OpenVPN with DNScrypt

[retournerai]

With OpenVPN enabled DNScrypt gets ignored an bypassed on my Edge Router X.

I disabled OpenVPN like this:
configure
set interfaces openvpn vtun0 disable
commit
save

I installed DNScrypt as described here: https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Installation-on-EdgeOS All works well. The testing works well.

Then I enable OpenVPN again like this:
configure
delete interfaces openvpn vtun0 disable
commit
save

And DNScrypt is being bypassed / ignored. I assume it has to do with the 127.0.0.1 which is being ignored but I could not find a way to resolve it.

My OpenVPN settings:

configure
set interfaces openvpn vtun0 config-file /config/openvpn/nl.mullvad.net.ovpn
set interfaces openvpn vtun0 description 'OpenVPN VPN tunnel'
commit
set service nat rule 5000 description 'OpenVPN Clients'
set service nat rule 5000 log disable
set service nat rule 5000 outbound-interface vtun0
set service nat rule 5000 source address 192.168.1.0/24
set service nat rule 5000 type masquerade
commit
set protocols static table 1 interface-route 0.0.0.0/0 next-hop-interface vtun0
set firewall modify SOURCE_ROUTE rule 10 description 'traffic from 192.168.1.0/24 to vtun0'
set firewall modify SOURCE_ROUTE rule 10 source address 192.168.1.0/24
set firewall modify SOURCE_ROUTE rule 10 modify table 1
set interfaces ethernet eth1 firewall in modify SOURCE_ROUTE
commit
save

Looking around in the files on my EdgeRouter I see the following:
My dnsmasq.conf file:

autogenerated by vyatta-dns-forwarding.pl on Fri Nov 5 02:32:32 EDT 2021

log-facility=/var/log/dnsmasq.log
interface=eth1
interface=eth2
interface=eth3
interface=eth4
interface=eth0
cache-size=0
server=1.1.1.1 # statically configured
server=127.0.0.1#5353
proxy-dnssec
no-resolv
no-resolv

If I remove the 1.1.1.1 DNS it stops working all together.

My resolv.conf (which should be ignored according to the DNScrypt instructions):

nameserver 1.1.1.1
nameserver 193.29.62.196

This is where the OpenVPN runs on I believe:
vtun0 10.15.0.1

I have been searching for days but could not find a way to make it work together.

[jedisct1]

Maybe this helps?

https://serverfault.com/questions/416708/how-to-ensure-openvpn-connection-uses-specific-dns

[retournerai]

Unfortunately it did not work. The issue is that DNS queries are not being forwarded to 127.0.0.1 # 5353 and whatever I tried so far did not work.

[retournerai]

Issue found. Somehow the dnsmasq was disabled. DHCP seemed disabled as well. It was hard for me to find that out but I got it working now.