From owner-svn-ports-all@freebsd.org Thu Mar 29 00:49:48 2018 Return-Path: Delivered-To: svn-ports-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id 350F6F5BC43; Thu, 29 Mar 2018 00:49:48 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id DC5E06C912; Thu, 29 Mar 2018 00:49:47 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id B89771278A; Thu, 29 Mar 2018 00:49:47 +0000 (UTC) (envelope-from dbaio@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w2T0nlGs012325; Thu, 29 Mar 2018 00:49:47 GMT (envelope-from dbaio@FreeBSD.org) Received: (from dbaio@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w2T0nlVo012321; Thu, 29 Mar 2018 00:49:47 GMT (envelope-from dbaio@FreeBSD.org) Message-Id: <201803290049.w2T0nlVo012321@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: dbaio set sender to dbaio@FreeBSD.org using -f From: "Danilo G. Baio" Date: Thu, 29 Mar 2018 00:49:47 +0000 (UTC) To: ports-committers@freebsd.org, svn-ports-all@freebsd.org, svn-ports-head@freebsd.org Subject: svn commit: r465857 - in head/dns/dnscrypt-proxy2: . files X-SVN-Group: ports-head X-SVN-Commit-Author: dbaio X-SVN-Commit-Paths: in head/dns/dnscrypt-proxy2: . files X-SVN-Commit-Revision: 465857 X-SVN-Commit-Repository: ports MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-ports-all@freebsd.org X-Mailman-Version: 2.1.25 Precedence: list List-Id: SVN commit messages for the ports tree List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Thu, 29 Mar 2018 00:49:48 -0000 Author: dbaio Date: Thu Mar 29 00:49:47 2018 New Revision: 465857 URL: https://svnweb.freebsd.org/changeset/ports/465857 Log: dns/dnscrypt-proxy2: Improve information/texts Submitted by: tj@mrsk.me (email) Approved by: egypcio@googlemail.com (maintainer, irc) Modified: head/dns/dnscrypt-proxy2/Makefile head/dns/dnscrypt-proxy2/files/dnscrypt-proxy.in head/dns/dnscrypt-proxy2/pkg-descr head/dns/dnscrypt-proxy2/pkg-message Modified: head/dns/dnscrypt-proxy2/Makefile ============================================================================== --- head/dns/dnscrypt-proxy2/Makefile Thu Mar 29 00:26:16 2018 (r465856) +++ head/dns/dnscrypt-proxy2/Makefile Thu Mar 29 00:49:47 2018 (r465857) @@ -2,6 +2,7 @@ PORTNAME= dnscrypt-proxy PORTVERSION= 2.0.7 +PORTREVISION= 1 CATEGORIES= dns security PKGNAMESUFFIX= 2 Modified: head/dns/dnscrypt-proxy2/files/dnscrypt-proxy.in ============================================================================== --- head/dns/dnscrypt-proxy2/files/dnscrypt-proxy.in Thu Mar 29 00:26:16 2018 (r465856) +++ head/dns/dnscrypt-proxy2/files/dnscrypt-proxy.in Thu Mar 29 00:49:47 2018 (r465857) @@ -6,12 +6,16 @@ # REQUIRE: cleanvar SERVERS # BEFORE: dnsmasq local_unbound unbound named # -# These are some lines to configure dnscrypt-proxy on /etc/rc.conf: +# Options to configure dnscrypt-proxy via /etc/rc.conf: # -# dnscrypt_proxy_enable (bool): Enable service on boot. Default: NO -# dnscrypt_proxy_conf (str): Config file to use. Default: %%PREFIX%%/etc/dnscrypt-proxy.toml -# dnscrypt_proxy_uid (str): Set to "_dnscrypt-proxy" by default. +# dnscrypt_proxy_enable (bool) Enable service on boot +# Default: NO # +# dnscrypt_proxy_conf (str) Config file to use +# Default: %%PREFIX%%/etc/dnscrypt-proxy.toml +# +# dnscrypt_proxy_uid (str) User to run dnscrypt_proxy as +# Default: _dnscrypt-proxy . /etc/rc.subr Modified: head/dns/dnscrypt-proxy2/pkg-descr ============================================================================== --- head/dns/dnscrypt-proxy2/pkg-descr Thu Mar 29 00:26:16 2018 (r465856) +++ head/dns/dnscrypt-proxy2/pkg-descr Thu Mar 29 00:49:47 2018 (r465857) @@ -1,4 +1,4 @@ -A flexible DNS proxy, with support for modern encrypted DNS protocols such as +A flexible DNS proxy with support for modern encrypted DNS protocols such as DNSCrypt v2 and DNS-over-HTTP/2. WWW: https://github.com/jedisct1/dnscrypt-proxy Modified: head/dns/dnscrypt-proxy2/pkg-message ============================================================================== --- head/dns/dnscrypt-proxy2/pkg-message Thu Mar 29 00:26:16 2018 (r465856) +++ head/dns/dnscrypt-proxy2/pkg-message Thu Mar 29 00:49:47 2018 (r465857) @@ -1,16 +1,14 @@ ===================================================================== -Version 2 of dnscrypt-proxy is written in Go and in FreeBSD it's -not capable to drop root privileges after binding a low port (53), -Go issue [1][2]. +Version 2 of dnscrypt-proxy is written in Go and therefore isn't capable +of dropping privileges after binding to a low port on FreeBSD. -For default dnscrypt-proxy2 is listening in port 5353 using username -_dnscrypt-proxy. +By default, the dnscrypt-proxy2 port will listen on (tcp/udp) port 5353 +as the _dnscrypt-proxy user. -You can change your rc.conf/config to use port 53 and root but it's -not recommended. +It's possible to change back to port 53, but not recommended. -It's needed some tweaks to use dnscrypt-proxy2 on port 5353 on your -machine, some examples below to redirect localhost port 53 to 5353: +Below are a few examples on how to redirect local connections from port +5353 to 53. [ipfw] @@ -34,13 +32,9 @@ machine, some examples below to redirect localhost por server: interface: 127.0.0.1 do-not-query-localhost: no - hide-identity: yes - hide-version: yes forward-zone: name: "." forward-addr: 127.0.0.1@5353 -[1] - https://github.com/jedisct1/dnscrypt-proxy/issues/199 -[2] - https://github.com/golang/go/issues/13838 =====================================================================