diff --git a/Formula/dnscrypt-proxy.rb b/Formula/dnscrypt-proxy.rb index 3bfa30e56e..2bce36b722 100644 --- a/Formula/dnscrypt-proxy.rb +++ b/Formula/dnscrypt-proxy.rb @@ -31,23 +31,30 @@ class DnscryptProxy < Formula end def caveats; <<-EOS.undent - Once dnscrypt-proxy is running, you will have to update your local - DNS server to point to 127.0.0.1 in order for it to actually work. - This is generally done under System Preferences > Network > Advanced. - Once there, you will see a "DNS" tab where you can enter a list of DNS - servers. You will want to make sure that 127.0.0.1 is listed there first. + After starting dnscrypt-proxy, you will need to point your + local DNS server to 127.0.0.1. You can do this by going to + System Preferences > "Network" and clicking the "Advanced..." + button for your interface. You will see a "DNS" tab where you + can click "+" and enter 127.0.0.1 in the "DNS Servers" section. - Note: By default, dnscrypt-proxy runs on 127.0.0.1:53 under the "nobody" user. - If you would like to change these settings, you will have to edit the plist file. + By default, dnscrypt-proxy runs on localhost (127.0.0.1), port 53, + and under the "nobody" user using the default OpenDNS DNSCrypt-enabled + resolver. If you would like to change these settings (e.g., switching to + a DNSCrypt-enabled resolver with DNSSEC support), you will have to edit the + plist file (e.g., --resolver-address, --provider-name, --provider-key, etc.) - To check that dnscrypt-proxy is running properly, open Terminal and enter this at - the command prompt: + To check that dnscrypt-proxy is working correctly, open Terminal and enter the + following command: - nslookup -type=txt debug.opendns.com + dig txt debug.opendns.com - You should see something like this in the output: + You should see a line in the result that looks like this: - debug.opendns.com text = "dnscrypt enabled (...)" + debug.opendns.com. 0 IN TXT "dnscrypt enabled (......)" + + Note: This will only work if you are using the default OpenDNS DNSCrypt-enabled + resolver. If you are using a different resolver, you can use a tool like tcpdump + to verify that everything is working correctly. EOS end @@ -67,7 +74,6 @@ class DnscryptProxy < Formula ProgramArguments #{opt_sbin}/dnscrypt-proxy - --local-address=127.0.0.1:53 --user=nobody UserName