bitbeans / SimpleDnsCrypt

A simple management tool for dnscrypt-proxy
https://simplednscrypt.org
MIT License
2.3k stars 233 forks source link

Windows Versions #5

Closed bitbeans closed 6 years ago

bitbeans commented 9 years ago

Tested on:

tolgahan4 commented 7 years ago

doesnt work with kaspersky internet security 2016 (17.0.0.611) when i close kaspersky its working

goodmail commented 7 years ago

I have the same issue here with Kaspersky Internet Security.

I managed to make DNSCrypt (GUI 0.20) work by enabling the service for the actual network adapter and also for the adapter "Kaspersky Security Data Escort Adapter". But this version was very unstable, sometimes works, sometimes simply doesn't work, it was intermittent. So I decided to try SimpleSNDCrypt, but setting this the same work doesn't make it work at all.

When I close KIS everything work again. I tried to add "dnscrypt-proxy.exe" to trustworthy programs, added network rule to allow UDP port 53, but did not work.

The issue is probably with KIS, but someone could give some help to config it properly.

bitbeans commented 7 years ago

@tolgahan4 @goodmail can you report this to kaspersky? Does kaspersky give some details?

https://www.virustotal.com/de/file/737238d28958d928bdd034958e471898b0ca0be4891aca6aa605296c614ffd96/analysis/1480486142/

goodmail commented 7 years ago

@bitbeans I did report, but I'm still waiting for a solution. As soon I get one (and if) I will post here.

George-R-O commented 7 years ago

I've just installed SimpleDnsCrypt V 0.3.6 (Windows 10 Anniversary release 1607 OS Build 14393.447) but it seems that I cannot get it to work - all I get is.... "Server not found Firefox can't find the server at xxxxxxx .com.

Both .NET 4.5. and Visual C++ Redistributable for Visual Studio 2015 x86 are installed so all appears well there BUT I also have Kaspersky Internet Security 2017 installed. I've check the firewall set up and SimpleDnsCrypt appears to be a trusted application but, even when disabling / pausing Kaspersky I still get the "Server not found" error. Slàinte Mhath!

menoss45 commented 7 years ago

i have problem , when i click network cards why that didn't checklist ? this never did before

virtualizado commented 7 years ago

For me in Windows 7, English, 64 bits: 1) SimpleDNSCrypt always had a problem of being too slow to open up and start the program. 2) Since the latest update, 0.3.7, after EVERY REBOOT my windows is without dns, i need to open simplednscrypt and start the "service" in the main window. Primary and secondary are always off after restart. And the program takes more than 30 or 40 seconds to open the first time so is really annoying. Also, in services.msc, the primary and secondary are in automatic.

bitbeans commented 7 years ago

I`am working on 0.3.8. Stay tuned :)

virtualizado commented 7 years ago

3) WHen we are browsing the DNS LIST in simpleDnsCrypt, we like to CHECK if there is a DNSSEC OK in the servers. But when we click a name to see, it already changes and makes us wait 5 seconds for every dns name that we want to check the DNSSEC options in dns list.

4) EVERY SERVER says DNS QUERIES ARE NOT BEING CONSISTENTLY ANSWERED http://imgur.com/a/0nFdN

5) When a DNSSEC server is NOT WORKING, as i check on DNSBENCH, simplednscrypt still says it`s ok and working.

virtualizado commented 7 years ago

Thanks for the fast answer, bitbeans!!!

agungindrawan commented 7 years ago

Hi, I would like to report a problem. I'm using Simple DNSCrypt 0.3.7 (IPv6 disabled) on Windows 10 x64 Version 1607.

  1. Whenever I enabled [Use TCP port 443], DNS lookup will fail. I already tried disabling my firewall (TinyWall) and exit Kaspersky Antivirus (not merely disabling it) but DNS lookup will still fail.
  2. There is no [DNS response cache] option in [Available extensions] as described in Simple DNSCrypt homepage.

Any help will be much appreciated, especially issue no 1. Thank you.

simple-dnscrypt-0 3 7-ext

bitbeans commented 7 years ago

@agungindrawan maybe Kaspersky Antivirus is blocking something. 0.3.9 now includes the announced cache plugin

George-R-O commented 7 years ago

Regarding Kaspersky, KIS 2017, using v 0.3.7 and v 0.3.8, I cannot reach any website when KIS 2017 is installed. Pausing and exiting KIS 2017 makes no difference ONLY AFTER uninstalling KIS 2017 will SimpleDnsCrypt work as it should. Testing at https://browserleaks.com/webrtc proves it's working OK.

I have an ongoing problem report with Kaspersky and yesterday sent a full diagnostic report plus trace logs of the issue. I'll report back when I get a response.

Meantime, after upgrading to 0.3.9, now I can't even select the active ethernet card!

jedisct1 commented 7 years ago

There have been multiple discussions on Kaspersky's forums about this.

This is a known bug in KIS 2017, that they have finally fixed in KIS 2018. People having received the beta version of KIS 2018 confirmed that Simple DNSCrypt works.

Meanwhile, the workaround suggested by the Kaspersky support team is to "disable analysis of encrypted traffic". I don't remember where that knob sits in the KIS settings as I don't use it. Given the level of attention that part of KIS has received regarding security (see https://bugs.chromium.org/p/project-zero/issues/detail?id=978 ), disabling that feature may actually improve your overall security no matter what.

George-R-O commented 7 years ago

Thanks jedisct1,

I tried setting KIS 2017 "disable analysis of encrypted traffic" but still not working - perhaps I need to reboot / reinstall?

KIS 2018? Really.... we've just made it into 2018! :)

On the otherhand my problem with V 0.3.9 not allowing selection of the active ethernet connection has gone....

agungindrawan commented 7 years ago

I'm sorry I'm not clear about which version of Kaspersky Antivirus I'm currently using. I'm currently using 2016 version. I too have problem when KAV auto-updated to 2017. DNS-Crypt simply not working in KAV/KIS 2017. I opened issues in My Kaspersky portal but after several suggested fixes from Kaspersky tech support simply not working, I'm downgrading to KAV 2016 and disabled auto-update.

DNS lookup will resolve normally when TCP setting disabled. This is nslookup output when TCP setting enabled.

DNS request timed out. timeout was 2 seconds. Server: UnKnown Address: 127.0.0.1

Is there is a software I can use to troubleshoot this? It seem dns packet blocked somewhere.

Btw, just updated to 0.3.9, thank you for secondary resolver support :-)

p1nkyy commented 7 years ago

Latest version kept crashed here. Here's the log from the error message: Problem signature: Problem Event Name: CLR20r3 Problem Signature 01: SimpleDnsCrypt.exe Problem Signature 02: 0.3.9.0 Problem Signature 03: 586ca2e3 Problem Signature 04: mscorlib Problem Signature 05: 4.0.30319.34209 Problem Signature 06: 534894cc Problem Signature 07: 254 Problem Signature 08: 10 Problem Signature 09: System.Windows.Markup.XamlParse OS Version: 6.1.7601.2.1.0.256.1 Locale ID: 1033 Additional Information 1: 0a9e Additional Information 2: 0a9e372d3b4ad19135b953a78882e789 Additional Information 3: 0a9e Additional Information 4: 0a9e372d3b4ad19135b953a78882e789

I'm in Win 7 64 bit, with Norton Security 22.8.

bitbeans commented 7 years ago

@p1nkyy do you have .NET 4.6 installed?

p1nkyy commented 7 years ago

@bitbeans No I don't. The latest I have is .NET 4.5.2 Do I have to? I will install then. Trying to install previous ver also didn't work, it keeps closing by itself.

bitbeans commented 7 years ago

@p1nkyy 0.3.9 and 0.4.0 requires .NET 4.6

George-R-O commented 7 years ago

Official response from Kaspersky Internet Security 2017

Dear customer, Thank you for your patience. Our Moscow HQ has confirmed that what you have faced is a known bug in the program, which is due to be resolved in the next major update for Kaspersky. Unfortunately we do not have a specific time frame for the release but we have tagged this ticket appropriately so that we will let you know once it's available. We apologize for the inconvenience and please let us know if there's anything else we can assist you with in the meantime. To reply to this request, you can simply reply to this e-mail leaving the subject line unchanged. If we do not receive a response from you within 7 days, your request will be considered resolved by our system. If you would like us to leave your request open, you can simply let us know by replying to this e-mail or sending a new reply through My Kaspersky. Best regards, Kaspersky Lab Technical Support

Damn I've just purchased a new 5 machine 1 year license!!! :( Pausing or exiting Kaspersky doesn't fix the problem either ONLY after uninstalling will SimpleDnsCrypt work!!

agungindrawan commented 7 years ago

@George-R-O Yes, In my case I simply downgraded to 2016 version.

Btw about TCP setting that if enabled will make dns lookup fail, it turns out different resolvers give different results. Several will success, others fails. So if anyone encounters similar problem, hope this helps.

inserm94 commented 7 years ago

Hello,

Following the failure of the update of "Simple DNSCrypt" I had to update "framework NET 4.6" (NDP46-KB3045560-Web.exe) which allowed to disable all the parasite services during the update of Framework Net 4.6 ".

OS: Windows 8.1 Pro x64

Installation of "Simple DNSCrypt" "(.msi) was successful.

image

virtualizado commented 7 years ago

Bitbeans... Lemme insist once more to see if you understand:

After that dual DNS update, Every time i RESTART my windows 7 machineS (even the virtual ones), this is the situation: SERVICES ARE TURNED OFF AFTER RESTART. See? No DNS. No internet. Things that should run automaticly freeze because of that, specially remote jobs. PLUS, when i click to open DNSCRYPT, takes ages to open for the first time. Windows 7 64 bits, NET framework 4.6.2 in all of them.

image

Second thing, but not sooo urgent, or as important, is that the log is not working well... In the log file it is, but not inside the log live

image

Third thing, simplednscrypt is a software aimed for people that like to have control over things, and it should never update or communicate with other things than the dns itself without user consent. Buttons to auto-update dnslist and auto-update program on/off should be there too in my opinion.

For last, if i am a new user, and i want to test all the dns servers from the list, i need to CHANGE ONE BY ONE, i can not pre-select a DNS NAMESERVER just to see IP and if it has DNSSEC, for example, it does CHANGE DNS first. After some seconds to change, THEN i can see if the dnssec option is marked yes or no. Since they are NEW DNS SERVERS people are not used too, it is a hard time to test LATENCY ONE BY ONE. I need to open DNSBENCH and RUN TEST AGAIN after EVERY DNS SERVER I TEST.

image

And no matter the dns server i chose, in simplednscrypt it always say this: DNS QUERIES ARE NOT BEING CONSISTELY ANSWERED

image

For people like @pink problems, simplednscrypt should autocheck if things like required net framework version are needed or not. Usually people just download the software and install it. Several friends i recomended simplednscrypt gave up after install because the first run gave an error, but not explaining that they had missing net framework requirement.

inserm94 commented 7 years ago

Hello, could you check the configurations from my screenshots below. Do you have the same configurations on your PC?

You must be static IP addressing to force Windows to use the DNSCrypt DNS servers, and be on localhost (127.0.0.1 - 127.0.0.2) on the TCP / IP properties of your Ethernet (physical)

screenshot-github1

screenshot-github2

screenshot-github3

ivodoko commented 7 years ago

The latest version (0.4.0) will not start on my machine (Windows 7 64-bit) - trying to start the UI results in a crash. Here are the crash dump files.

bitbeans commented 7 years ago

@ivodoko try 0.4.1

ivodoko commented 7 years ago

@bitbeans Yep, it works now. Thanks! :)

virtualizado commented 7 years ago

Still not solved. It worked on my win 7 64 bits machines, the service autostart began to fail with the secondary dns version. Maybe incompatibility with Comodo? Or ADVANCED SYSTEM CARE? I use those 2. It happens on both host machines as inside virtual machines. I need to manually open the program and start the services before i have DNS.

image

image

image

I get those errors in windows event viewer every startup. I don't even know if it is working correctly.

FaPrivatliv commented 7 years ago

dnscrypt gui status Hello All,

I just installed version 0.4.1 on my Windows 10 64 laptop and when I click the first network connection connecting directly to my ISP (whose DNS servers I want to replace), it remains grayed out. I don't seen anything in the error logs indicating a problem with this application. I'm not sure what to do next. Below is a screenshot of the GUI. Please let me know what I should do to get this working. Thank you.

truthsword commented 7 years ago

Same issue as virtualizado commented on Jan 13, except Win 8.1-64. Each Windows restart I have no connectivity since Primary DNS service button is "off" I checked services and dnscrypt-proxy is set to automatic (and is running).

Also, like virtualizado commented on Feb 6, I have errors (3) in Event Viewer with every restart:

Faulting application name: dnscrypt-proxy.exe, version: 0.0.0.0, time stamp: 0x0003ca00 Faulting module name: dnscrypt-proxy.exe, version: 0.0.0.0, time stamp: 0x0003ca00 Exception code: 0xc0000005 Fault offset: 0x0001d94c Faulting process id: 0x9e4 Faulting application start time: 0x01d2ad4bb3920081 Faulting application path: D:\Program Files (x86)Simple DNSCrypt\dnscrypt-proxy\dnscrypt-proxy.exe Faulting module path: D:\Program Files (x86)Simple DNSCrypt\dnscrypt-proxy\dnscrypt-proxy.exe Report Id: 3999e839-193f-11e7-88cd-6c71d932922e Faulting package full name: Faulting package-relative application ID:

If I call up the GUI and switch on Primary DNS service button, then all is well.

I need this to autostart with login.

yidc9 commented 7 years ago

I can not install the SimpleDNSCrypt. The error that I encounter when I am at the middle of setup is: "A program required for this install to complete could not be run. Contact your support personnel or package vendor." I have also installed .NET Framework 4.6.2 and am using Windows 8.

glnzglnz commented 7 years ago

Just installed on Win 7 Pro 64-bit and seems to be working. But is there a manual or guide to the settings? I'm just a real estate lawyer, not a tech wizard like yourself. EDIT: Also, I went to dnsleaktest.com on both (1) this machine with Simple DNSCrypt and (2) a different machine without. Since I already had the two OpenDNS IPs in my modem-router as static DNS for WAN, and since my choice of Primary Resolver in Simple DNSCrypt is Cisco OpenDNS, the results on both machines are the same: both dnsleaktest.com tests point to an IP owned by OpenDNS. That's certainly good, but how can I test whether Simple DNSCrypt is working? Change the Primary Resolver to something else? Sorry for dumb question. (By the way, I am surprised that Cisco OpenDNS is not DNSSEC.) EDIT: FYI - My Visual C++ Redistributables (x86) are 2013 and 2017; I don't have 2015. EDIT: As noted, my Win 7 Pro is 64-bit. Is there a 64-bit version of Simple DNSCrypt? Many thanks !!

Zenith-Nadir commented 7 years ago

Great News with IPv6 in SimpleDnsCrypt ver. 0.4.2; Windows 10 x64, anniversary edition. SUCCESS! described in the link below showing as "#1": https://github.com/bitbeans/SimpleDnsCrypt/issues/1 Zenith-Nadir

ghost commented 7 years ago

"not all the necessary files in dnscrypt proxy folder are found reinstalling the application is recommended"

Net Framework 4.6.2 and Microsoft C++ 2015 x64/x86 (+ older) installed, clean install within VM box.

spamkutu commented 6 years ago

Windows 8 support needs, Its not work after 0.4.2 Simple DNSCrypt Instlled with coco so not sure if its possible to install again with coco if deleteted this one and its always ask upgrade but it cannot possible becouse of new requirment .net 4.6.2 ths installed windows 8 support for this latest 4.6.1.

So could you make .net 4.6.1 ver available for the windows 8 (not for 8.1 just for 8) thanks..

spamkutu commented 6 years ago

Is is possible to make new version suitable to .net version 4.6.1 or do you know how to install a way to install 4.6.2 or 4.7.1 to windows 8 waiting still and need that much thanks..

bitbeans commented 6 years ago

@spamkutu does this work: https://support.microsoft.com/en-us/help/3151802/the--net-framework-4-6-2-web-installer-for-windows ?

inserm94 commented 6 years ago

You have to install before an windows update to clean register (Framework) and install Net-Framework 4.6.2. You can also uninstall old Net-Framework and install new Framework here https://support.microsoft.com/en-us/help/3151802/the--net-framework-4-6-2-web-installer-for-windows

spamkutu commented 6 years ago

Nope its support latest one is 4.6.1 as official way. I heard an noofficial way to install it over windows 8 but dont know how to do if realy existed a way. Currently windows 8 support until 4.6.1 so we couln't install new versions with .net 4.6.2 and up.

mafiozio commented 6 years ago

New version 0.4.3 releaed few days ago has stopped working for me. I started to get an error message. I used 0.4.2 before under Win7x64Pro. Here is a screenshot:

https://www.screencast.com/t/62hPWf4h

I installed also "Microsoft Visual C++ Redistributable für Visual Studio 2017", but it does not help.

Any ideas how to solve it?

lrayze commented 6 years ago

It was working fine but not anymore since yesterday on my Windows 10 Pro Version 1709 Build 16299.64 64 bit.

imagen

MadScript77 commented 6 years ago

The "Block & Blacklist" feature seems to be broken. I tried adding Easylist to it. It said something like 10113 entries were blocked (that seemed odd, since Easylist has around 75K sites listed). So, when I enabled it, I started having problems loading some sites, including Google. I ended up having to reinstall the app to resolve the problem. I am running Windows 7 x64, and I tried both the x86 and x64 builds. They both seem to be exhibiting the same behavior.

rfxcll commented 6 years ago

Please update the url of public resolver list, there is a /v1/ on the new url. Refer to this : https://github.com/DNSCrypt/dnscrypt-resolvers/blob/master/v1/dnscrypt-resolvers.csv