OPNsense Forum

Archive => 24.1, 24.4 Legacy Series => Topic started by: LOTRouter on February 07, 2024, 03:49:17 AM

Title: DNSCrypt-Proxy won't start
Post by: LOTRouter on February 07, 2024, 03:49:17 AM
After upgrading to to 24.1.1, my DNSCrypt-Proxy fails to start.  I even downloaded the config and removed the DNSProxy section from it and restored the config without it, and then tried starting DNSCrypt-Proxy with nothing configured and it still won't start.  I'm seeing this in the log:

[2024-02-06 18:45:48] [FATAL] Unsupported key in configuration file: [fallback_resolver]   

[2024-02-06 18:45:48] [NOTICE] dnscrypt-proxy 2.1.5
Title: Re: DNSCrypt-Proxy won't start
Post by: LOTRouter on February 07, 2024, 05:15:02 AM
This appears to be a fairly old problem with DNSCrypt-proxy:

https://github.com/DNSCrypt/dnscrypt-proxy/discussions/1979

Title: Re: DNSCrypt-Proxy won't start
Post by: LOTRouter on February 07, 2024, 05:29:35 AM
Very strange, but I ended up un-installing the DNSCrypt-Proxy plugin, and then reinstalling it, and that downgraded it, and now it works.  I have no idea where in the upgrade process it got upgraded in the first place, but the uninstall/reinstall sequence seems to fix it.

[2024-02-06 20:27:45] [NOTICE] dnscrypt-proxy 2.0.45

I also was using port 5353 before, but that stopped allowing it to start as well, so I changed to 5053:

127.0.0.1:5053 [::1]:5053
Title: Re: DNSCrypt-Proxy won't start
Post by: newsense on February 07, 2024, 08:42:09 AM
It was reverted in 24.1.1 indeed. I saw the commit but didn't have time to dig and find and associated issue
Title: Re: DNSCrypt-Proxy won't start
Post by: LOTRouter on February 08, 2024, 08:57:52 PM
Thanks for the follow up.  It looks like a fairly easy fix:

https://github.com/DNSCrypt/dnscrypt-proxy/discussions/1979
Title: Re: DNSCrypt-Proxy won't start
Post by: almodovaris on February 08, 2024, 11:47:21 PM
Why use DNScrypt? Unbound does DoT (yup, it works with dns.opendns.com also).
Title: Re: DNSCrypt-Proxy won't start
Post by: mimugmail on February 09, 2024, 05:50:28 AM
Fix will come in next update
Title: Re: DNSCrypt-Proxy won't start
Post by: LOTRouter on February 09, 2024, 04:46:41 PM
Quote from: almodovaris on February 08, 2024, 11:47:21 PM
Why use DNScrypt? Unbound does DoT (yup, it works with dns.opendns.com also).

I prefer DoH.  It's just a personal preference.