openwrt / packages

Community maintained packages for OpenWrt. Documentation for submitting pull requests is in CONTRIBUTING.md
GNU General Public License v2.0
3.94k stars 3.45k forks source link

dnscrypt-proxy2: default config is blocking legitimate sites #15504

Closed ipha closed 3 years ago

ipha commented 3 years ago

Maintainer: @BKPepe Environment: x86, qemu, 19.07.7

Description: After banging my head against an API that refused to connect at home, I discovered that openwrt is changing the default behavior of dnscrypt-proxy and filtering DNS queries.

A DNS server shouldn't be filtering queries unless configured to do so or advertised as as ad-blocking solution. Additionally, the example blocklist provided by upstream is very crude and I don't believe is intended to be used as-is.

jamesmacwhite commented 3 years ago

This is interesting, as I recent tried out dnscrypt-proxy2. Some domain queries were just failing outright. One such example was any DNS query that was ads.something.com I first thought it was adblock but confirming the domain had no matching rules it then led me to DNSCrypt. In the end I decided to go with Stubby and do DNS-over-TLS, but it is interesting it wasn't just me experiencing this. I didn't really look into it too much in the end.

BKPepe commented 3 years ago

On the same day, when I received the report from you, I cherry-picked the update of dnscrypt-proxy2 from openwrt-21-02 and master branch to `openwrt-19.07 together with changes in blocking websites. There are fewer sites right now, so it should be better.

Reference:

In any case, if you are willing to be a maintainer of this package, feel free to submit a pull request as I am not longer interested in it as I am not using it. Also, as always, pull requests are welcome.