Simple DNSCrypt

Simple DNSCrypt is a simple management tool to configure dnscrypt-proxy on windows based systems.

If you are looking for an only command line tool, you can use the dnscrypt-proxy software. There are pre-compiled versions for any os. The dnscrypt-proxy software is written and maintained by Frank Denis (@jedisct1).

Status

Missing features:

Installation

To install Simple DNSCrypt use the latest MSI package. You don`t need to download the dnscrypt-resolvers.csv or the dnscrypt-proxy package at all. Both are included in the msi package, the dnscrypt-resolvers.csv can be updated from inside the software (and will be verified with minisign).

File Signing

The MSI package and the SimpleDnsCrypt.exe are signed via a COMODO RSA Code Signing CA. The files are signed under the name: EAM Experience Area M√ľnsingen GmbH

You also can verify the MSI package with minisign. The minisign signature can be verified with the following command:

minisign -Vm SimpleDNSCrypt.msi -P RWTSM+4BNNvkZPNkHgE88ETlhWa+0HDzU5CN8TvbyvmhVUcr6aQXfssV

Uninstall

To uninstall Simple DNSCrypt and dnscrypt-proxy, just go to the Windows Control Panel (Programs and Features) and search for Simple DNSCrypt.

Updates

Simple DNSCrypt will automatically check for new versions on startup.

Overview

Standard Settings

standard view

Advanced Settings

advanced view

Plugins

plugin view

Simple DNSCrypt currently supports two plugins:

libdcplugin_ldns_aaaa_blocking

If your network doesn't support IPv6, chances are that your applications are still constantly trying to resolve IPv6 addresses, causing unnecessary slowdowns. This plugin causes the proxy reply immediately to to IPv6 requests, without having to send a useless request to upstream resolvers, and having to wait for a response.

libdcplugin_logging

This plugin logs the DNS queries received by the proxy. The logs are stored in a local file. You can choose the folder, where dnscrypt-proxy will store the logfile (dns.log).

libdcplugin_ldns_blocking

This plugin returns a REFUSED response if the query name is in a list of blacklisted names, or if at least one of the returned IP addresses happens to be in a list of blacklisted IPs.
A file should list one entry per line.
IPv4 and IPv6 addresses are supported. For names, leading and trailing wildcards () are also supported (e.g. *xxx, .example.com, ads.)

Note: If the file(s) is/are empty, the service may not start!

Compatibility

This software was tested on:

32 bit 64 bit
Windows 7 tested tested
Windows 8.1 untested tested
Windows 10 tested tested

Feel free to report your success or failure: here

Requirements

Translations

SimpleDNSCrypt currently speaks the following languages:

If you are able to translate the resx files into more languages, please feel free to send a pull request.

Alternative Software

If you don`t like this software, there are two similar projects:

Used Software

Special Thanks

Frank Denis (@jedisct1) for developing libsodium and DNSCrypt

The EAM GmbH and bytejail for funding this project

License

MIT