DNSCrypt for Windows official release

[tlu]

Originally Posted by popcorn

Is there away to configure your own DNS thru DNScrypt ?

See post #18.

[travelerRoute80]

Originally Posted by Victek123

Here's the main window:

Attachment 232825

This screen is of the Mac version, but the Windows version is essentially the same.

Looks good. What about the latency and any slowdown on your computer's performance?

[Victek123]

Originally Posted by travelerRoute80

Looks good. What about the latency and any slowdown on your computer's performance?

I don't notice any increased network latency, but on my dual core laptop the client uses about 5% cpu. I can live with that, but I'm hoping it will become more efficient as they continue to develop it.

[learningcurve]

Received firewall notication that dnscrypt wanted to connect to gist.github.com (or something close this) . Denied. Since it is out of beta (beta was compiled then offered at gihub forum), should this happen? Did not occur with beta version, btw. Anyone else see this?

Speed is good, no other issues.

[Hungry Man]

It's probably just trying to update.

[funkydude]

Yes that's normal. As stated already it does this when checking for updates. This manifest file is downloaded.

[learningcurve]

Thanks Hungryman and funkydude for setting that straight. Will look into how it operates in more detail now that I know it has additional function than beta version.

FYI, I have now seen the OpenDnsInterface in Taskmgr run at 27% of CPU, CPU temp running near max, and fan high. This was when I was not connected to lan/internet. Once connected seemed to normalize to 2-3%.

[TyRidian]

In this latest version, I noticed that the memory usage has improved greatly.

[funkydude]

Originally Posted by learningcurve

FYI, I have now seen the OpenDnsInterface in Taskmgr run at 27% of CPU, CPU temp running near max, and fan high. This was when I was not connected to lan/internet. Once connected seemed to normalize to 2-3%.

The latest version (.5) fixes the CPU usage. I had some troubles acquiring it myself but supposedly the way you're supposed to update is to click some blue text saying something along the line of "update available" in the GUI.

[learningcurve]

Funnkydude,

I now see the issue I experienced described exactly in the Release Notes for .4. Thanks to your heads up about the update link, I'm on .5. Hope the issue is solved.

By way of explanation: not sure I like how the program connects out to sites not immediately identifiable as opendns/dnscrypt (github & ellie.everbook.com?), so I put off opening Release Notes link (unsandboxed) in interface.

[JagPop]

Ok, just installed DNSCrypt a few minutes ago.

However, I have to use the "slower" option -
DNSCript over TCP / 443
in order to get it to work.

I am using Verizon FIOS. Have done some quick Googling and have not found a solution (don't want to use the "slower" option). If this has already been covered I would appreciate hearing about it.

Thanks!

[happyyarou666]

either im blind or this hasnt been completely answered yet , so if i am using a vpn , do i need this or what? , thanks in advance as usual

[funkydude]

Today I realized that for some reason the GUI program is running at High integrity, I don't know if this is on purpose or another sign of shoddy beta coding, but I've added all the files to EMET, including:

OpenDNSInterface.exe
OpenDNSCryptService.exe
dnscrypt-proxy.exe

Basically all the executables in the OpenDNS directory, haven't seen any issues.

[PaulyDefran]

Originally Posted by happyyarou666

either im blind or this hasnt been completely answered yet , so if i am using a vpn , do i need this or what? , thanks in advance as usual

You don't have to:

SENT CONTROL [server]: 'PUSH_REQUEST' (status=1)
PUSH: Received control message: 'PUSH_REPLY,redirect-gateway def1,dhcp-option DNS 10.4.0.1

When redirect-gateway is used, OpenVPN clients will route DNS queries through the VPN, and the VPN server will handle them. This can be accomplished by pushing a DNS server address to connecting clients which will replace their normal DNS server settings during the time that the VPN is active. For example:

push "dhcp-option DNS 10.8.0.1"

will configure Windows clients (or non-Windows clients with some extra server-side scripting) to use 10.8.0.1 as their DNS server. Any address which is reachable from clients may be used as the DNS server address.

http://openvpn.net/index.php/open-so...ion/howto.html

PD

[Hungry Man]

Originally Posted by funkydude

Today I realized that for some reason the GUI program is running at High integrity, I don't know if this is on purpose or another sign of shoddy beta coding, but I've added all the files to EMET, including:

OpenDNSInterface.exe
OpenDNSCryptService.exe
dnscrypt-proxy.exe

Basically all the executables in the OpenDNS directory, haven't seen any issues.

Weird. My DNSCrpyt runs a service but I don't think it's root and the apparmor profile doesn't show it needing root either.

[Yanick]

Originally Posted by funkydude

Today I realized that for some reason the GUI program is running at High integrity, I don't know if this is on purpose or another sign of shoddy beta coding, but I've added all the files to EMET, including:

OpenDNSInterface.exe
OpenDNSCryptService.exe
dnscrypt-proxy.exe

Basically all the executables in the OpenDNS directory, haven't seen any issues.

Yea, the GUI requires high integrity rights. I did mail them about it, they said the engineer's are aware of it and it will be addressed in the coming builds.

[funkydude]

Originally Posted by Hungry Man

Weird. My DNSCrpyt runs a service but I don't think it's root and the apparmor profile doesn't show it needing root either.

Like I said, the GUI, not the service. But I was talking about the Windows version, being the Windows thread n' all. I didn't even realize there was a GUI for Linux as I've had to launch the proxy every boot with --daemonize.

Originally Posted by Yanick

Yea, the GUI requires high integrity rights. I did mail them about it, they said the engineer's are aware of it and it will be addressed in the coming builds.

I don't doubt that as it's obvious these are early stages :p Thanks!

[Hungry Man]

You shouldn't have to launch it every boot. Didn't realize you meant the GUI.

[funkydude]

Originally Posted by Hungry Man

You shouldn't have to launch it every boot. Didn't realize you meant the GUI.

The only way I could get the latest version was to manually download the proxy from here, and launch it manually every boot using --daemonize. I don't think I could get the "official" version installed and it was way outdated.

Unfortunately the various Linux files have since been removed for whatever reason.

[Hungry Man]

I have an init script for it to start at boot, forgot about that.