The dnscrypt-proxy provides local service, which can be used directly as your
local resolver or as a DNS forwarder, encrypting and authenticating requests
using the DNSCrypt [1] protocol and passing them to an upstream server.
The DNSCrypt protocol uses high-speed high-security elliptic-curve cryptography
and is very similar to DNSCurve [2], but focuses on securing communications
between a client and its first-level resolver.
While not providing end-to-end security, it protects the local network, which
is often the weakest point of the chain, against man-in-the-middle attacks.
It also provides some confidentiality to DNS queries.
Reference links:
1. https://www.opendns.com/about/innovations/dnscrypt/
2. https://dnscurve.org/
WWW: https://github.com/jedisct1/dnscrypt-proxy
===> The following configuration options are available for dnscrypt-proxy-1.9.5_3:
DOCS=on: Build and/or install documentation
PLUGINS=on: Build and/or install plugins
PLUGINS_RELAXED=off: Allow loading plugins owned by other users
PLUGINS_ROOT=off: Only load plugins sitting in the default plugins directory
====> Rc script to use:: you have to select exactly one of them
RCSINGLE=on: Use default rc script for single daemon
RCMULTI=off: Use experimental rc script for multiple instances
===> Use 'make config' to modify these settings
Remove expired ports:
2018-09-25 math/mtl: fails to fetch: mastersite times out
2018-09-25 dns/dnscrypt-proxy: Deprecated by upstream, use dns/dnscrypt-proxy2
instead
Add dns/dnscrypt-proxy2: Flexible DNS proxy with support for encrypted protocols
A flexible DNS proxy, with support for modern encrypted DNS protocols such as
DNSCrypt v2 and DNS-over-HTTP/2.
WWW: https://github.com/jedisct1/dnscrypt-proxy
Without a repocopy because it's a new port, rewritten from scratch.
PR: 225821
Submitted by: Vinicius Zavam <egypcio@googlemail.com>
Differential Revision: https://reviews.freebsd.org/D14319
dns/dnscrypt-proxy: Replace 'cisco' (OpenDNS) resolver by 'random'
This update replaces the default resolver used by
dnscrypt-proxy (cisco/OpenDNS) by a random one that
does not log entries and supports dnssec.
- Improve pkg-message's.
- Fix MASTER_SITES.
- Reorder Makefile variable's.
- Update WWW.
PR: 223222
Submitted by: Vinicius Zavam <egypcio@googlemail.com>
Reviewed by: dbaio, garga, mat
Approved by: Leo Vandewoestijne <freebsd@dns-lab.com>
(maintainer, previous patch, then timeout)
Differential Revision: https://reviews.freebsd.org/D12775
Mark some ports failing on power64. In cases where the error message
was a stub, provide a real one.
While here, pet portlint.
Approved by: portmgr (tier-2 blanket)
security/libsodium: Upgrade version 1.0.8 => 1.0.10
Also bump all ports that depend on libsodium.
PR: 210999
Submitted by: manu
Approved by: vsevolod (maintainer)
dns/dnscrypt-proxy: ensure daemon starts after ldconfig
- While here, fix format of $FreeBSD$ tag in rc script
- Also remove fbsd:nokeywords and add svn:keywords to rc script
PR: 203059
Submitted by: Gregorio Guidi <gregorio.guidi@gmail.com> (original patch)
Approved by: Leo Vandewoestijne <freebsd@dns-lab.com> (maintainer)
dns/dnscrypt-proxy: Update to 1.6.0
rc script is also updated to change default dnscrypt server to "cisco"
which is the new name for the opendns dnscrypt service
PR: 202414
dns/dnscrypt-proxy: start before unbound
- To prevent hanging on 10.x systems which ship with unbound and depend on
DNS resolving, start dnscrypt-proxy before unbound.
- Bump PORTREVISION
PR: 194975
Differential Revision: https://reviews.freebsd.org/D1249
Submitted by: Joseph Mingrone <jrm@ftfl.ca>
Approved by: koobs (mentor)
-Add more options for rc script
-Utilize opendns if no provider configured to preserve documented behavior
-rc script passes rclint
-Fix the _dnscrypt-proxy user's home directory and add UPDATING entry
PR: 190406
Submitted by: AllanJude
Update to 1.0
I've also updated MASTER_SITES as the maintainer's site doesn't have version
1.0.
This can be changed back if/when the maintainer comes back.
Maintainer timeout after: 5 days
DNSCrypt is a piece of lightweight software that everyone
should use to boost online privacy and security. It works
by encrypting all DNS traffic between the user and OpenDNS,
preventing any spying, spoofing or man-in-the-middle attacks.
WWW: https://www.opendns.com/technology/dnscrypt/
PR: ports/167833
Submitted by: Leo Vandewoestijne <freebsd@dns-lab.com>
