DNSCrypt

Packages from Vivid 15.04 now support only systemd
__________________________________________________

A protocol for securing communications between a client and a DNS resolver.

http://dnscrypt.org/

List of free, DNSCrypt-enabled resolvers
________________________________________

To get started, you can use any of the public DNS resolvers supporting DNSCrypt.

https://github.com/jedisct1/dnscrypt-proxy/blob/master/dnscrypt-resolvers.csv

The packaging used for this branch is maintained in the official DNSCrypt git repository.

https://github.com/jedisct1
https://github.com/jedisct1/dnscrypt-proxy
https://github.com/jedisct1/libsodium

The official sources download website are

https://download.dnscrypt.org/dnscrypt-proxy/
https://download.libsodium.org/libsodium/releases/

Add the PPA, enable source code repository as well and then run:
$ apt-get source dnscrypt-proxy
$ sha256sum dnscrypt-proxy_1.4.3.orig.tar.bz2
The output should match the output of:
$ dig +short +dnssec TXT dnscrypt-proxy-1.4.3.tar.bz2.download.dnscrypt.org
And don't forget to do the same for libsodium:
$ apt-get source libsodium
$ dig +dnssec +short TXT libsodium-1.0.1.tar.gz.download.libsodium.org
You can also build the packages by yourself with debuild or:
$ dpkg-checkbuilddeps
$ dpkg-buildpackage -rfakeroot -us -uc

[NOTE]: Ubuntu has released a libsodium source for its Wily Werewolf
        15.10 which is different in size from the upstream repository.
        See https://launchpad.net/ubuntu/+source/libsodium
        Hence I am using the tar xz compression for my packages.

To get an idea of which first local address your system is using for DNS
________________________________________________________________________

$ cat /etc/resolv.conf
# Dynamic resolv.conf(5) file for glibc resolver(3) generated by resolvconf(8)
# DO NOT EDIT THIS FILE BY HAND -- YOUR CHANGES WILL BE OVERWRITTEN
nameserver 127.0.1.1

For Trusty 14.04 and Precise 12.04 Users [UPDATE]
_________________________________________________

The published packages use Upstart.

I did create a second package named dnscrypt-proxy2 to be able to have a second DNS up and running in case the first fails (like in M$ Windows).

My packages provides already 6 resolvers defined [from file /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv] in /etc/default/dnscrypt-proxy. Just uncomment the one you would like to use and comment out the default.

The default DNS resolver 1 is set to dnscrypt.eu-nl

The first DNS is defined by package dnscrypt-proxy. By default its local address is now 127.0.1.1 So don't forget to set in System Settings --> Network Settings the DNS Server Address the same 127.0.1.1 address

The default DNS resolver 2 is set to dnscrypt.eu-dk

The second DNS is defined by package dnscrypt-proxy2. By default its local address is now 127.0.1.2 It cannot be installed alone and it's only available as an addition to dnscrypt-proxy. So don't forget to add in System Settings --> Network Settings the DNS 2 Server Address. This will be IPv4 --> DNS Servers 127.0.1.1, 127.0.1.2

Select the DNS you would like to use by its ping response time, reliability and supported features.

I will provide a second DNS as well for systemd machines when I have time.

For Vivid 15.04, Wily 15.10 and Xenial 1604 Users [UPDATE]
__________________________________________________________

The published packages use Systemd.

I did create a second package named dnscrypt-proxy2 to be able to have a second DNS up and running in case the first fails (like in M$ Windows).

The default DNS resolver 1 is set to dnscrypt.eu-nl

The first DNS is defined by package dnscrypt-proxy. By default its local address is now 127.0.1.1 So don't forget to set in System Settings --> Network Settings the DNS Server Address the same 127.0.2.1 address

The default DNS resolver 2 is set to dnscrypt.eu-dk

The second DNS is defined by package dnscrypt-proxy2. By default its local address is now 127.0.1.2 It cannot be installed alone and it's only available as an addition to dnscrypt-proxy. So don't forget to add in System Settings --> Network Settings the DNS 2 Server Address. This will be IPv4 --> DNS Servers 127.0.2.1, 127.0.2.2

If you want to change the resolver look at file /usr/share/dnscrypt-proxy/dnscrypt-resolvers.csv to get the required data. Then update the config files in /etc accordingly.

Testing which DNS Resolver your System is Using
_______________________________________________

To test which DNS your system is using please visit : https://dnsleaktest.com/

Source
______

I have used for this ppa the previous work of Sergey "Shnatsel" Davidoff with some tunings:

https://launchpad.net/~shnatsel/+archive/ubuntu/dnscrypt

* Using the latest sources tarballs.
* Optimizing the code for Quad Core (Compiler option -O3) instead of Core
  Duo (Compiler option -O2).
* Upgrading the Debian compat to 9 as this is placing the libraries in the
  standard Debian path instead of the RPM (Red Hat) path.
* Given the home page hijack and the kept log by US based OpenDNS, these
  packages use by default the DNSCrypt.eu server based in The Hague, Holland.
  Still you can change the DNS resolver by editing the
  /etc/default/dnscrypt-proxy section # Remote DNS(Crypt) provider settings