DNSCrypt / dnscrypt-resolvers

Lists of public DNSCrypt / DoH DNS servers and DNS relays
https://dnscrypt.info
1.2k stars 259 forks source link

ams-dnscrypt-nl doesn't resolve .ru domains #836

Closed artenax closed 11 months ago

artenax commented 1 year ago

This page https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v2/public-resolvers.md states:

ams-dnscrypt-nl Resolver in Amsterdam. Dnscrypt protocol. Non-logging, non-filtering, DNSSEC.

But the ams-dnscrypt-nl resolver responds to all .ru domains with NXDOMAIN. This means filtering is applied. I think you should remove ams-dnscrypt-nl.

query.log:

[2023-09-17 04:08:49]   127.0.0.1   google.com  A   PASS    181ms   ams-dnscrypt-nl
[2023-09-17 04:08:54]   127.0.0.1   google.ru   A   NXDOMAIN    154ms   ams-dnscrypt-nl
[2023-09-17 04:09:31]   127.0.0.1   yandex.ru   A   NXDOMAIN    172ms   ams-dnscrypt-nl
[2023-09-17 04:09:36]   127.0.0.1   yandex.com  A   PASS    170ms   ams-dnscrypt-nl

nx.log:

[2023-09-17 04:08:54]   127.0.0.1   google.ru   A
[2023-09-17 04:09:31]   127.0.0.1   yandex.ru   A
[2023-09-17 04:09:54]   127.0.0.1   ok.ru   A
[2023-09-17 04:10:00]   127.0.0.1   mail.ru A

dnscrypt-proxy.log:

[2023-09-17 05:00:48] [NOTICE] dnscrypt-proxy 2.1.5
[2023-09-17 05:00:48] [NOTICE] Network connectivity detected
[2023-09-17 05:00:48] [NOTICE] Now listening to 127.0.0.3:53 [UDP]
[2023-09-17 05:00:48] [NOTICE] Now listening to 127.0.0.3:53 [TCP]
[2023-09-17 05:00:48] [NOTICE] Source [public-resolvers] loaded
[2023-09-17 05:00:48] [NOTICE] Source [relays] loaded
[2023-09-17 05:00:48] [NOTICE] Firefox workaround initialized
[2023-09-17 05:00:53] [NOTICE] [ams-dnscrypt-nl] OK (DNSCrypt) - rtt: 128ms
[2023-09-17 05:00:53] [NOTICE] Server with the lowest initial latency: ams-dnscrypt-nl (rtt: 128ms)
[2023-09-17 05:00:53] [NOTICE] dnscrypt-proxy is ready - live servers: 1

dnscrypt-proxy.toml:

server_names = ['ams-dnscrypt-nl']
listen_addresses = ['127.0.0.3:53']
kkkgo commented 1 year ago

Maybe you can refer to this issue: https://github.com/DNSCrypt/dnscrypt-resolvers/issues/813 List of DNS servers that will filter: https://raw.githubusercontent.com/kkkgo/PaoPao-Pref/main/dnscrypt_resolver/ban_list.txt

kokial commented 11 months ago

issue fixed