*NEW* DNSCrypt Proxy Package on pfSense

[nopoz]

I've created a DNSCrypt package for pfSense: pfsense/FreeBSD-ports#1434

Features

• Full GUI configuration across 7 tabs (General, Server Selection, Cache & Filtering, Logging, Lists, Advanced, Query Log)
• Manual or automatic server selection from popular providers (Cloudflare, Quad9, Google, AdGuard, NextDNS, Mullvad, OpenDNS, CleanBrowsing) or custom resolvers via DNS stamps
• Domain blocking/allowing, forwarding rules, and cloaking rules
• Query log viewer with filtering
• Service management integration (Status > Services)
• Architecture auto-detection for amd64/arm64

Screenshots

General Settings:

Server Selection:

Cache & Filtering:

Logging:

Advanced:

Query Log:

Feedback and Thanks

Would be interested in any feedback. As a long term DNSCrypt user, I wanted to contribute something back to the project even if it's indirect. I hope this will get DNSCrypt some more (deserved) exposure.

Thanks to @jedisct1 for all his hard work on DNSCrypt over the years!

[jedisct1]

This is fantastic, thank you!

I’m currently running OpenWrt, but this really makes me want to switch.

From the screenshots, one thing that’s noticeably missing is relay support.

DNSCrypt and DoH were a good start, but I’m starting to think they’re pretty much useless if the DNS providers can see every query along with the real client IP address. Anonymized DNS should be the norm.

[nopoz]

Glad you like it! 😄

Good point about the relay (Anonymized DNS) support. I've added it to the PR. The setting is under the Server Selection tab.

Screenshot Example:

[nopoz]

I made a repo that only contains the package for anyone that wants to try it out and doesn't want to:

1. wait for the PR
2. try to extract the package out of the FreeBSD-ports PR branch

Install instructions are in the repo README and only require one command on the pfSense terminal:
https://github.com/nopoz/pfsense-dnscrypt-proxy