For the last 3 years I have been using djbdns on SmartOS and it has all been working great. Recently however, I started looking into DNSSEC and DNSCrypt, which ended up leading me to the OpenNIC Project.
I decided to change my home DNS server setup to forward OpenNIC DNS servers over an encrypted channel as opposed to using OpenDNS like I did with djbdns.
To set this up, I have a zone with
dnsmasq- listens globally on port 53 for incoming DNS requests, answers local domain DNS requests for my network, and forwards the rest to
dnscrypt-proxy- listens locally on port 5300 for incoming DNS requests from
dnsmasqand forwards them securely to an OpenNIC DNS server
To start, install
dnsmasq with the following command:
pkgin in dnsmasq
dnscrypt-proxy requires a little bit more work as it is currently
not in pkgsrc. To install it, we need to pull in some dependencies.