[SOLVED] DNS Blocking with DNSCrypt-Proxy AKA os-dnscrypt-proxy

[Amanaki]

Hi all,

So, after migrating to OPNsense after many years of using OpenWRT, I got DNSCrypt-Proxy v2 working by installing it manually, adding my own custom blacklists, and configuring the .toml file to perform DNS blocking the way I had it working before.

With the recent release of the new os-dnscrypt-proxy, I performed a fresh install of OPNsense and decided to give this new plugin a try.

After installing and configuring it, it seems to be working the way I expect but one thing that is really bothering me is that I cannot get my DNS blocking configuration back as it seems any edits one makes to the dnscrypt-proxy.toml file are not persistent. Another words, they are overwritten by the plugin every single time.

Has anyone else had any experience with this for DNS blocking and if so, is it even possible to get DNS blocking working or do I need to revert back to manual configuration?

Thanks.

EDIT: I have received confirmation that DNS blocking is not supported in the plugin just yet.

[guest19757]

hello there,

You might want to have a look at the templates the plugins uses to generate the configs and see if they have any 'includes' somewhere you can dropin.

https://github.com/opnsense/plugins/tree/bface5bb83143675425c462b09235f6ee32fe710/dns/dnscrypt-proxy/src/opnsense/service/templates/OPNsense/Dnscryptproxy

I had a look, at first glance, doesn't seem possible unless you hand edit the template yourself, though those changes will typically get lost on updates.

Regards,
H

[Amanaki]

Yeah - not really aligned with my current skills unfortunately.

I decided to go back to the manual installation and got my DNS blocking working again the way I used to use it.

Thanks for the tip.