<html><head></head><body><div style="font-family:Helvetica Neue, Helvetica, Arial, sans-serif;font-size:16px;"><div>Hello</div><div><br></div><div>I am using unbound from Git version: 1.6.9 and have compiled it with --enable-dnscrypt .</div><div>This is my unbound.conf setup;</div><div><br></div><div># unbound.conf for a local subnet.#<br>server: <br> interface: 0.0.0.0<br> interface: ::0<br> access-control: 192.168.0.0/16 allow <br> access-control: ::1 allow<br> <br> # DNSCRYPT server: #######<br> interface: 0.0.0.0@443<br> interface: ::0@443<br> <br> directory: "/usr/local/etc/unbound"<br> chroot: "" <br> username: ""<br> verbosity:0 <br> num-threads: 1<br> prefetch:yes <br> prefetch-key:yes<br> use-syslog:no<br> do-ip6: no <br> so-reuseport: yes<br> module-config: "validator iterator"<br> <br> do-not-query-localhost: no<br> <br> # file to read root hints from.<br> #get one from ftp://FTP.INTERNIC.NET/domain/<br> root-hints: "/usr/local/etc/unbound/named.cache"<br> ############################################################<br> include: "/usr/local/etc/unbound/unbound_ad_servers" <br> #update the above file by using below command as root :<br> #curl -sS -L --compressed "http://pgl.yoyo.org/adservers/serverlist.php?hostformat=unbound&showintro=0&mimetype=plaintext" > /usr/local/etc/unbound/unbound_ad_servers<br> <br> logfile: "/usr/local/etc/unbound/unbound.log"<br> <br> log-time-ascii:yes<br><br> ####################################################<br><br> #auto-trust-anchor-file: "/usr/local/etc/unbound/root.key" #root key file, automatically updated##### remove # only for DNSSEC capable dns servers ##########<br> #################################################### <br><br> #Remote control config section. <br> remote-control:<br> # Enable remote control with unbound-control(8) here.<br> # set up the keys and certificates with unbound-control-setup.<br> control-enable:yes<br> <br> ######DNSCRYPT############<br> dnscrypt:<br> dnscrypt-enable:yes<br> dnscrypt-port:443<br> dnscrypt-provider:2.dnscrypt-cert.cryptostorm.is.<br> dnscrypt-secret-key:/usr/local/etc/unbound/1.key<br> dnscrypt-provider-cert:/usr/local/etc/unbound/1.cert<br> <br> forward-zone:<br> name: "."<br> forward-addr:5.101.137.251<br> <br><div> ###############################</div><div><br></div><div>The only lines I see in my unbound.log where dnscrypt is mentioned is this line that is repeated occasionally :</div><div><br></div><div>Jan 23 05:35:12 unbound[32581:0] notice: DNSCrypt: Freeing environment.</div><div><br></div><div>If I use the above unbound.conf and look on website<a href="https://whoer.net/"> https://whoer.net/</a></div><div>it shows my own ISP i.p address correctly and DNS<span class="ydp6c21d370cont ydp6c21d370dns_br_ip ydp6c21d370max_ip"> 5.101.137.251 correctly, which belongs to dnscrypt-provider:2.dnscrypt-cert.cryptostorm.is.</span></div><div><span class="ydp6c21d370cont ydp6c21d370dns_br_ip ydp6c21d370max_ip"><br></span></div><div><span class="ydp6c21d370cont ydp6c21d370dns_br_ip ydp6c21d370max_ip">If I change it to :<br></span></div><div><span class="ydp6c21d370cont ydp6c21d370dns_br_ip ydp6c21d370max_ip"></span><div>#forward-zone:<br> # name: "."<br><div> #forward-addr:5.101.137.251</div><div><br></div><div>my DNS address then shows my own ISP DNS , but I presume it should show 5.101.137.251 if dnscrypt was working correctly.<br></div><div><br></div><div><br></div><div>If I change it to :</div><div><br></div><div>#dnscrypt:<br> # dnscrypt-enable:yes<br> #dnscrypt-port:443<br> #dnscrypt-provider:2.dnscrypt-cert.cryptostorm.is.<br> #dnscrypt-secret-key:/usr/local/etc/unbound/1.key<br> #dnscrypt-provider-cert:/usr/local/etc/unbound/1.cert<br></div></div></div><div><div><br></div><div>forward-zone:</div> name: "."<br><div> forward-addr: my DNS address then shows </div><div><br></div><div>my DNS address then shows again as 5.101.137.251 .</div><div><br></div><div><br></div><div>Can I presume dnscrypt is not working correctly and is there any suggestions as to how I can get it to work please ?<br></div><div><br></div><div><br></div><div>thanks</div><div><br></div><div>Peter<br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div><div><br></div></div><div><br></div><div><br></div><div><br></div></div></div></body></html>