s-s / dnscloak Goto Github PK

For no apparent reason, DNSCloak no longer starts. And this on 2 different devices. Problem exists since yesterday. I have not changed anything in the settings. Suddenly nothing worked anymore.
What can I do?

Hi!

Do you think you will be releasing an update with dnscrypt-proxy 2.0.25 soon?

It has some important bug fixes.

Thank you!

I’m trying to unblock an app, but I can’t seem to find which domain is being blocked. Is there a view or log that will show us the domains that are blocked? In the DNS queries log I only see domains marked as PASS. Maybe I’m looking in the wrong place.

Hi,

I tried to compile DNSCloak, but it stopped here:

> [email protected] prepare:dev /Users/j/src/dnscloak
> cordova prepare ios

Unhandled error. ('Parsing /Users/j/src/dnscloak/platforms/ios/DNSCryptApp/config.xml failed')

And sure enough, there is no config.xml file in this directory.

Is it expected?

Thanks in advance.

Hi,

When I try to start dnscrypt-proxy with DnscryptproxyMain method, I have these errors on Console :
Error while calling extension: Error Domain=NSCocoaErrorDomain Code=4097 "connection on anonymousListener or serviceListener from pid 673" UserInfo={NSDebugDescription=connection on anonymousListener or serviceListener from pid 673}
and
Invalidating assertion 34-643-4315 (target:[xpcservice<com.app.myApp.DNSPacketTunnel([daemon<com.apple.neagent-ios>:643:643])>:984]) from originator [daemon<com.apple.neagent-ios>:643:643]

When I attached debugger to extension, I have EXC_BAD_ACCESS error on this line :
_dnsApp = DnscryptproxyMain(arguments[0]);

I use Xcode 12.4 and I test it on iOS 14.4.

Regards.

Hi,
I'm using DNSCloak Testflight V. 2.2.1 (0.6.1).
Since the DNSCrypt version bumped to 2.0.42, which I really appreciate because of the CNAME blocking, I constantly experience:
DNSCloak/VPN is restarted from time to time - especially is restarted after the device is woken up.

Thanks in advance
And let me tell you - I am very grateful for your work. DNSCloak is huge step towards better iOS devices.

Devices: iPhone 11 / XR / iPad Pro
iOS: 13.5 - Issue is present since the release of DNSCloak V.2.2.1
DNS servers: two DoH servers

Settings:
Connect on Demand - true
Skip accessibility check - true
strict mode - true
block IPv6 - true

disconnect on sleep - false

Hi, is it possible to update with all last changes?

Since iOS 14 the VPN connection is lost many times. It doesn't matter which resolver is used.
I think the reason is the new embedded VPN function in iOS 14. Is there a workaround, or the possibility that the App will be further developed?

Hello,

With Dnscloak enabled; personal hotspot doesn't work. Connected clients cannot access the network via hotspot.

How can I fix this?

Trying to add query_meta in the config file, but it seems doing so makes it so the vpn fails to start. I can't seem to get it to output any logs either, even on debug setting.

Version: iOS App Store

Issue: Pasting from clipboard on open

How to replicate:

1. Open DNSCloak
2. Navigate to another app and copy text
3. Reopen DNSCloak

You will see the iOS paste notification.

If you don’t copy anything at step 2 then it won’t paste, even if there’s something on the clipboard. Very strange.

Posting here for visibility even though it seems to be an abandoned project.

I do use this APP everyday because to avoid my government shitty DNS resolver but today I found that it stopped working.

When I click start, it just never connects
Reading the log I think the fault is at the list file

Here’s an error log I got:

[2020-06-22 01:19:27] [CRITICAL] Unable to use source [public-resolvers]: [Multiple stamps for server [faelix-ch-ipv4] in source from [[https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v2/public-resolvers.md]]]
[2020-06-22 01:19:27] [FATAL] No servers configured

Thank you so much if you can fix this

A new "Advanced option" (default: Off) to immediately respond to Type 65 (HTTPS) queries.

As of iOS 14 a "HTTPS query will be made alongside A/AAAA queries for all connections that use Network.framework/NSURLSession for URL schemes http:// and https://, or TCP port 80 or port 443".

Compared with <=iOS13 - iOS14 increases the amount of DNS queries being sent over the wire. Optional AAAA + Type 65 blocking would dramatically reduce this traffic.

Thx for the app; it is very useful. As I understand, there is currently only a manual way to add a blacklist file. Could the functionality be extended to automatically refresh it either via a link (i.e. I would specify a link to file like this https://download.dnscrypt.info/blacklists/domains/mybase.txt)?
I think right now I have to manually re-add it to DNSCloak every time the list changes.

Removed

My testflight app will end in few days, what i need to do? There will be a new version?
What is the situation of current development?

Hi,
I'm a big fan of DNSCloak on iOS which I'm using adguard-dns config. However, one of my work-related website is blocked. I tried to set the Whitelist, which seems to be working as the whitelist log shows the website:
[2019-12-30 08:53:37] 127.0.0.1 plusquelinfo.kantarmedia.com .kantarmedia.com
Despite this, DNSCloak returns a 0.0.0.0 IP:
ANSWER SECTION
plusquelinfo.kantarmedia.com. 3600 IN A 0.0.0.0

Any clue on how to solve this?

Longtime user, but I recently switched phones, causing me to re-download the app (so now on the new version).

Using iPhone XS - 12.3.1 - latest version of DNSCloak in app store.

So i have all default settings, plus blacklist txt file taken from pre-generated dnscrypt link. Cloudflare and Cloudflare-ipv6 is set as the selected DNS provider(s). iOS settings app shows profile installed, and connected with appropriate switches enabled. Throughout normal usage, safari, various apps, the DNSCloak vpn connection will drop to a "disconnected" state, thereby preventing any and all connections. Apps and websites are not able to load.

The time frame for self-correction of this issue can range from several seconds- indefinitely. If I open the settings app, it will generally connect to the DNSCloak vpn after approximately 1 second, and I can resume normal browsing habits. This happens across all apps, and I have not been able to detect any pattern for the issue to occur. I have notice that the appstore app pretty reliably [potentially cause?] hangs when opening and DNSCloak is connected.

This problem is also especially noticeable (but again not limited to) when waking the phone from sleep. I often have to open the settings app to connect, before switching back to the previous app.

Other people are having this issue as well. As seen here
https://www.reddit.com/r/dnscrypt/comments/bnwkm8/dnscloak_randomly_disables_on_ios/

Currently I have switched to Disconnect's Privacy Pro app which has the same purpose, but without the customizable blacklist and dns resolver list.

DNSCloak fails to start its VPN service on all iOS 15.1 betas so far. It just stays in “Starting” state, but never actually connects.

The work-around so far for me has been to move to Blokada.

how to reproduce:

1. toggle dark mode
2. settings
3. pick a black list file...

actual
it is white.

expected
dark mode.

I have DNSCloak running on my iPhone 8+ and recently I always get the DNS_PROBE_FINISHED_BAD_CONFIG error on my 6edge when I tether it to my 8+ using personal hotspot.
The only DNS Server in use is Cloudfare DNS (anycast) aka 1.1.1.1/1.0.0.1
Settings are:
connect on demand
cache responses
use DNSCript
use DNS-over-HTTP/2

everything else is turned off.
only reason I'm using it is for the blacklist option to stop the iOS updates (running on iOS13.3.1) so no ad blocking options or other filters in use.

Is this a configuration issue? I'm comfortable enough playing with options but have little experience with this kind of VPN/DNS resolvers

Hello, I am trying to make a similar app to this but dedicated for my own DNS server.

I simply want to have something in the view controller that is like
let dns="192.168.1.3"

and a single connect button. Once pressed it connects to the DNS via the VPN method so that it works on cellular too.

I've been looking through the app and this seems really complex, at its core it does what I need to do but I can't work out how to separate it as it's written in Objective-C, Java Script, Go etc. I am a swift developer myself :/

Unfortunately I cannot find anything else like this to work with.

To debug some javascript functions, I need to run this application in the web browser.
I tried to run this application with npm and also with Cordova in the browser. But It doesn't.
Can you please help me out, how to run this app in the browser?

Would love to see a true always-on-vpn profile for iOS.

Thanks

DNScrypt-proxy has added anonymized DNS a few years ago, which is a really interesting feature. Now DNScrypt-proxy has evolved into version 2.1.0. So is there any plan to wrap it into DNScloak? Thanks & looking forward to it!

Hey, dismail.de should provide DNS over HTTPS, could you please add it to the list?
https://dismail.de/info.html#dns

Thanks!

There is currently a very easy way to disable the DNSCloak VPN even if you have a passcode on the app and disable app uninstall. You just have to un-toggle "Connect On Demand" and the VPN shuts off. There is currently no way to stop this loophole and this might be Apple's intention in designing iOS.

The new feature request and proposal here is to either work around this easy loophole in some technical manner and make the DNS/VPN truly enforceable, or support the DNS Proxy (Supervised Only) setting in an iOS configuration profile which would enforce the DNS if I am understanding correctly (https://developer.apple.com/documentation/devicemanagement/dnsproxy).

Is it possible to let DNScloak automatically update blocklist? That way it will function like a mobile pihole. Is it difficult to implement? Thanks.

It would be nice to implement authentication (http basic or on DNS level e.g. TSIG or via extra EDNS options) for DoH so it will be possible to use the app with private resolvers. E.g. I'm running my own resolver on AWS and use it via a specific URL but it is not really secure.

The toggle for “showIcon” has been removed from the UI for some reason. This bug has seemed to happen after the 2.2.2 update. I tried adding “showIcon = false” to the config, but that just gives me a unsupported key error.

Older iOS versions doesn't offer the flexibility to use Files app, an option to upload via url would be a great solution.

Keep up the good work!

An Android port would be nice.

As iOS 14 supports encrypted DNS without creating a VPN profile and it can be used together with a VPN (when VPN is disconnected, the DNS app is returned to), I think DNSCloak should support it.

The native DNS settings also show indication when current network is blocking connection to the server and it doesn't show a logo on the status bar (unlike the constant [VPN].

Nice app, many thanks! Just a broad, dumb question:
when opening that iOS app, anyone might feel overwhelmed seeing so many resolvers (servers), and wouldn't know which one to pick. Is there a recommendation or a FAQ page explaining how
and/or which one to select?

Current: 4 Digit Passcode
Request: 6 Digit or more passcode

Could it be taken into consideration for the app's passcode to be changed to a 6 digit or more length instead of the current 4?

Many Thanks for the consideration

push

Hi,

is there a way to prevent apps from bypassing the system DNS or VPN (dnscloak) if they are using the (newly?) introduced iOS 14 DNS functionalities e.g. custom DoH per App.

Thanks ahead,
privacy-advo

Hi,

Just to report that Wifi exception does not work when there are spaces in the Wifi SSID.

Whenever i use it on ios 14.5 i am still getting ad s when using many diffrent ad black lists files and preset dns on the app when it would work on all previous versions

How can I setup my own DoH server instead of using one of the built in list?

Feature Request

Whitelisting networks allows the user to for example whitelist their home network in order to not bypass the local pihole.

I'm not able to block graph.facebook.com. All other domains are blocked.
The same blacklist works fine with dnscrypt-proxy.

Any idea?

Mauri

The vpn is able to connect, but I wanted to go into the app to validate my url blacklist and the splash screen never quits

Thanks

build-ios-framework.sh fails with these errors:

.build/src/github.com/jedisct1/dnscrypt-proxy/dnscrypt-proxy/local-doh.go:56:11:
assignment mismatch: 1 variable but proxy.processIncomingQuery returns 2 values

.build/src/github.com/jedisct1/dnscrypt-proxy/dnscrypt-proxy/local-doh.go:56:40:
not enough arguments in call to proxy.processIncomingQuery
	have (*ServerInfo, string, string, []byte, *net.Addr, nil, time.Time)
	want (*ServerInfo, string, string, []byte, *net.Addr, net.Conn, time.Time, int)

I "fixed" the issue by changing this line in dnscrypt-proxy/local-doh.go:

-       response := proxy.processIncomingQuery(proxy.serversInfo.getOne(), "local_doh", proxy.mainProto, packet, &xClientAddr, nil, start)
+       response, _ := proxy.processIncomingQuery(proxy.serversInfo.getOne(), "local_doh", proxy.mainProto, packet, &xClientAddr, nil, start, 0)

When I try to connect to A-And-A, it says "Starting DNS Service" then "Stopping DNS Service", goes back to ""Starting DNS Service" and just loops. I am using the default settings, except for a blacklist which blocks some Apple websites for preventing revoked apps.
So far I've tried reinstalling, backing up and restoring my device, and clearing cache.

Hi,
please update the testflight for dnsCloak. It completly stopped working and one had to fall back to the AppStore version with the old dnscrypt version (e.g. no CNAME filtering).

Thanks in advance