This repository has been archived by the owner. It is now read-only.

Independent block IP addresses and Domains names filtering #67

Open
TraderStf opened this Issue Aug 20, 2015 · 13 comments

Comments

Projects
None yet
4 participants
@TraderStf

TraderStf commented Aug 20, 2015

DNSCrypt contains 2 very interesting features that could be used even if the DNS server is not set to a DNSCrypt servers, the Block IP and Block Domains.

In other words the current status of Enable DNSCrypt checkbox would not stop/affect them.

          ( General | About | Release Notes | Help )

( ) Disable DNSCrypt Tool and use these static DNS Servers:
    208.67.222.222  2001:470:20::2

(•) Enable DNSCrypt Tool          Status:  Standby \^/

    [x] Use this DNSCrypt server:

        { OpenNIC Resolver Singapore 01 - d0wn  }

        Location:  Singapore
        Site:      https://dns.d0wn.biz
        Note:      Server provided ny Martin 'd0wn' Albus


    [x] Automatically disable DNSCrypt Tool if blocked

    [ ] Log DNS Queries            (     View Log     )

    [ ] Block replies containing Excluded IP Addresses
    [x] Block queries to Excluded Domain Names
    [x] Bypass DNSCrypt to resolve Direct Domains Names


Excluded IP Addresses     Excluded Domains Names      Direct Domains Names

208.67.0.255              *.example.com               localdomain
192.0.43.10               *ads.                       mycompany.example.net
::1

@alterstep

This comment has been minimized.

Show comment
Hide comment
@alterstep

alterstep Aug 20, 2015

Owner

How did you make this ASCII art?

This is the best issue ever! Way better than these really lousy screenshots. I love it!

These features are not in my app! They are built-in with the dnscrypt proxy, so sadly, they can't be used without dnscrypt.

Owner

alterstep commented Aug 20, 2015

How did you make this ASCII art?

This is the best issue ever! Way better than these really lousy screenshots. I love it!

These features are not in my app! They are built-in with the dnscrypt proxy, so sadly, they can't be used without dnscrypt.

@TraderStf

This comment has been minimized.

Show comment
Hide comment
@TraderStf

TraderStf Aug 20, 2015

Manually :-) like my html code when I made a site...

Should forward this idea to their team if you find it useful.
By default stays like today, so no big problem for anyone until GUI are updated.

It thought about that because my router can only block 10 IP and domains... how stupid!
So I was using github/gasmask and an adblocker...
Now I use LittleSnitch and ublock...

All these things can be in a single tool and on top of that, excluded items will be in all browsers/emails...

But why dnscrypt allow these 2 block IP/domains?

TraderStf commented Aug 20, 2015

Manually :-) like my html code when I made a site...

Should forward this idea to their team if you find it useful.
By default stays like today, so no big problem for anyone until GUI are updated.

It thought about that because my router can only block 10 IP and domains... how stupid!
So I was using github/gasmask and an adblocker...
Now I use LittleSnitch and ublock...

All these things can be in a single tool and on top of that, excluded items will be in all browsers/emails...

But why dnscrypt allow these 2 block IP/domains?

@TraderStf

This comment has been minimized.

Show comment
Hide comment
@TraderStf

TraderStf Aug 20, 2015

Well, you can still revamp the dialog interface like this one if you have nothing to do :-)))))))))))))))))

TraderStf commented Aug 20, 2015

Well, you can still revamp the dialog interface like this one if you have nothing to do :-)))))))))))))))))

@TraderStf

This comment has been minimized.

Show comment
Hide comment
@TraderStf

TraderStf Aug 20, 2015

I am thinking to an 'invisible' work-around, don't know if it is correct.
It is invisible to users, the users see the checkboxes.

Having the 2 blocks totally independent, is like having the following settings.

Bypass all . Domains minus the Blocked IP minus the Blocked Domains
and
DNSCrypt Servers are in fact the Static Server: 208.67.222.222 2001:470:20::2

TraderStf commented Aug 20, 2015

I am thinking to an 'invisible' work-around, don't know if it is correct.
It is invisible to users, the users see the checkboxes.

Having the 2 blocks totally independent, is like having the following settings.

Bypass all . Domains minus the Blocked IP minus the Blocked Domains
and
DNSCrypt Servers are in fact the Static Server: 208.67.222.222 2001:470:20::2

@alterstep

This comment has been minimized.

Show comment
Hide comment
@alterstep

alterstep Aug 20, 2015

Owner

I don't follow. Can you draw a picture? ;)

Owner

alterstep commented Aug 20, 2015

I don't follow. Can you draw a picture? ;)

@TraderStf

This comment has been minimized.

Show comment
Hide comment
@TraderStf

TraderStf Aug 20, 2015

What? Which part?

After Flat GUI, here is ASCII ART GUI, faster than ever! Named "Windows 3.1" :-)

TraderStf commented Aug 20, 2015

What? Which part?

After Flat GUI, here is ASCII ART GUI, faster than ever! Named "Windows 3.1" :-)

@jedisct1

This comment has been minimized.

Show comment
Hide comment
@jedisct1

jedisct1 Aug 20, 2015

I didn't understand your last message. What changes to the UI are you suggesting?

jedisct1 commented Aug 20, 2015

I didn't understand your last message. What changes to the UI are you suggesting?

@TraderStf

This comment has been minimized.

Show comment
Hide comment
@TraderStf

TraderStf Aug 20, 2015

BTW did you notice the icon used in OS X? Screen of Death!
French means: ~can not connect to PC = Windows !

pc screen of death

To use this layout, of course the checkboxes must be realigned has it is not possible to make it work as I suggest... wait new ascii :)

TraderStf commented Aug 20, 2015

BTW did you notice the icon used in OS X? Screen of Death!
French means: ~can not connect to PC = Windows !

pc screen of death

To use this layout, of course the checkboxes must be realigned has it is not possible to make it work as I suggest... wait new ascii :)

@TraderStf

This comment has been minimized.

Show comment
Hide comment
@TraderStf

TraderStf Aug 20, 2015

Move Advanced items inside General pane, with something like this layout.

          ( General | About | Release Notes | Help )
( ) Disable DNSCrypt Proxy and use these static DNS servers:
    208.67.222.222  2001:470:20::2
(•) Enable DNSCrypt tool          Status:  Standby \^/
    [x] Use this DNSCrypt server:
        { OpenNIC Resolver Singapore 01 - d0wn  }
        Location:  Singapore
        Site:      https://dns.d0wn.biz
        Note:      Server provided ny Martin 'd0wn' Albus
    [x] Automatically disable DNSCrypt Proxy if blocked
    [ ] Log DNS Queries            (     View Log     )
Block replies      Block queries to      Bypass DNSCrypt to
from these IP      these Domains         resolve these Domains
208.67.0.255       *.example.com         localdomain
192.0.43.10        *ads.                 mycompany.example.net
::1

What do you think about my trick to be able to use the 2 blocks independently?

TraderStf commented Aug 20, 2015

Move Advanced items inside General pane, with something like this layout.

          ( General | About | Release Notes | Help )
( ) Disable DNSCrypt Proxy and use these static DNS servers:
    208.67.222.222  2001:470:20::2
(•) Enable DNSCrypt tool          Status:  Standby \^/
    [x] Use this DNSCrypt server:
        { OpenNIC Resolver Singapore 01 - d0wn  }
        Location:  Singapore
        Site:      https://dns.d0wn.biz
        Note:      Server provided ny Martin 'd0wn' Albus
    [x] Automatically disable DNSCrypt Proxy if blocked
    [ ] Log DNS Queries            (     View Log     )
Block replies      Block queries to      Bypass DNSCrypt to
from these IP      these Domains         resolve these Domains
208.67.0.255       *.example.com         localdomain
192.0.43.10        *ads.                 mycompany.example.net
::1

What do you think about my trick to be able to use the 2 blocks independently?

@TraderStf

This comment has been minimized.

Show comment
Hide comment

TraderStf commented Oct 12, 2015

@kurianjacob

This comment has been minimized.

Show comment
Hide comment
@kurianjacob

kurianjacob Feb 27, 2017

What's the format for blocking domain names? Is it .example.com, http://.example.com or www.example.com? And what is the separator value for multiple domains?
Thanks

kurianjacob commented Feb 27, 2017

What's the format for blocking domain names? Is it .example.com, http://.example.com or www.example.com? And what is the separator value for multiple domains?
Thanks

@jedisct1

This comment has been minimized.

Show comment
Hide comment
@jedisct1

jedisct1 Feb 28, 2017

The format is the one described here: https://github.com/jedisct1/dnscrypt-proxy/wiki/Filtering and as far as I know, both spaces and new lines work as separators.

jedisct1 commented Feb 28, 2017

The format is the one described here: https://github.com/jedisct1/dnscrypt-proxy/wiki/Filtering and as far as I know, both spaces and new lines work as separators.

@kurianjacob

This comment has been minimized.

Show comment
Hide comment
@kurianjacob

kurianjacob Feb 28, 2017

Thanks @jedisct1 . Works as your explained.

kurianjacob commented Feb 28, 2017

Thanks @jedisct1 . Works as your explained.

Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.