Pages

March 4, 2014

How to bypass DNS filtering using DNScrypt

Sometimes ago my ISP decided to filter "dangerous" website such as proxy site and porn site by using DNS filtering method called DNS transparent proxy. By using this method they can block all DNS traffic to those "dangerous" site and redirect it to other webpage of their choosing. Changing DNS setting in modem and LAN adapter to other DNS such as google 8.8.8.8 doesn't work and i need other solutions to solve this problem.

Thankfully i found a very handy software called DNScrypt. This software is free, has a small size (less than 3MB), portable (doesn't need installation) and connect you to openDNS.

Basicly DNScrypt work like ssh tunneling by encrypting all DNS traffic between your computer and openDNS. To read more about how it works, read here and here.

Please note these things before you proceed with the tutorial :
  1. This tutorial is tested for windows 7 32 bit using old version of DNScrypt win client and DNScrypt proxy v1.3.2
  2. You need Microsoft .NET Framework 2.0 or greater installed on your windows.
  3. DNScrypt win client act as a GUI for easier use and control of the programs (DNScrypt proxy) on windows. No need to run command via command prompt on windows.
Let's begin with the tutorial :
  1. Download DNScrypt win client from here. Click on the "download ZIP" button on the bottom right side of the site.
  2. Download DNScrypt proxy from here. Choose the full package zip (dnscrypt-proxy-win32-full).
  3. Alternatively you can download the mirror from here uploaded by me. Please note that the programs inside is a bit old but it contains all the files you need.
  4. Extract file from step number 1 to a folder of your choice. You should find a file called dnscrypt-winclient.exe inside "Release" folder.
  5. Extract file from step number 2 to another folder. You should find dnscrypt-proxy.exe inside the bin folder along with other 3 files. Copy these 4 files into "Release" folder from step number 4.
  6. If you are using my uploaded mirror you can ignore step 4 and 5 and just extract the file to a folder of your choice.
  7. The files inside of "release" folder should look like this :
    DNScrypt files
  8. Now change your primary DNS setting in network adapter to 127.0.0.1 and leave the secondary DNS empty. See this post if you don't know how to change it.
  9. Double click on dnscrypt-winclient.exe and check the box with the name of your adapter. See picture below for other setting.
    DNScrypt Setting
  10. Click start to start the programs.
Please note that this programs use dns address from openDNS and you can minimize the programs to system tray to hide it from view.

1 comment: