./net/dnscrypt-proxy [secure communications between a DNS client and resolver]
[+] Add this package to your ports tracker

[ CVSweb ] [ Homepage ] [ RSS feed ]

Version: 1.9.5, Package name: dnscrypt-proxy-1.9.5
Maintained by: Frank Denis
Master sites:
Description-main
DNSCrypt-proxy provides a local service which can be used directly as your
local resolver or as a DNS forwarder, encrypting requests using the DNSCrypt
protocol and passing them to an upstream server.

The DNSCrypt protocol is very similar to DNSCurve, but focuses on securing
communications between a client and its first-level resolver.

DNSCurve improves confidentiality and integrity of DNS requests using
high-speed, high-security elliptic-curve cryptography. It aims to secure
the entire chain down to authoritative servers. However, it only works
with authoritative servers that explicitly support the protocol.

While not providing end-to-end security, it protects the local network,
which is often the weakest point of the chain, against man-in-the-middle
attacks. It also provides some confidentiality to DNS queries.

Description-plugins
A collection of plugins for dnscrypt-proxy.

- example-ldns-aaaa-blocking: This plugin returns an empty response to
AAAA queries.

- example-ldns-blocking: This plugin returns a REFUSED response if the
query name is in a list of blacklisted names, or if at least one of
the returned IP addresses happens to be in a list of blacklisted IPs.

- example-ldns-forward-after-nxdomain: This plugin falls back to using
the standard resolution mechanism after receiving an NXDOMAIN response.

- example-ldns-logging: This plugin logs the client queries to the
standard output (default) or to a file.

- example-ldns-opendns-deviceid: This plugin is only useful when using
OpenDNS with specific routers and enterprise products.


Filesize: 1624.955 KB
Version History (View Complete History)
  • (2017-08-02) Updated to version: dnscrypt-proxy-1.9.5
  • (2017-01-19) Updated to version: dnscrypt-proxy-1.9.3
  • (2017-01-05) Updated to version: dnscrypt-proxy-1.9.1
  • (2016-08-12) Updated to version: dnscrypt-proxy-1.7.0
  • (2016-02-04) Updated to version: dnscrypt-proxy-1.6.1
  • (2015-09-19) Updated to version: dnscrypt-proxy-1.6.0
  • (2015-06-11) Updated to version: dnscrypt-proxy-1.5.0
  • (2015-01-07) Updated to version: dnscrypt-proxy-1.4.3
  • (2015-01-03) Updated to version: dnscrypt-proxy-1.4.2
  • (2014-09-24) Updated to version: dnscrypt-proxy-1.4.1
[show/hide] View available PLISTS (Can be a lot of data)

CVS Commit History:

   2017-08-02 03:32:40 by Giovanni Bechis | Files touched by this commit (3)
Log message:
Update to 1.9.5
ok Frank Denis (Maintainer)
   2017-08-02 03:32:40 by Giovanni Bechis | Files touched by this commit (3)
Log message:
Update to 1.9.5
ok Frank Denis (Maintainer)
   2017-08-02 03:32:40 by Giovanni Bechis | Files touched by this commit (3)
Log message:
Update to 1.9.5
ok Frank Denis (Maintainer)
   2017-01-23 11:00:23 by T.J. Townsend | Files touched by this commit (2)
Log message:
fix wording in the pkg readme, bump REVISION-main
ok sthen
   2017-01-23 11:00:23 by T.J. Townsend | Files touched by this commit (2)
Log message:
fix wording in the pkg readme, bump REVISION-main
ok sthen
   2017-01-19 07:59:04 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to dnscrypt-proxy-1.9.3
   2017-01-19 07:59:04 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to dnscrypt-proxy-1.9.3
   2017-01-05 07:23:30 by Stuart Henderson | Files touched by this commit (1)
Log message:
reinstate /old/ backup MASTER_SITES, lost in Pablo's diff. (not needed now,
but maybe later).
   2017-01-04 14:52:20 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to dnscrypt-proxy-1.9.1, based on a diff from Pablo Méndez Hernández,
but skipping the new config file for now because we can't force daemonizing
for the rc script (or setting uid) while using the config file. (the ideal
situation for scripts would be to allow these flags to override things on
the config file).
   2017-01-04 14:52:20 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to dnscrypt-proxy-1.9.1, based on a diff from Pablo Méndez Hernández,
but skipping the new config file for now because we can't force daemonizing
for the rc script (or setting uid) while using the config file. (the ideal
situation for scripts would be to allow these flags to override things on
the config file).
   2017-01-04 14:52:20 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to dnscrypt-proxy-1.9.1, based on a diff from Pablo Méndez Hernández,
but skipping the new config file for now because we can't force daemonizing
for the rc script (or setting uid) while using the config file. (the ideal
situation for scripts would be to allow these flags to override things on
the config file).
   2016-11-07 03:51:36 by Stuart Henderson | Files touched by this commit (14)
Log message:
sync WANTLIB (readding idn to some where I was overzealous, plus some lzma/pthread)
   2016-09-15 00:50:06 by Landry Breuil | Files touched by this commit (2)
Log message:
Now that --gc-sections has been disabled on powerpc (thanks jca@!),
remove the hacks in ports to disable it locally. Those should build ootb
in the next-next bulk...
   2016-09-13 15:36:48 by T.J. Townsend | Files touched by this commit (3)
Log message:
add information on running multiple instances to the readme file, clean up
pkg description, switch homepage and master_sites to https.
ok sthen
   2016-09-13 15:36:48 by T.J. Townsend | Files touched by this commit (3)
Log message:
add information on running multiple instances to the readme file, clean up
pkg description, switch homepage and master_sites to https.
ok sthen
   2016-09-13 15:36:48 by T.J. Townsend | Files touched by this commit (3)
Log message:
add information on running multiple instances to the readme file, clean up
pkg description, switch homepage and master_sites to https.
ok sthen
   2016-09-09 11:37:51 by T.J. Townsend | Files touched by this commit (2)
Log message:
expand on the instructions for running dnscrypt-proxy with unbound.
couple minor grammar tweaks while here.
ok sthen
   2016-09-09 11:37:51 by T.J. Townsend | Files touched by this commit (2)
Log message:
expand on the instructions for running dnscrypt-proxy with unbound.
couple minor grammar tweaks while here.
ok sthen
   2016-08-12 05:50:31 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to dnscrypt-proxy-1.7.0, based on a diff from pablomh at gmail
   2016-08-12 05:50:31 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to dnscrypt-proxy-1.7.0, based on a diff from pablomh at gmail
   2016-06-05 04:14:20 by Landry Breuil | Files touched by this commit (1)
Log message:
Fix on powerpc by passing libevent_cv_gc_sections_runs=no in CONFIGURE_ENV.
Since --gc-sections is broken on powerpc, but noone cared to okay jca@'s
binutils fix to disable it completely, continue fixing ports one by
one...
Btw, realized dnscrypt-proxy uses its own modified copy of libevent.. yay.
   2016-04-04 10:09:10 by Christian Weisgerber | Files touched by this commit (45)
Log message:
g/c PFRAG.shared
   2016-04-04 10:09:10 by Christian Weisgerber | Files touched by this commit (45)
Log message:
g/c PFRAG.shared
   2016-04-04 10:09:10 by Christian Weisgerber | Files touched by this commit (45)
Log message:
g/c PFRAG.shared
   2016-02-04 07:29:25 by Stuart Henderson | Files touched by this commit (3)
Log message:
Update pkg-readme and rc script for dnscrypt-proxy; "-R opendns" was the
package's old default but this has been replaced in the csv file since
the OpenDNS acquisition.
There is now no default; select a server yourself and configure it as shown
in the readme.
   2016-02-04 07:29:25 by Stuart Henderson | Files touched by this commit (3)
Log message:
Update pkg-readme and rc script for dnscrypt-proxy; "-R opendns" was the
package's old default but this has been replaced in the csv file since
the OpenDNS acquisition.
There is now no default; select a server yourself and configure it as shown
in the readme.
   2016-02-04 07:29:25 by Stuart Henderson | Files touched by this commit (3)
Log message:
Update pkg-readme and rc script for dnscrypt-proxy; "-R opendns" was the
package's old default but this has been replaced in the csv file since
the OpenDNS acquisition.
There is now no default; select a server yourself and configure it as shown
in the readme.
   2016-02-03 17:21:14 by Stuart Henderson | Files touched by this commit (3)
Log message:
Update to dnscrypt-proxy 1.6.1
- Security: malformed packets could cause the OpenDNS deviceid,
OpenDNS set-client-ip, blocking and AAAA blocking plugins to use
uninitialized pointers, leading to a denial of service or possibly
code execution. The vulnerable code is present since dnscrypt-proxy
1.1.0. OpenDNS users and people using dnscrypt-proxy in order to block
domain names and IP addresses should upgrade as soon as possible.
   2016-02-03 17:21:14 by Stuart Henderson | Files touched by this commit (3)
Log message:
Update to dnscrypt-proxy 1.6.1
- Security: malformed packets could cause the OpenDNS deviceid,
OpenDNS set-client-ip, blocking and AAAA blocking plugins to use
uninitialized pointers, leading to a denial of service or possibly
code execution. The vulnerable code is present since dnscrypt-proxy
1.1.0. OpenDNS users and people using dnscrypt-proxy in order to block
domain names and IP addresses should upgrade as soon as possible.
   2016-02-03 17:20:09 by Stuart Henderson | Files touched by this commit (4)
Log message:
Update to dnscrypt-proxy 1.6.1
- Security: malformed packets could cause the OpenDNS deviceid,
OpenDNS set-client-ip, blocking and AAAA blocking plugins to use
uninitialized pointers, leading to a denial of service or possibly
code execution. The vulnerable code is present since dnscrypt-proxy
1.1.0. OpenDNS users and people using dnscrypt-proxy in order to block
domain names and IP addresses should upgrade as soon as possible.
   2016-02-03 17:20:09 by Stuart Henderson | Files touched by this commit (4)
Log message:
Update to dnscrypt-proxy 1.6.1
- Security: malformed packets could cause the OpenDNS deviceid,
OpenDNS set-client-ip, blocking and AAAA blocking plugins to use
uninitialized pointers, leading to a denial of service or possibly
code execution. The vulnerable code is present since dnscrypt-proxy
1.1.0. OpenDNS users and people using dnscrypt-proxy in order to block
domain names and IP addresses should upgrade as soon as possible.
   2016-02-03 17:20:09 by Stuart Henderson | Files touched by this commit (4)
Log message:
Update to dnscrypt-proxy 1.6.1
- Security: malformed packets could cause the OpenDNS deviceid,
OpenDNS set-client-ip, blocking and AAAA blocking plugins to use
uninitialized pointers, leading to a denial of service or possibly
code execution. The vulnerable code is present since dnscrypt-proxy
1.1.0. OpenDNS users and people using dnscrypt-proxy in order to block
domain names and IP addresses should upgrade as soon as possible.
   2016-02-03 17:20:09 by Stuart Henderson | Files touched by this commit (4)
Log message:
Update to dnscrypt-proxy 1.6.1
- Security: malformed packets could cause the OpenDNS deviceid,
OpenDNS set-client-ip, blocking and AAAA blocking plugins to use
uninitialized pointers, leading to a denial of service or possibly
code execution. The vulnerable code is present since dnscrypt-proxy
1.1.0. OpenDNS users and people using dnscrypt-proxy in order to block
domain names and IP addresses should upgrade as soon as possible.
   2015-09-18 12:26:18 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to dnscrypt-proxy-1.6.0 and sync patch with recent upstream commit
   2015-09-18 12:26:18 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to dnscrypt-proxy-1.6.0 and sync patch with recent upstream commit
   2015-09-18 12:26:18 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to dnscrypt-proxy-1.6.0 and sync patch with recent upstream commit
   2015-09-18 12:26:18 by Stuart Henderson | Files touched by this commit (4)
Log message:
update to dnscrypt-proxy-1.6.0 and sync patch with recent upstream commit
   2015-06-11 08:23:09 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to dnscrypt-proxy 1.5.0, reinstate arc4random_addrandom patch
lost during resync with upstream libevent
   2015-06-11 08:23:09 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to dnscrypt-proxy 1.5.0, reinstate arc4random_addrandom patch
lost during resync with upstream libevent
   2015-06-11 08:23:09 by Stuart Henderson | Files touched by this commit (3)
Log message:
update to dnscrypt-proxy 1.5.0, reinstate arc4random_addrandom patch
lost during resync with upstream libevent
   2015-01-06 14:32:49 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to dnscrypt-proxy 1.4.3; update (modified) libevent for evbuffer
CVE fix, add new servers and change IPs of some existing servers
   2015-01-06 14:32:49 by Stuart Henderson | Files touched by this commit (2)
Log message:
update to dnscrypt-proxy 1.4.3; update (modified) libevent for evbuffer
CVE fix, add new servers and change IPs of some existing servers
   2015-01-02 13:21:06 by Jeremie Courreges-Anglas | Files touched by this commit (2)
Log message:
Maintenance update to dnscrypt-proxy-1.4.2
ok sthen@, MAINTAINER timeout.
   2015-01-02 13:21:06 by Jeremie Courreges-Anglas | Files touched by this commit (2)
Log message:
Maintenance update to dnscrypt-proxy-1.4.2
ok sthen@, MAINTAINER timeout.