mosajjal / sniproxy

SNI Proxy with Embedded DNS Server
BSD 2-Clause "Simplified" License
177 stars 38 forks source link

Some websites not opening, dot and doh usage #88

Closed mehdiabr closed 2 months ago

mehdiabr commented 1 year ago

Hi engineer.  Sorry, I am an amateur user and I have 3 questions and problems. 1_ In the script installation stage, is it better to enable the "dns over tcp or tls or quic" option or not? and if we choose 'dot', do we have to do something else? 2_My service is successfully installed and running, but there are many sites that don't open!! Of course,what is important and necessary for me is Google domains. 3_In some apps, such as the "intra" app or in the 'private dns' section of our phone's settings, we have to enter an 'url address'. Is it also possible to use the domain address instead of the 'IP' in clients when using sniproxy?

mosajjal commented 1 year ago

Hi brother.

1) if you're running this from Iran, it depends on the device you're using this with. for Android, DoH (Dns over HTTPS) is what's used. refer to the documentation on how to enable it. you need to enable DoH in an ACL setting rather than in the wizard.

2) feel free to send me the logs produced by sniproxy. keep in mind that the logs might contain sensitive information like your IP address so please remove them before sending it here.

3) refer to the answer in 1 for that. you should specify a subdomain, get a certificate configure sniproxy to use that certificate in order for your device to use it.

hopefully this helps.

mehdiabr commented 1 year ago

Hi. I have 2 servers. On both servers, the script was installed successfully. But when I check its status, it says "failed". I send their log file. 1Logntsniproxy.txt 2Logfrsniproxy.txt Also I did not understand what you mean about the possibility of installing "doh" and the document related to it. If possible, leave the link related to it.

mosajjal commented 1 year ago

when you go through the auto-install wizard, it creates a minimal configuration file located here:

/opt/sniproxy/config.yaml

if you want to change/enhance the config, or add Dns-over-HTTPS, you need to edit that file. A complete template of the configuration file including comments/documentation is available here. hopefully this helps :)

mehdiabr commented 11 months ago

Thanks.I have 3 problems. 1During the installation, when I want to give the path of the certificate and key, I get an error.(error 1:22 invalid input text "/etc/letsencrypt/.......), Please see the screenshot. 2 Also, when I do 'dns leak test', I see dns from another country!! But I want only dns of the same country as my server to be used. To solve this problem, should I use dns of the same country as my server instead of 9.9.9.9?

3_And the main problem is that when I try to open some sites like "Google.com or maps.google.com" (even in the inprivate tab), it notices my real IP location and shows Iran!!!

mosajjal commented 11 months ago

both these issues (1 and 2) should be fixed now. for 3, I think you need to test against https://ident.me etc to get your public facing IP. Google doesn't solely rely on IP to geolocate you so there might be additional steps that you need to take.

mehdiabr commented 11 months ago

After the last changes, if we give the path of the certificate file &key to the script during installation, it will be installed, but it will not be executed(running: failed)! You can check it yourself. Of course,no problem, after installation, I manually applied them in the config file. And the service is running successfully. but "doh" service does not work!! please look at my config file to see where the problem is. Sniproxyconfig.txt

mosajjal commented 11 months ago

can you please also share the service logs as well?

mehdiabr commented 11 months ago

Hi, was my 'doh' settings correct? I don't know enough about Linux.And after running the journal -u sniproxy command, I copied these logs.(Both files are same and related to the same time). Sni journal log.txt Snijournallog.txt

mehdiabr commented 11 months ago

The 2 main problems of this service at the moment are: 1_The "doh" function of the service does not work. 2And that the service does not respond after some time (sites cannot be opened) while the service is running.!! Until i restart the server....

mosajjal commented 2 months ago

I'll close this since there's been many changes from a year ago. please re-open with specifics and we'll go from there.