LinuxQuestions.org

Slackware-14.2-Pdns-Recursor-4.0.6-Dnssec-Dnscrypt

Posted 07-21-2017 at 08:45 PM by arniekat

GENERAL INFORMATION

Source - ArchLinux Wiki and linoxide.com and PowerDNS Website

The PowerDNS recursor is part of the source tarball of the main PowerDNS distribution, but it is released separately. It is known to power the resolving needs of over 150 million internet connections.

This particular setup will use powerdns-recursor caching with Adblocking and DNSSEC (DNS Security Extensions) and DnsCrypt-Proxy to encrypt all DNS queries.

...

arniekat

LQ Newbie

Posted in Uncategorized

Views 1471 Comments 0 arniekat is offline

Slackware-14.2-Unbound-1.6.3-Dnssec-Dnscrypt-Part-1

Posted 06-17-2017 at 06:57 PM by arniekat

INTRODUCTION

Source - ArchLinux Wiki and linoxide.com and Unbound Website

DNSCrypt-Proxy is a tool for securing communications between a client and a DNS resolver. It provides a local service which can be used directly as your local resolver or as a DNS forwarder, encrypting and authenticating requests using the DNSCrypt protocol and passing them to an upstream server. By default dnscrypt-proxy is configured to use OpenDNS' servers.

DNSSEC allows a zone...

arniekat

LQ Newbie

Posted in Uncategorized

Views 1580 Comments 0 arniekat is offline

Slackware-14.2-Unbound-1.6.3-Dnssec-Dnscrypt-Part-2

Posted 06-17-2017 at 06:56 PM by arniekat

SLAAC SECURITY EXTENSIONS

https://wiki.archlinux.org/index.php/IPv6

Privacy extensions

When a client acquires an address through SLAAC its IPv6 address is derived from the advertised prefix and the MAC address of the network interface of the client. This may raise security concerns as the MAC address of the computer can be easily derived by the IPv6 address. In order to tackle this problem the IPv6 Privacy Extensions standard (RFC 4941) has been developed....

arniekat

LQ Newbie

Posted in Uncategorized

Views 1211 Comments 0 arniekat is offline

Slackware 14.2-Dnsmasq-2.77-Dnssec-Dnscrypt-Part-1

Posted 06-08-2017 at 11:21 AM by arniekat

Source - Dnsmasq Manpage, ArchLinux Wiki

In this tutorial, we will configure dnsmasq with dnssec and dnscrypt-proxy along with Adblocking. What happens is you configure dnsmasq to use 3 (three) instances of dnscrypt-proxy. In their turn, the dnscrypt-proxy servers MUST be DNSSEC-Enabled, thus enabling the dnssec extensions. Then you will also create a dnsmasq-formatted hosts file at /etc/dnsmasq.d/adblock.nsakey.20170526 which will contain approximately 70,000 entries with adservers,...

arniekat

LQ Newbie

Posted in Uncategorized

Views 2143 Comments 0 arniekat is offline