How to use the default DNS server, but through dnscrypt proxy in order to get the filtering benefits.

[spa5k]

Same as title

[lifenjoiner]

https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Forwarding
It's an allowed list. And you should get your default DNS ready first.

[spa5k]

But this seems to be pretty verbose since i want to simply skip the server provided by dnscrypt-proxy

[lifenjoiner]

Try Generic top-level domain (gTLD). Some you visit most will help a lot.

[galpt]

But this seems to be pretty verbose since i want to simply skip the server provided by dnscrypt-proxy

When you use dnscrypt-proxy, you're telling that you want dnscrypt-proxy to handle those requests instead of sending them directly to your router. You can either use localhost (127.0.0.1) or your assigned LAN IP address (192.168.x.x). Both will work just fine.

If I'm not wrong, using Forwarding is not what you wanted because the forwarding-rules.txt file needs to be constantly updated.

You may want to use the Static entries and forward the requests to your router (e.g. 192.168.1.1) so the dnscrypt-proxy will just act as a local filtering proxy instead of forwarding your requests to other public servers.
You can use the DNS stamp calculator to add your own servers.

Here's a quick example using 192.168.1.1 as the upstream server:

########################################
#            Static entries            #
########################################

## Optional, local, static list of additional servers
## Mostly useful for testing your own servers.

[static]

   [static.my-router]
     stamp = 'sdns://AAAAAAAAAAAACzE5Mi4xNjguMS4x'

Then, on Global settings, you can add my-router and test if that works like what you're expecting or not.

##################################
#         Global settings        #
##################################

## List of servers to use
##
## Servers from the "public-resolvers" source (see down below) can
## be viewed here: https://dnscrypt.info/public-servers
##
## The proxy will automatically pick working servers from this list.
## Note that the require_* filters do NOT apply when using this setting.
##
## By default, this list is empty and all registered servers matching the
## require_* filters will be used instead.
##
## Remove the leading # first to enable this; lines starting with # are ignored.

 server_names = ['my-router']

Personally, I would add google and/or cloudflare and use the load balancing strategy to ensure high availability. But it's up to you.

Also, you may want to set require_dnssec, require_nolog, require_nofilter to false since most routers or your ISP's servers usually won't meet one of those criteria.

[lifenjoiner]

I'm afraid plain DNS is not supported.

[galpt]

I'm afraid plain DNS is not supported.

Ahh, okay~
Guess @spa5k has to use the available upstream servers then.

[lifenjoiner]

Your suggestion is inspiring. Using encrypted-dns-server as the upstream will make it happen.