search

corrad1nho / qomui

Qomui (Qt OpenVPN Management UI)
GNU General Public License v3.0
554 stars 56 forks source link

Use qomui alongside dnscrypt-proxy #85

Open runo280 opened 5 years ago

runo280 commented 5 years ago

I'm using dnscrypt-proxy and it's features like blacklist, in order to use it via system we should make /etc/resolv.conf read-only, but your app is trying to modify it, and it can't. Also dnscrypt-proxy running on port 53, and qomui wants to start dnsmasq service, as it wants to run on port 53 it can't (I mean dnsmasq). As I really needed it and I want to all dns queries goes through it, please help to solve these issues.

snevas commented 5 years ago

On Ubuntu systems this is a problem as well as it uses systemd-resolved which listens on port 53.

corrad1nho commented 5 years ago

Dnsmasq is only needed for bypass. You can also set custom DNS servers (such as 127.0.0.1) via the option tab. Would it help including a setting not to overwrite DNS server at all?

runo280 commented 5 years ago

Maybe, I don't know really, also it shouldn't try to touch /etc/resolv.conf.

corrad1nho commented 5 years ago

Why shouldn't it? Do you mean it'd be better to set DNS servers via systemd-resolved? This would add another dependency, though, that I'd like to avoid. However, Qomui could check for the presence of this service and change DNS servers accordingly.

runo280 commented 5 years ago

Please look at dnscrypt installation guide, I changed contents of the /etc/resolv.conf and made it read only chattr +i /etc/resolv.conf, I want it to be the unique dns resolver that system uses.

corrad1nho commented 5 years ago

Ok, I will implement an option to leave DNS servers unchanged, i.e. to not override /etc/resolv.conf.

corrad1nho commented 5 years ago

Additionally, the next release will include an option to not use dnsmasq at all.