• Package installation
• Using the LuCI web interface
• Using the command line
• Edit configuration
• Backups
• Recommended tweaks
• Prevent DNS leaks outside of dnscrypt-proxy and disable dnsmasq cache
• Ensure NTP (Network Time Protocol) can work without DNS
• Optional: Completely disable ISP's DNS servers
• Force LAN clients to send DNS queries to dnscrypt-proxy
• Optional: Block LAN clients from using DoH servers directly
• Optional: Use dnscrypt-proxy for DNS rebinding protection
• Logging DNS queries with client IPs
• Verifying the configuration
• Check that you are not using your ISP resolver any more:
• Check that processes on the router use dnsmasq:
• 3rd party DNS tests