Encrypt your DNS traffic with DNSCrypt Proxy in Ubuntu and lilo mafi amintacce

Amintaccen intanet

DNSCrypt wakili aikace-aikace ne na bude tushen da nufin ɓoye zirga-zirgar DNS ɗin haɗinmu don kewaya tare da tsaro mafi girma. Shirye-shiryen suna ɓoye buƙatun DNS a cikin gida kuma waɗannan suna ƙaddamar da su ta hanyar mai ba da sabis na DNS, don haka duk wanda ya yi ƙoƙari ya katse su a hanya (misali, don yin kai hari mutum-in-da-tsakiya) zai sha wahalar samun sa.

A halin yanzu akwai adadi mai kyau na Masu samar da DNS suna tallafawa ta DNSCrypt wakili, kuma kasancewarka software kyauta, duk wanda yake da wadataccen ilimi na iya saita sabar DNS dinsa kuma saita shi tare da shirin. Koyaya, ta tsoho an riga an tsara shi don amfani tare OpenDNS.

A cikin wannan sakon zan nuna muku mafi sauki kuma mafi sauki game da batun Ubuntu da abubuwan da suka samo asali. Wadanda suke son ingantaccen tsari zasu iya tuntubar su shafin aiki y ma'ajiyar ka a GitHub.

Shigarwa

Muna farawa da shigar da kunshin DNSCrypt wakili daga Ma'ajin PPA da Sergey «Shnatsel» Davidoff ya kula:

sudo add-apt-repository ppa:shnatsel/dnscrypt
sudo apt-get update
sudo apt-get install dnscrypt-proxy

Tare da cewa an riga an shigar dashi kuma yana gudana, yanzu kawai zamu iya gaya wa tsarin yayi amfani da shi. A saboda wannan muna da hanyoyi guda biyu, na farko da na’urar daukar hoto da kuma na biyu a yanayin zane, zabi wanda ka fi so:

Hanyar 1

Mun kashe DNS ɗin da ake amfani da shi a halin yanzu:

sudo unlink /etc/resolv.conf

Mun ƙirƙiri sabon fayil /etc/resolv.conf tare da editan rubutu:

sudo gedit /etc/resolv.conf

Kuma muna liƙa wannan layin don wuce hanyar DNS ta hanyar DNSCrypt:

nameserver 127.0.0.1

Yanzu muna kare fayil don hanawa Manajan cibiyar sadarwa gyara shi:

sudo chattr +i /etc/resolv.conf

Don sake inganta shi daga baya, dole ne fara cire kariya tare da wannan umarnin:

sudo chattr -i /etc/resolv.conf

Sannan za su iya komawa kare shi ko kuma ba ya dogara da abin da suke son yi.

Muna adana canje-canje kuma muna rufe edita.

Hanyar 2

Muna danna gunkin hanyar sadarwa a cikin allon mu kuma latsa Shirya haɗi. Yanzu mun zaɓi haɗin da muke da aiki kuma danna kan Shirya. A cikin taga da ya buɗe zamu je shafin Saitunan IPv4 kuma za mu ga wani abu kamar haka:

Manajan hanyar sadarwa na DNSCrypt

Mun saita zaɓuɓɓukan kamar yadda aka gani a can, zaɓi a ciki Hanyar "Adireshin atomatik kawai (DHCP)", kuma a cikin Sabis na DNS ajiyewa 127.0.0.1

Kunnawa

Ko kun yi amfani da Hanyar 1 kamar yadda Hanyar 2, Mataki na gaba shine sake yi Manajan cibiyar sadarwa:

sudo service network-manager restart

Za mu ga cewa an yanke haɗin kuma an sake farawa. Idan komai ya tafi daidai, zai rigaya ya fara aiki DNSCrypt wakili. Don bincika shi za mu je wannan page, kuma idan sakamakon ya tabbatacce zaku karɓe mu OpenDNS:

OpenDNS Maraba

In ba haka ba za mu sami saƙon kuskure yana cewa "Oops", ko ba zai loda kowane shafi ba. Don warware shi kawai muna canza uwar garken 127.0.0.1 don 127.0.0.2 (ko wasu) kuma sake farawa Manajan cibiyar sadarwa.

Kawai don Ubuntu 14.04

Mai kula da PPA yayi kashedin cewa akwai kwaro a ciki Ubuntu 14.04 hakan yana hana kashe kayan aiki lokacin DNSCrypt wakili yana aiki. Yana nuna cewa kuna aiki akan facin don warware shi, amma kafin nan ana iya gyara ta hanyar tafiyar da waɗannan umarnin:

sudo apt-get install apparmor-utils
sudo aa-complain /etc/apparmor.d/usr.sbin.dnscrypt-proxy

Uninstall

Idan daga baya muna so mu daina amfani da shi DNSCrypt wakiliDa farko dai, lallai ne ku dawo da zaɓuɓɓukan haɗi zuwa yadda suke a farkon.

Idan kunyi amfani da Hanyar 1 zai zama don cire kariya daga fayil ɗin sannan sake sake kunna tsohuwar DNS tare da wannan umarnin:

sudo rm /etc/resolv.conf && sudo ln -s /run/resolvconf/resolv.conf /etc/resolv.conf

Idan kunyi amfani da Hanyar 2, zai zama don buɗe menu na daidaita tsarin hanyar sadarwa da shiga Hanyar zaɓi "Atomatik (DHCP)".

A kowane hali, zaku sake farawa daga baya Manajan cibiyar sadarwa tare da umarnin da aka ambata a sama, kuma a ƙarshe cirewa DNSCrypt wakili kamar haka:

sudo apt-get autoremove --purge dnscrypt-proxy

Kar ka manta kuma cire PPA ta hanyar zuwa Cibiyar Software> Shirya> Sauran software.


Bar tsokaci

Your email address ba za a buga. Bukata filayen suna alama da *

*

*

  1. Wanda ke da alhakin bayanan: Miguel Ángel Gatón
  2. Manufar bayanan: Sarrafa SPAM, sarrafa sharhi.
  3. Halacci: Yarda da yarda
  4. Sadarwar bayanan: Ba za a sanar da wasu bayanan ga wasu kamfanoni ba sai ta hanyar wajibcin doka.
  5. Ajiye bayanai: Bayanin yanar gizo wanda Occentus Networks (EU) suka dauki nauyi
  6. Hakkoki: A kowane lokaci zaka iyakance, dawo da share bayanan ka.

  1.   DAVID HENRY m

    Hakanan ya shafi Opensuse na iya buga ƙarin bayani game da wannan distro

    1.    Manual na Source m

      A magana gabaɗaya, hanya ce [kusan] wacce ta shafi [kusan] kowane rarraba (hanya ta 2 ga waɗanda suke amfani da Gidan yanar sadarwar), amma a bayyane yake wuraren ajiya suna canzawa kuma wasu abubuwa kamar yadda ake farawa da sake farawa sabis.

  2.   Kasusuwa m

    gaisuwa
    1. maganar farko bata ganuwa ko wani abu saboda kirgen yana farawa daga 2
    2. Na ganshi a cikin shafin yanar gizo na perseos amma cikakken tsari ne, kuma ba zato ba tsammani labarin baya nan

    1.    Manual na Source m

      1. Sharhi na farko pingback ne.
      2. Na kuma gan shi a kan shafin yanar gizo na Perseus tuntuni, amma yanzu da alama yana yin gyare-gyare kuma ya share duk abubuwan da ya rubuta.

  3.   Jorge m

    Na dai gwada shi, amma ba tare da wata nasara ba.

    Na yi abin da wannan koyarwar ta ce, sannan kuma na gama amfani da intanet, don haka na koma ga DNS ɗin da nake da shi a dā kuma komai ya daidaita.

    Shin, ba ku rasa mataki ba, kwatsam? Domin ba zan iya fahimtar yadda zan iya fita daga intanet ba idan na bi wannan darasin har zuwa wasiƙar.

    Gode.

    1.    Jorge m

      Na amsa: Ina amfani da DNSmasq kuma dole ne in kara daidaitawa. A ƙarshe na share shi kuma na sake bin wannan koyarwar kuma komai Yayi. Godiya 😀

      1.    Manual na Source m

        Ina farin ciki da kayi nasarar gyara shi. 🙂

      2.    mausmann m

        Barka dai! Ka sani ba zan iya sa shi tafiya ba Ta yaya hakan yake daga DNSmasq?

  4.   gaston m

    Idan ina bayan wakili, shin yana aiki?

    1.    Jorge m

      Ta hanyar fasaha, ya kamata tayi aiki.

      Ina amfani da Privoxy da tsarinsa don toshe tallace-tallace, kuma a lokaci guda ina amfani da wakili na DNScrypt, kuma ban sami wani wasan kwaikwayo ba. Wataƙila saboda akwai ƙananan wakilai 2 don dalilai daban-daban, ɗaya don DNS ɗayan kuma don bincika yanar gizo.

  5.   asali m

    Mai girma! .. .. gaskiyar ita ce ban san hanyar ba .. ..ya fi sauƙi don daidaitawa cikin ArchLinux shima .. ..ya gode ..

    1.    Manual na Source m

      Hakan yayi dai dai, Arch shima yana da sauki sosai; Ban sanya shi anan ba saboda bani da matakan da aka ɗaukaka, amma lokacin ƙarshe dana yi amfani dashi a can shine:

      # pacman -S dnscrypt-proxy
      # systemctl enable dnscrypt-proxy
      # systemctl start dnscrypt-proxy

      Kuma sauran ya kasance daidai kamar yadda yake a cikin koyawa.

      Gyara: Cikakkun umarnin suna nan: Shigar da DNSCrypt Proxy akan Arch Linux

      1.    Mahdzu m

        Yi haƙuri, amma a cikin Arch ba zan iya yi ba ... Ina girkawa, kunna, farawa, amfani da mataki na 2 kuma sake farawa Manajan Sadarwa kuma koyaushe ina samun saƙon: OPPSS ... Me zai iya zama?

      2.    Mahdzu m

        Ya amsa: Ina amfani da hanya ta 1 kuma tana min aiki. Na gode!

        1.    Manual na Source m
  6.   Luis m

    Yana da kyau duk da cewa ban gwada shi ba tukuna.

    Shin irin wannan yana tasiri saurin haɗin? Yana samun hankali?

    Gode.

    1.    Manual na Source m

      Akasin haka, ya zama da sauri saboda ka fara amfani da OpenDNS DNS, wanda ke da saurin saurin amsawa sama da na ISP naka. Bayan haka kuna cin gajiyar sauran halayen OpenDNS kamar kariya daga mai leƙan asiri da sauransu. 😉

      1.    Luis m

        Ok

        Har zuwa yanzu ina amfani da sabobin Google, ban san yadda za su kasance amintattu ba amma suna da sauri.

        1.    Manual na Source m

          Haka ne, Na kuma yi amfani da su, kodayake na fi son waɗanda ke OpenDNS saboda sun ba ni jin cewa sun fi sauri kuma suna haifar da ƙananan kurakurai; Kodayake abubuwan da nake gani ne kawai, ban yi gwaji ko wani abu don tabbatar da shi ba. 😛

      2.    Luis m

        Gaskiya ne, Na gwada shi a kan wata kwamfutata kuma yana da "alama" don tafi sauri.

        Abu daya ban fahimta ba:

        Me yasa zan girka dnscrypt-wakili? Ina nufin, ba zai isa ya canza DNS ɗin da muke da shi a cikin tsarin sadarwarmu zuwa OpenDNS DNS ba?

        Wannan shine abin da zan yi don amfani da DNS na Google: Ina kawai canza wannan bayanin a cikin daidaitawar kwamfuta, Ba na buƙatar shigar da komai ko kuma dole in sake gudanar daemon ...

        Shine kawai faduwar da nake gani.

        1.    Manual na Source m

          A cikin OpenDNS ana iya yin wannan, amma abin da na bayyana ba ɗaya bane. Lokacin da kuka saita DNS ta wannan hanyar, ana yin tambayoyin ta hanya mai sauƙi, ba tare da kowane nau'in ɓoyewa ko tsaro ba. Da wannan zaka kara boye-boye da kuma tantancewa. Wato, tare da wakili na DNSCrypt kuna amfani da OpenDNS DNS Y fasahar ɓoyewa, dukansu, ba na farkon ba.

      3.    Luis m

        Na fahimta, na gode don amsawarku.

        A yanar gizo suna ba da shawarar amfani da Unbound tare da dnscrypt amma ban san ainihin abin da wannan shirin yake yi ba.

        Me zaku iya fada min?

        1.    Manual na Source m

          Kamar yadda na fahimta sabobin DNS ne da kuka girka a cikin gida; A ka'ida ya kamata ya kara saurin ka har ma da yawa saboda yana samar da ma'ajiyar ajiya kuma DNSCrypt ya gabatar da buƙatun a wurin maimakon tura su zuwa OpenDNS, amma ban da wannan ban bincika shi sosai don ganin ainihin abin da aikin ya ƙunsa ba.

      4.    Luis m

        Yayi, godiya ga bayanin.

  7.   kari m

    Hmm Ina matukar shakkan wannan zaiyi aiki a kamfanin da ake amfani da DNS na gida da kuma Proxy sabobin. Duk da haka dai zan yi kokarin ganin yadda.

  8.   Manu lopez m

    Mai girma, yana aiki 100%.

  9.   Tsarki m

    Yayi min aiki! : ') Na gode sosai lokaci mai tsawo ina neman yadda zanyi amfani da wakili ko vpn (kyauta) Har yanzu na rasa vpn din da ban samu wanda zan girka akan ubuntu na ba.

    1.    Manual na Source m

      Ban san dalilin da yasa kuke neman wakili ba, amma idan don canza IP ɗinku, wannan ba zai muku aiki ba, tunda kawai yana kula da ɓoye buƙatun tsakanin injinku da mai ba da sabis na DNS. IP ɗinku ya kasance ɗaya kuma game da sabobin komai ya kasance daidai.

      1.    Tsarki m

        Idan na fahimta bayan nayi gwajin, shine canza adireshin IP, tare da ɓoyewa tuni ya zama ci gaba wajen neman tsaro. Shin kun san wani matsayi a cikin shafin yanar gizo inda aka bayyana shi ko ƙari a hanya mai sauƙi yadda ake amfani da vpn a cikin Ubuntu? Yayin da na karanta kuma na ga akwai kuskure da ke hana loda fayil din wanda ke dauke da sanyi wanda tuni aka yi shi don haka abubuwa su dan kara rikitarwa, ba zan iya amfani da daya ba Lokacin da nake amfani da windows ina da wanda ake kira hotspotshield kuma wannan baya da goyon bayan Linux ko kuma aƙalla ban san yadda ake amfani dashi anan ba. Godiya ga amsoshi ga duk wanda zai iya kuma yake so ya taimake ni.

    2.    killer m

      Don amfani da VPN a cikin Ubuntu zaka iya amfani da BuɗeVPN a cikin Network Manager ko kuma a cikin tashar ta kawai rubuta "openvpn –config file", inda fayil ɗin shine fayil ɗin daidaitawar da mai ba ku zai ba ku, shi ma zai tambaye ku mai amfani kuma ya wuce don shiga. Misali, akwai aikin vpnbook kyauta. Tabbas, dole ne ku girka openvpn da farko idan baku da shi.
      Na gode.

      1.    Tsarki m

        Na gode Keiller. Cire uninstall na DNSCrypt Proxy kamar yadda post din yake cewa, Na zazzage openvpn, fayilolin sanyi kuma na shiga ta hanyar m tare da umarnin jeri, na sanya sunan mai amfani da kalmar wucewa kuma hakan ya bani wannan kuskuren: KUSKURA: Ba za a iya ioctl TUNSETIFF tun1: Ba a yi izinin aiki ba (errno = 1); Fitawa saboda kuskuren kuskure
        Shin kun san abin da zan iya yi game da shi?

  10.   f m

    nameserver 127.0.0.1 An bar shi haka, ana kwafa ne kawai kuma a liƙa shi

    Bai ba ni ba Ba zan iya amfani da shi ba: C

    1.    Manual na Source m

      Karanta umarnin sosai:

      In ba haka ba za mu sami saƙon kuskure yana cewa "Oops", ko ba zai loda kowane shafi kai tsaye ba. Don warware shi, kawai mun canza uwar garken 127.0.0.1 zuwa 127.0.0.2 (ko wani) kuma sake sake farawa Manajan Yanar Gizo.

      Da alama kun fi kyau yin shi ta Hanyar 2.

  11.   Pepe m

    Shin wannan yana hana kutse imel ɗina a kan WiFi na jama'a?

    1.    Manual na Source m

      Yana taimaka maka kan hare-hare na mutum, amma mafi kyawun kariya ga Wi-Fi na jama'a shine VPN.

    2.    Pepe m

      Muchas Gracias

    3.    Proungiyoyi masu zaman kansu m

      Maganin wannan shine kewaya tare da wakilai masu zaman kansu da ba a san su ba, waɗanda ba sa adana bayanan masu amfani kuma, idan zai yiwu, na keɓewar amfani.

      Suna da araha kuma kuna tabbatar da cikakken sirrin bincikenku.

      Gaisuwa.

  12.   Bart m

    Ba ya aiki tare da VPN. Abin kunya

    1.    Manual na Source m

      A'a, saboda yayin bincika VPN kuna amfani da DNS ɗin na VPN kanta maimakon waɗanda aka saita a cikin gida.

  13.   geopelia m

    Babban godiya sosai yana sa na sami kwanciyar hankali idan na haɗu da wifis ba tare da kalmomin shiga ba

  14.   Mario Zamora m

    Barka dai mutane, na bi karatun har zuwa harafin kuma yanzu ba ni da Intanet kamar yadda na juya matsalar saboda ta hanyar da aka ayyana ba kwa son wakilin dnsscript ba tare da irin wannan ba. Taimako don Allah ba tare da intanet ba.

    1.    Manual na Source m

      Ba ku bi karatun ba har zuwa wasiƙar. Ba ka cikin layi saboda ka cire DNSCrypt ba tare da ka fara sauya canje-canjen ba. Karanta umarnin cirewa sake.

      1.    Mario Zamora m

        Na bi karatun kamar yadda ya kamata. Yi amfani da hanyar 1 tare da cirewar ta daban. Amma idan ana zuga shi ya kan zama cikin aikin. Duk wani ra'ayi?

        1.    Manual na Source m

          Bari mu gani, bari mu haye kan matakan cirewa ...

          Ba da kariya ga fayil ɗin:

          sudo chattr -i /etc/resolv.conf

          Sake dawo da tsohuwar DNS:

          sudo rm /etc/resolv.conf
          sudo ln -s /run/resolvconf/resolv.conf /etc/resolv.conf

          Sake kunna manajan hanyar sadarwa:

          sudo service network-manager restart

          Uninstall DNSCrypt wakili:

          sudo apt-get autoremove --purge dnscrypt-proxy

          A wace umarni yake makale?

  15.   Mario Zamora mai sanya hoto m

    A cikin wannan:
    sudo apt-get autoremove —purge dnscrypt-wakili

    Fitarwar yana farawa sannan kuma baya ƙarewa.

    1.    Manual na Source m

      Dash ya rage cikin umarnin, tsabta ya kamata kawai ya tafi tare da amintattun abubuwa biyu a farkon, kamar wannan:

      sudo apt-get autoremove --purge dnscrypt-proxy

      Gwada idan hakan yana magance matsalar ku. Ko ta yaya, idan kun bi matakan da ke sama ya kamata ku sami haɗi ba tare da la'akari da ko wannan umarnin na ƙarshe yana aiki ko a'a ba.

  16.   Robert Gonsalez m

    Matsayi mai kyau ya taimake ni sosai. Madalla !!!

  17.   Mykeura m

    Koyawa mai ban sha'awa Manuel.
    Na aiwatar dashi kuma haɗin kaina yana tafiya mai kyau.
    Gode.

  18.   nishadi2014 m

    Sannu abokai daga desdelinux Ina so in yi tambaya lokacin da na yi ƙoƙarin yin tsarin shigarwa bayan ƙara ɗakunan ajiya da sabuntawa na sanya sudo apt-samun shigar dnscrypt-proxy amma yana gaya mani:
    E: Ba za a iya samun fakitin dnscrypt-wakili ba Ina da ubuntu 14.04 Ban san dalilin da ya sa hakan ya taimaka ba

    1.    Francisco m

      Irin wannan yana faruwa dani 🙁
      Ubuntu 14.04

  19.   kowa m

    Zan iya yin saukinsa a cikin Arch / Antergos amma a Debian / Jessie daga matakin farko ya faɗi, ban sani ba idan bai dace da Debian ba:

    keos @ kaos: ~ $ su
    Contraseña:
    tushen @ kaos: / gida / keos # add-apt-mangaza ppa: shnatsel / dnscrypt
    bash: add-apt-mangaza: ba a samo umarnin ba
    tushen @ kaos: / gida / keos #

  20.   mausmann m

    Barka dai! Shafin yana da kyau sosai kuma ina so in tambaye ku:
    Na bi duk umarnin amma ba zan iya samun damar amfani da DNS ɗin da muka canza ba a cikin resolv.conf (127.0.0.1 ko 127.0.0.2). Don haka na kasance ba ni da damar shiga intanet. Ina amfani da DEBIAN da WICD maimakon Manajan Sadarwa.
    Tare da "Find / -name dnscrypt-proxy" Na ga an girka shirin a inda ya kamata (/ usr / local / sbin da / usr / local / share /).
    Tare da «ps aux | grep dnscrypt-wakili »ya jefa min sakamakon mai zuwa:
    tushen 6346 0.0 0.0 2808 672? SLs 09:45 0:00 dnscrypt-proxy –local-address = 127.0.0.1 –daemonize –resolver-address = 176.10.127.43: 443 –masu bada-sunan = 2.dnscrypt-cert.ns3.ca.dns.opennic.glue –Provider-key = 1C19: 7933: 1BE8: 23CC: CF08: 9A79: 0693: 7E5C: 3410: 2A56: AC7F: 6270: E046: 25B2: EDDB: 04E3

    Ban fahimci inda na gaza ba. Na karanta –a taimaka amma ban samu ba. Tun tuni mun gode sosai.

  21.   Raúl m

    Cikakke akan Lubuntu 16.04, na gode sosai don raba ilimin.

  22.   jhon m

    Barka dai, wani a nan wanda zai iya taimaka min da vpn ko wakili don yin binciken da aka biya a Amurka, don Allah