Community discussions

 
strn
just joined
Posts: 10
Joined: Tue Jan 17, 2017 11:19 pm

Re: Feature request - DNSCrypt support...

Tue Jan 17, 2017 11:32 pm

I'm using dnscrypt via a raspberry in combination with pi-hole and OpenDNS. Works perfectly for alle my internal clients and I dont have to use a dnscrypt proxy on every mashine. If anyone is interested in configuring it (especially as their are some compatibility tricks you have to be aware of) I can provide you a the required steps to make it work :)
 
SystemErrorMessage
Member
Member
Posts: 378
Joined: Sat Dec 22, 2012 9:04 pm

Re: Feature request - DNSCrypt support...

Tue Feb 14, 2017 5:31 pm

Not many would use a raspberry pi to supplement what their routers cant do. Even i run cups and xsane on raspberry pi as well.

This feature is an absolute must because of the DNS proxy/hijacking done by ISPs and is a big problem for me and other people as my DDNS domain is blacklisted by many ISPs only because of the domain it is under which makes it harder for me.

Plenty of other reasons such as for businesses that want to implement their own domain system and to use DNScrypt as routerOS cannot first form a tunnel to the DNS server without a static IP so which not only resolves the issue of ISPs handling your DNS by force but also to secure your DNS so that it does not get attacked by hackers and such.
 
ab0tj
just joined
Posts: 9
Joined: Thu Jun 14, 2007 1:05 am

Re: Feature request - DNSCrypt support...

Tue Mar 07, 2017 8:33 pm

I would also like to add my vote for DNScrypt support! I currently run a separate server for this.
 
majestic
Frequent Visitor
Frequent Visitor
Posts: 81
Joined: Mon Dec 05, 2016 11:19 am

Re: Feature request - DNSCrypt support...

Tue Mar 07, 2017 8:36 pm

I would also like to add my vote for DNScrypt support! I currently run a separate server for this.
likewise.
 
MikroTikFan
Member Candidate
Member Candidate
Posts: 196
Joined: Sat Aug 02, 2014 1:13 am

Re: Feature request - DNSCrypt support...

Mon Mar 20, 2017 1:25 am

+1 for DNSCrypt - again, again and again ...

Mikrotik developers how long we should wait ?

Customer feedback is this days something important for You ?
 
td32
Frequent Visitor
Frequent Visitor
Posts: 81
Joined: Fri Nov 18, 2016 5:55 am

Re: Feature request - DNSCrypt support...

Mon Mar 20, 2017 2:10 am

its 2017 and this must be a priority feature.
 
R1CH
Forum Veteran
Forum Veteran
Posts: 861
Joined: Sun Oct 01, 2006 11:44 pm

Re: Feature request - DNSCrypt support...

Wed Mar 29, 2017 1:23 am

With the US pushing an agenda that erodes privacy, DNSCrypt support is going to become essential to prevent ISPs from being able to monitor and monetize your browsing habits. Hope to see this in a release sooner rather than later.

https://www.washingtonpost.com/news/the ... otections/
 
teodorch
just joined
Posts: 13
Joined: Sun Jun 07, 2015 9:24 am

Re: Feature request - DNSCrypt support...

Mon Apr 03, 2017 1:20 am

+1

Sent from my Nexus 5 using Tapatalk
 
teodorch
just joined
Posts: 13
Joined: Sun Jun 07, 2015 9:24 am

Re: Feature request - DNSCrypt support...

Mon Apr 03, 2017 1:21 am

+1

Sent from my Nexus 5 using Tapatalk
 
teodorch
just joined
Posts: 13
Joined: Sun Jun 07, 2015 9:24 am

Re: Feature request - DNSCrypt support...

Mon Apr 03, 2017 1:21 am

+1

Sent from my Nexus 5 using Tapatalk
 
ryz
just joined
Posts: 13
Joined: Sun May 27, 2007 5:10 pm

Re: Feature request - DNSCrypt support...

Mon Apr 03, 2017 3:11 pm

+1

Wysłane z mojego GT-I9195 przy użyciu Tapatalka
 
actck
just joined
Posts: 1
Joined: Sun Apr 16, 2017 10:13 am

Re: Feature request - DNSCrypt support...

Sun Apr 16, 2017 10:20 am

+1 is very helpful with dns poisoning.

We need this feature and request another feature: custom the dns server port in "IP -> DNS Settings"
 
vaah
Frequent Visitor
Frequent Visitor
Posts: 59
Joined: Sun Mar 11, 2012 7:34 pm
Location: Surabaya

Re: Feature request - DNSCrypt support...

Mon Apr 17, 2017 2:24 pm

+1
I'd like to see DNScrypt be implemented into RouterOS, I currently use tomato router to get the DNScrypt working.
 
User avatar
GreySer
just joined
Posts: 17
Joined: Thu Apr 21, 2016 9:38 am
Location: Cheboksary

Re: Feature request - DNSCrypt support...

Mon Apr 17, 2017 2:45 pm

+1
Now using openwrt under vmware.
 
mdove
just joined
Posts: 1
Joined: Sat Apr 22, 2017 12:19 am

Re: Feature request - DNSCrypt support...

Sat Apr 22, 2017 12:22 am

+1 please.

Thanks,
Mike
 
Florian
Frequent Visitor
Frequent Visitor
Posts: 58
Joined: Sun Mar 13, 2016 9:45 am
Location: France

Re: Feature request - DNSCrypt support...

Sat Apr 22, 2017 2:03 pm

+1.
- Sorry for my english -
 
User avatar
yngndrw
just joined
Posts: 17
Joined: Sun Oct 27, 2013 12:26 am

Re: Feature request - DNSCrypt support...

Mon May 08, 2017 6:57 pm

+1, would love to see this implemented.
 
Neddy
just joined
Posts: 1
Joined: Tue May 23, 2017 7:53 am

Re: Feature request - DNSCrypt support...

Tue May 23, 2017 7:56 am

I register to post this request.

Please add support for DNScrypt on RouterOS, it protects our users privacy. I highly appreciate.
 
majestic
Frequent Visitor
Frequent Visitor
Posts: 81
Joined: Mon Dec 05, 2016 11:19 am

Re: Feature request - DNSCrypt support...

Thu May 25, 2017 5:09 pm

Doesn't this supersede DNScrypt, plus, is now an accepted standard? https://tools.ietf.org/html/rfc7858

But it is still a very fresh RFC
If you could add support for this, it would be great for everyone or even DNSCrypt which a lot of people use and is more common/known to them. Either would be acceptable. I kinda expect that RFC7858 would be easier to add as the support for unbound has been out quite a long time now if I recall even tho the RFC is quite young as you pointed out.

My only solution right now is to install say Softether onto the resolvers themselfs, then getting the MTK to connect to it and use it as its DNS server. Not a great solution due to if the VPN drops/dies, the DNS for the network would also fold as they would be pointed to the private IP's.
 
platitude
just joined
Posts: 2
Joined: Sat Jun 03, 2017 10:15 am

Re: Feature request - DNSCrypt support...

Sat Jun 03, 2017 10:18 am

+1 for this feature. It is highly important to implement it, especially for users and admins from countries with internet censorship (like me). Hope to see it soon. Thanks!
 
Yekver
just joined
Posts: 17
Joined: Fri Jan 31, 2014 9:47 pm

Re: Feature request - DNSCrypt support...

Sun Jun 25, 2017 9:56 pm

+100!!!!
 
User avatar
WildCat
just joined
Posts: 5
Joined: Sat Nov 30, 2013 8:45 pm
Location: RU

Re: Feature request - DNSCrypt support...

Tue Jun 27, 2017 8:38 am

+1
It's a necessity for users from Russia and other countries with a barbarous attitude to the Internet.
 
Diamond
newbie
Posts: 26
Joined: Tue Mar 19, 2013 7:11 pm
Location: RU

Re: Feature request - DNSCrypt support...

Tue Jun 27, 2017 11:15 am

+1
Necessary today feature
 
Rader
just joined
Posts: 1
Joined: Sat Jul 01, 2017 1:47 pm
Location: Saint-Petersbug, Russia

Re: Feature request - DNSCrypt support...

Sat Jul 01, 2017 1:53 pm

+1 for DNSCrypt
It is very necessary today!
 
netbus
newbie
Posts: 39
Joined: Mon Sep 04, 2017 12:42 pm

Re: Feature request - DNSCrypt support...

Fri Oct 13, 2017 9:41 am

+1
I need this
 
User avatar
Joni
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Fri Mar 20, 2015 2:46 pm
Contact:

Re: Feature request - DNSCrypt support...

Tue Oct 24, 2017 8:55 am

Since it is not mentioned yet... "However, just enabling "DNS over TLS" feature would not prevent your ISP to know what websites you visit. Server Name Indication (SNI) — an extension of the TLS protocol — also indicates ISPs that which hostname is being contacted by the browser at the beginning of the 'handshake' process." https://thehackernews.com/2017/10/andro ... r-tls.html
 
netbus
newbie
Posts: 39
Joined: Mon Sep 04, 2017 12:42 pm

Re: Feature request - DNSCrypt support...

Tue Oct 24, 2017 9:55 am

Since it is not mentioned yet...
We are talking about DNSCrypt not DNS over TLS
 
User avatar
Joni
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Fri Mar 20, 2015 2:46 pm
Contact:

Re: Feature request - DNSCrypt support...

Tue Oct 24, 2017 10:58 am

Excellent point, DNSCrypt vs DNS over TLS

However doesn't it have the same "issue"? (being a different protocol, HTTP(S) vs DNS)
AFAIK, overly simplified the only difference being "Instead of relying on trusted certificate authorities commonly found in web browsers, the client has to explicitly trust the public signing key of the chosen provider."

btw. You intend to reference the official site https://dnscrypt.org instead of the commercial Cisco OpenDNS @ https://www.opendns.com/about/innovations/dnscrypt/
 
netbus
newbie
Posts: 39
Joined: Mon Sep 04, 2017 12:42 pm

Re: Feature request - DNSCrypt support...

Tue Oct 24, 2017 11:35 am

With this two methods, DNS Requests/Responses are encrypted. It's not fully anonymity but a step to exacerbate life for some snooper.
Only when visiting https websites "(SNI)" Problem is present.
 
User avatar
Joni
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Fri Mar 20, 2015 2:46 pm
Contact:

Re: Feature request - DNSCrypt support...

Tue Oct 24, 2017 12:19 pm

Well this isn't about websites, considering the current "HTTPS everywhere" movement this sounds a bit more than "only", as SNI is a TLS extension, not HTTP.

(just to elaborate how the implementation of DNSCrypt or DNS over TLS (DNSS) itself isn't much of an advancement, especially in relation to a service at the same IP and port being just as available without the hostname, unless using SNI, which is still visible. Not saying it's better than nothing but just emphasizing that it doesn't do all that much)
 
User avatar
yngndrw
just joined
Posts: 17
Joined: Sun Oct 27, 2013 12:26 am

Re: Feature request - DNSCrypt support...

Tue Oct 24, 2017 2:43 pm

DNSCrypt is not intended to provide privacy, it's intended to help prevent DNS spoofing.
 
User avatar
Joni
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Fri Mar 20, 2015 2:46 pm
Contact:

Re: Feature request - DNSCrypt support...

Tue Oct 24, 2017 7:45 pm

Just emphasizing as many presume one with the other.
Could you reference the intention? It's not a authentication protocol but an encryption protocol... hence the name... not that it could fix SNI but since you specified intentions...
 
User avatar
yngndrw
just joined
Posts: 17
Joined: Sun Oct 27, 2013 12:26 am

Re: Feature request - DNSCrypt support...

Tue Oct 24, 2017 8:25 pm

The best reference for the intentions would be the first paragraph of the DNSCrypt website:
DNSCrypt is a protocol that authenticates communications between a DNS client and a DNS resolver. It prevents DNS spoofing. It uses cryptographic signatures to verify that responses originate from the chosen DNS resolver and haven't been tampered with.
There is no mention of privacy and you wouldn't expect it due to the SNI issue that you mentioned earlier.

The term "security" is quite a broad one and the security referenced in those security vs privacy articles are referring to national security and the need for surveillance, rather that security in the sense of authentication and verification. You can most certainly have security (The authentication kind) without privacy being a fundamental requirement, which is how public-private key cryptography works. (I.e. The public key is, as the name suggests, public - But knowledge of the public key does not allow a third party to impersonate the private key holder)

Unless I'm misunderstanding the scope of DNSCrypt, the primary usage of a pinned key-pair provides signing (Hence authentication of the server) rather than encryption - Encryption is just a side-effect of using SSL.
 
deathmagicmedia
just joined
Posts: 4
Joined: Fri Jul 22, 2016 5:14 pm
Location: Cape Town, South Africa
Contact:

Re: Feature request - DNSCrypt support...

Wed Oct 25, 2017 10:49 am

+1 please.
MikroTik Certified Network Associate (MTCNA)
Ubiquiti Broadband Wireless Specialist (UBWS)
Ubiquiti Broadband Wireless Admin (UBWAv2)
 
timonlio
just joined
Posts: 6
Joined: Thu Mar 09, 2017 2:35 pm

Re: Feature request - DNSCrypt support...

Thu Nov 02, 2017 3:03 pm

+1 for DNSCrypt, very useful feature
 
User avatar
Xtreme512
Frequent Visitor
Frequent Visitor
Posts: 69
Joined: Sun Jun 08, 2014 2:43 pm
Location: Nicosia, CY
Contact:

Re: Feature request - DNSCrypt support...

Sun Nov 05, 2017 7:13 pm

hope to see it in new routeros version.
I Walk Alone
 
lapki
just joined
Posts: 1
Joined: Sat Nov 25, 2017 8:38 am

Re: Feature request - DNSCrypt support...

Sat Nov 25, 2017 8:43 am

DNScrypt ready? I would like to install it on my device :)
 
User avatar
cgood
newbie
Posts: 25
Joined: Sat May 31, 2014 4:01 pm
Location: Russia, Sochi
Contact:

Re: Feature request - DNSCrypt support...

Mon Dec 04, 2017 10:58 pm

+1 DNSCRYPT-PROXY support! Thank you!
  • MTCNA 99% '17
    MTCRE 89% '17
    MTCTCE 89% '18
 
sergeykoch
just joined
Posts: 1
Joined: Wed Nov 01, 2017 7:25 pm

Re: Feature request - DNSCrypt support...

Wed Dec 13, 2017 5:35 pm

+1 for dnscrypt support
 
m3763
just joined
Posts: 1
Joined: Fri Dec 15, 2017 11:06 pm

Re: Feature request - DNSCrypt support...

Fri Dec 15, 2017 11:08 pm

Just registered to add my +1 for support
 
User avatar
netravnen
just joined
Posts: 6
Joined: Sun Dec 31, 2017 2:48 am
Location: Capital Region, DK
Contact:

Re: Feature request - DNSCrypt support...

Sun Dec 31, 2017 3:10 am

+1

dnscrypt-proxy added as a separate npk package ?

So initially not a full-blown server. Just a forwarder.
Cheers,
Netravnen
 
User avatar
Joni
Frequent Visitor
Frequent Visitor
Posts: 70
Joined: Fri Mar 20, 2015 2:46 pm
Contact:

Re: Feature request - DNSCrypt support...

Mon Jan 08, 2018 1:05 pm

Well that problem got resolved... funny how things turn out in completely unexcpected ways... wait, no... https://www.reddit.com/r/linux/comments ... abandoned/
 
badass
just joined
Posts: 1
Joined: Thu Feb 01, 2018 12:53 pm

Re: Feature request - DNSCrypt support...

Sat Feb 17, 2018 12:13 pm

my +1 for support
 
Lion
just joined
Posts: 1
Joined: Tue Apr 03, 2018 12:07 pm

Re: Feature request - DNSCrypt support...

Tue Apr 03, 2018 12:12 pm

+1
где DNS-over-TLS и DNS-over-HTTPS ?
 
anav
Forum Guru
Forum Guru
Posts: 2731
Joined: Sun Feb 18, 2018 11:28 pm
Location: Nova Scotia, Canada

Re: Feature request - DNSCrypt support...

Sat Apr 14, 2018 9:54 pm

Well that problem got resolved... funny how things turn out in completely unexcpected ways... wait, no... https://www.reddit.com/r/linux/comments ... abandoned/
Don't look so sad there Mr Coyote......... In any case one has to follow standards, the RFC bouncing ball. :-)
By the way, I could use your sign every time I open WINBOX. ;-)
I'd rather manage rats than software. Follow my advice at your own risk! (Sob & mkx forced me to write that!)
 
BioDranik
just joined
Posts: 3
Joined: Sat Apr 21, 2018 7:30 pm

Re: Feature request - DNSCrypt support...

Sat Apr 21, 2018 7:33 pm

+1 for DNSCrypt, HTTPS-DNS or TLS-DNS
 
blackzero
just joined
Posts: 18
Joined: Tue Aug 09, 2011 3:40 pm

Re: Feature request - DNSCrypt support...

Sun Apr 22, 2018 2:04 am

Please do this. Anything man, DNSCrypt or DNS over TLS. I can do with either. Just do it don't be lazy.
 
BigDT
just joined
Posts: 1
Joined: Sat May 12, 2018 12:49 am

Re: Feature request - DNSCrypt support...

Sat May 12, 2018 12:53 am

+1 For DNScrypt support. also DNS over TLS or DNS over HTTPS

Its very useful for country like Indonesia.
ISP here use Transparent DNS and cannot use the standard 53 dns port
 
xkubus
just joined
Posts: 4
Joined: Sun Dec 11, 2011 7:49 pm

Re: Feature request - DNSCrypt support...

Tue Jun 26, 2018 1:04 pm

+1, we are waiting for years to implement. Developers, please pay attention to the number of applicants.
 
msatter
Forum Guru
Forum Guru
Posts: 1093
Joined: Tue Feb 18, 2014 12:56 am
Location: Netherlands / Nīderlande

Re: Feature request - DNSCrypt support...

Tue Jun 26, 2018 1:27 pm

In the time being you can use Unbound on RaspberryPI to have the current DNS securities.

https://unbound.net/
Two RB760iGS (hEX S) in series. One does PPPoE/IKEv2 and the other does the rest of the tasks.
Running:
RouterOS 6.45Beta / Winbox 3.18 / MikroTik APP 1.2.6
Having an Android device, use https://github.com/M66B/NetGuard/releases (no root required)

Who is online

Users browsing this forum: No registered users and 4 guests