues with the .org
TLD when used in conjunction with dnsmasq.
This has been fixed.
The change to run the Windows service as NT AUTHORITY\NetworkService
has been reverted, as it was reported to break logging (Windows only).
There are no other changes. If you are running version 2.0.20 on non-Windows platforms, or if you installed the service yourself, upgrading is not necessary.
Oh, and if you know how to switch back to NT AUTHORITY\NetworkService
and still have the ability to write log files, your help would be welcome.
CLOAK
is logged when queries are being cloaked.refused_code_in_responses
to return (or not) a REFUSED
code on blacklisted queries. This is disabled by default, in order to work around a bug in Android Pie.generate-domains-blacklist.py
script.generate-domains-blacklist.py
script.NT AUTHORITY\NetworkService
.netprobe_timeout
was read from the command-line, but not from the configuration file any more. This is a regression introduced in the previous version, that has been fixed.