Basic:
Firstly download and activate the 2 modules required here.
Open /etc/rc.d/rc.local with text editor and add:
Code: Select all
exec /usr/local/sbin/dnscrypt-proxy --daemonize --local-address=127.0.0.2
Note: You must do this for every connection that you want to encypt
Finally restart your computer or use "dnscrypt-proxy --daemonize --local-address=127.0.0.2" as root in terminal.
Advanced (optional):
its recommended but not required to run dnscrypt as its own user with no privileges. If you want to do this then create a user called "dnscrypt" with no folder or login and add the "--user" argument in rc.local like this:
Code: Select all
exec /usr/local/sbin/dnscrypt-proxy --daemonize --user=dnscrypt --local-address=127.0.0.2
I'm sure there is a way to bypass or do something involving /etc/resolve.conf so that all network connections will use dnscrypt by default but i haven't looked into it yet.