instantsc / simplednscrypt

A simple management tool for dnscrypt-proxy

Fork

This was forked from here due to inactivity. I was able to fix a few things that were bugging me and see no reason not to share.

Note that this repository has no connection to OpenCollective or any other form of funding.

This is not a drop-in replacement in a sense that you will have to migrate your settings yourself, although the files themselves (if you copy them) should be fairly compatible.

Simple DNSCrypt

Simple DNSCrypt is a simple management tool to configure dnscrypt-proxy on windows based systems.

Status

Uses dnscrypt-proxy: 2.1.5

Getting Started

Prerequisites

Windows 10 LTSC 21H2 is tested(-ish) to work, other users are welcome to test and report other Windows versions.

Installing

To install Simple DNSCrypt use the MSI package.

Deinstallation

To uninstall Simple DNSCrypt and dnscrypt-proxy, just go to the Windows Control Panel (Programs and Features) and search for Simple DNSCrypt.

Updates

For now, the only update option is to download and install the newest version manually. Note that in .NET the setting storage is tied to the binary location, and so you'll either have to migrate manually or to install update to the same location as before.

Screenshots

More

Built With

• Visual Studio 2022
• .NET 7
• WiX

Authors

• Christian Hermann - bitbeans
• instant.sc

See also the list of Contributors.md who participated in this project. If you are a translator, feel free to update this file.

License

This project is licensed under the MIT License - see the LICENSE.md file for details

Used Software and Libraries

• Caliburn.Micro
• DnsCrypt.Toolbox
• gong-wpf-dragdrop
• MahApps.Metro
• MahApps.Metro.SimpleChildWindow
• Nett
• Newtonsoft.Json
• NLog
• notifyicon-wpf
• WPFLocalizationExtension
• YamlDotNet

Thanks to

• Frank Denis for the development of dnscrypt-proxy
• all users, translators and contributors

Contributors

This project exists thanks to all the people who contribute. [Contributors].

simplednscrypt's Issues

WireGuard doesn't work with DNSCrypt

Hi SimpleDNSCrypt doesn't work with local hosted WireGuard VPN on router/gateway
Connection works just it don't change DNS
With old original SimpleDNSCrypt from bitbeans even internet connection don't work which is based on old DNSCrypt
On FritzBox there is no specific settings for wireguard DNS. DNS can be changed for connection without VPN and with VPN
WireGuard Config are this
Address = 192.168.178.201/24
DNS = 192.168.178.1, fritz.box

AllowedIPs = 192.168.178.0/24, 0.0.0.0/0
Endpoint = Randomdomain.myfritz.net:58658

Not an issue, just a help request: IPs?

Hi @instantsc ,

Thank you for your SimpleDnsCryp version... very useful!

Please, I have a simple question: How can I block IPs?
By following the regular DNSCryp Wiki, and using your SimpleDnsCrypt 0.7.2.4, I edited my dnscrypt-proxy.toml by adding:

[blocked_ips]
blocked_names_file = "C:\Program Files\SimpleDNSCrypt\dnscrypt-proxy\IPblacklist.txt"

... where IPblacklist.txt is a file containing my IPs blocked list.
Unfortunately is not working for me.

Please, can you help me?

Thank you in advance.

Failed to decode stamp error on valid stamp

Hello,

After entering a valid DNS stamp, a "Failed to decode stamp" error appears. The DNS stamp is correct and even verified on https://dnscrypt.info/stamps
Any thoughts?

update dnscrypt-proxy 2.1.5?

⚠️Error ➡️ Resolvers Screen ➡️ UnhandledException

Hi,
When I'm on the Resolvers Screen, where you pick all your resolvers, when clicking on the Search field to filter through resolvers, I come across an error "UnhandledException".

Reproduce Error:

1. Click on search field
2. Type in a resolver to filter out (example: Cloudflare)
3. Once resolvers are filtered from the search term, an Error box is presented with "Unhandled Exception".
4. SimpleDNSCrypt crashes

Here is my Error Screen and Logs when the error occurred:

2022-06-19 12:42:11.2134 DnsCryptProxyManager System.InvalidOperationException: Cannot stop 'dnscrypt-proxy' service on computer '.'.
---> System.ComponentModel.Win32Exception (1061): The service cannot accept control messages at this time.
--- End of inner exception stack trace ---
at System.ServiceProcess.ServiceController.Stop(Boolean stopDependentServices)
at System.ServiceProcess.ServiceController.Stop()
at SimpleDnsCrypt.Extensions.ServiceControllerExtensions.StopAsync(ServiceController serviceController, TimeSpan timeout) in D:\a\SimpleDnsCrypt\SimpleDnsCrypt\SimpleDnsCrypt\Extensions\ServiceControllerExtensions.cs:line 17
at SimpleDnsCrypt.Helper.DnsCryptProxyManager.Stop() in D:\a\SimpleDnsCrypt\SimpleDnsCrypt\SimpleDnsCrypt\Helper\DnsCryptProxyManager.cs:line 124
2022-06-19 12:42:25.6594 ProcessHelper System.Threading.Tasks.TaskCanceledException: A task was canceled.
at System.Diagnostics.Process.WaitForExitAsync(CancellationToken cancellationToken)
at SimpleDnsCrypt.Helper.ProcessHelper.ExecuteWithArgumentsAsync(String filename, String arguments) in D:\a\SimpleDnsCrypt\SimpleDnsCrypt\SimpleDnsCrypt\Helper\ProcessHelper.cs:line 158

Anyway to fix this?
Appreciate your work and help, thanks!

Edition Windows 10 Home
Version 21H2
Installed on ‎2/‎19/‎2022
OS build 19044.1741
Experience Windows Feature Experience Pack 120.2212.4180.0

[0.8.1] Long IP address hint

Due to IPv6, the new feature displays a long tooltip.
It is possible to make transfer of lines on each IP.

Consider replacing this with an (i) info button. There are child windows in other places, so there shouldn't be any problems with the implementation.
This will display other data, as if we were using "arp -a" and "ipconfig /all" requests.

domain blacklist is not working [DNS cache is not cleared on blocklist update]

i was testing block domain list with simplednscrypt but it didn't worked, i used "wildcard" and "domains" from here:
https://www.reddit.com/r/dnscrypt/comments/s4q096/adult_blocklist_myprivacydnss_pornrecords/
am i doing something wrong or the app can't use this feature yet?

Resolvers list is hard to switch

https://github.com/instantsc/SimpleDnsCrypt/releases/tag/0.8.0

The resolvers list is hard to switch. It needs a double click to change.

Not working if DoH Path is something other than `/dns-query`

I have my own VPS setup with DoH working fine.

Everything works well if I use /dns-query as path on my webserver.

If I change the path (in DNS stamp) to something else like /doh-query, all the queries in query log report resolver as "-" and live 0ms. On my webserver's query log, I can see endless "NS" queries with either example.com or random strings with test.dnscrypt as the domain -- <random_string>.test.dnscrypt and DNS stops working on Windows.

Going through long term data on pihole, I guess these queries are done to prevent malware of some sort which would reply with a malicious IP on every possible query, since these queries have been done every few days since I set the server up.

I know that the new address /doh-query works because I tested it with browsers (chrome and firefox's DoH feature) and I also tested it with a standalone tool "dnslookup" which can be used to test various types of DNS queries to directly query my server over DoH using the URL which were all successful (I even see successful queries in query logs).

(apparently the IP of google.com can also give away your location as granular as which city you are in - removed IP from images)

I even monitored the connections made by dnscrypt-proxy.exe with various tools and all connections do go to my webserver's external IPv4 - no problems there either. I properly verified the stamp and everything else already - quite sure the cause is somewhere in simplednscrypt.

Live, PASS status in queries with - in resolver name when using /doh-query in path:

Same everything with /dns-query path (name shows up, cropped it):

Any fixes for SimpleDNScrypt not working with a different query path?

DNSCryptProxy 2.1.4

DNSCryptProxy 2.1.4 has been released. The good news is I've tested replacing dnscrypt-proxy64.exe and dnscrypt-proxy86.exe in the \SimpleDNSCrypt\dnscrypt-proxy folder, restarting the service, and all is working well. Passes dnsleaktest.com without leaking to my ISP's resolver.

Servers and Relays

Hello,

I found that dnscrypt-proxy.toml is using old v2 adresses for dnscrypt-proxy that was used till v2.0.42:
example:
https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/ v2 /public-resolvers.md

instead for the further versions the new v3 for all adresses

https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/ v3 /public-resolvers.md

---

An option could be added to enable "odoh" servers that have been added after v2.0.42

Thanks for the nice work!

WeVPN has shutdown still included as a resolver

Description

WeVPN has shutdown but still could be selected as a resolver, not sure if it's safe to keep it there. Thanks for the fork!

Installed this version and it still shows version 2.0.42

Hi,
after installing the latest from this section, when I open Simple DNSCrypt, it still shows it's using version 2.0.42 and does not have any of the latest features shown in the main readme section of repo.

Can you please help me install the latest version?

Im running:

Windows 10 (64bit)
Version: 21H1
OS Build: 19043.1466
Experience: Windows Feature Experience Pack 120.2212.3920.0

Thanks

Portable version

It would be awesome to have a portable version.
Could it be added?

Update DNSCrypt to v2.1.2

Can you please update DNSCrypt to v2.1.2? It added support for DoH over HTTP/3. Thanks

Virus Total result false positive ??

SimpleDnsCrypt ( forked instantsc version) -- virus total result
SimpleDnsCrypt ( original version) -- virus total result

Plans to integrate ODoH?

Hey, thanks so much for forking SimpleDnsCrypt to keep it alive! I don't know if you're still maintaining this project, but would you be interested in trying to integrate DNScrypt's Oblivious-DoH protocol?

I have a feeling some files could be edited manually to to include it in the list of resolvers, but I'm not confident enough to do that :/ I did find one "one-click solution" to install DNScrypt with ODoH on Windows (it's a batch script), but it looks more like a proof of concept that's liable to break if it gets outdated. I'll link to it in case anything useful can be gleaned from it, though: https://techcommunity.microsoft.com/t5/windows-security/one-button-automated-encrypted-dns-odoh-example-on-windows-10-11/m-p/3916920

Trouble generating the DNS stamp

I have generated a link using https://rethinkdns.com/configure, and have input it into the IP address box on https://dnscrypt.info/stamps/ to generate the stamp for my custom resolver.

On https://dnscrypt.info/stamps/, I don't know what to input into the "Host name" or "Hashes" box. When I input my stamp in the "DNS stamp" box on Simple DNSCypt, it correctly identifies I don't have a Hash or a Host name.

Where do I find the hash and hostname for my rethink.dns link!?