Skip to content

DNSCrypt server with vultr.com

Frank Denis edited this page Jun 29, 2019 · 13 revisions

After you have registered at vultr.com and successfully logged in. Click on Deploy New Server.

Then you have to select the location of your server. In this example I choose: Frankfurt

Select Server Type: Application -> Docker -> Cent OS 7

The 5$ variant is quite sufficient

Add the following startscript (type Boot): dnscrypt_install.sh

Choose a server name and click on Deploy Now

Note: This name will automatically be the name of your resolver

The server will restart after a few minutes. Go have a cup of coffee and wait 5 - 10 minutes!

Log in via SSH (the IP address can be found in the vultr. com web interface).

You can find your stamp (and all other keys) here: cat /root/keys/provider-info.txt

Firewall rules can be found here: /etc/sysconfig/iptables

Replace the content of that file with the following lines (or download them here):

*filter
:INPUT ACCEPT [0:0]
:FORWARD ACCEPT [0:0]
:OUTPUT ACCEPT [0:0]
-A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT
-A INPUT -p icmp -j ACCEPT

-A INPUT -p udp --dport 443 -j ACCEPT
-A INPUT -p tcp --dport 443 -j ACCEPT
-A INPUT -s 127.0.0.1 -j ACCEPT

-A INPUT -p tcp -m state --state NEW -m tcp --dport 22 -j ACCEPT

-A INPUT -j REJECT --reject-with icmp-host-prohibited
-A FORWARD -j REJECT --reject-with icmp-host-prohibited

COMMIT

Reload the firewall rules: systemctl reload iptables

Enjoy :)

Clone this wiki locally