{"action":"created","issue":{"url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/324","labels_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/324/labels{/name}","comments_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/324/comments","events_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/324/events","html_url":"https://github.com/jedisct1/dnscrypt-proxy/issues/324","id":120972055,"number":324,"title":"dnscrypt not encrypting","user":{"login":"elpirata15","id":15010089,"avatar_url":"https://avatars.githubusercontent.com/u/15010089?v=3","gravatar_id":"","url":"https://api.github.com/users/elpirata15","html_url":"https://github.com/elpirata15","followers_url":"https://api.github.com/users/elpirata15/followers","following_url":"https://api.github.com/users/elpirata15/following{/other_user}","gists_url":"https://api.github.com/users/elpirata15/gists{/gist_id}","starred_url":"https://api.github.com/users/elpirata15/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/elpirata15/subscriptions","organizations_url":"https://api.github.com/users/elpirata15/orgs","repos_url":"https://api.github.com/users/elpirata15/repos","events_url":"https://api.github.com/users/elpirata15/events{/privacy}","received_events_url":"https://api.github.com/users/elpirata15/received_events","type":"User","site_admin":false},"labels":[],"state":"closed","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2015-12-08T09:50:28Z","updated_at":"2015-12-08T10:01:11Z","closed_at":"2015-12-08T10:01:11Z","body":"`# uname -a`\r\n`Linux debian01 4.2.0-1-amd64 #1 SMP Debian 4.2.5-1 (2015-10-27) x86_64 GNU/Linux`\r\n\r\n`# dnscrypt-proxy -V`\r\n`dnscrypt-proxy 1.6.0`\r\n\r\nI'm using\r\n\r\n`# dnscrypt-proxy --ephemeral-keys --resolver-name=d0wn-bg-ns1`\r\n\r\nGetting this\r\n\r\n```\r\n[INFO] - [d0wn-bg-ns1] does not support DNS Security Extensions\r\n[INFO] + Namecoin domains can be resolved\r\n[INFO] + Provider supposedly doesn't keep logs\r\n[NOTICE] Starting dnscrypt-proxy 1.6.0\r\n[INFO] Ephemeral keys enabled - generating a new seed\r\n[INFO] Done\r\n[INFO] Server certificate #808464433 received\r\n[INFO] This certificate looks valid\r\n[INFO] Chosen certificate #808464433 is valid from [2015-02-12] to [2016-02-12]\r\n[INFO] Server key fingerprint is EB60:C492:AB1B:EEDF:4A1C:F774:6EE1:3051:84A8:5CD1:926E:69EA:3C88:CD95:3228:3F16\r\n[NOTICE] Proxying from 127.0.0.1:53 to 217.12.203.133:54\r\n```\r\n\r\nMy /etc/resolv.conf is set with 127.0.0.1\r\n\r\n`dig 127.0.0.1`\r\n\r\n```\r\n; <<>> DiG 9.9.5-12+b1-Debian <<>> 127.0.0.1\r\n;; global options: +cmd\r\n;; Got answer:\r\n;; ->>HEADER<<- opcode: QUERY, status: NXDOMAIN, id: 16478\r\n;; flags: qr rd ra; QUERY: 1, ANSWER: 0, AUTHORITY: 1, ADDITIONAL: 0\r\n\r\n;; QUESTION SECTION:\r\n;127.0.0.1.\t\t\tIN\tA\r\n\r\n;; AUTHORITY SECTION:\r\n.\t\t\t3124\tIN\tSOA\tns0.opennic.glue. hostmaster.opennic.glue. 2015120401 1800 900 604800 3600\r\n\r\n;; Query time: 39 msec\r\n;; SERVER: 127.0.0.1#53(127.0.0.1)\r\n;; WHEN: Tue Dec 08 10:37:30 CET 2015\r\n;; MSG SIZE  rcvd: 89\r\n```\r\n\r\nBut when I'm looking in Wireshark, I can see the dns petition unencrypted.\r\n\r\n\r\n\r\n![untitled](https://cloud.githubusercontent.com/assets/15010089/11652662/d7ce9126-9d90-11e5-9f70-50c64805d2bd.png)\r\n"},"comment":{"url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/comments/162837191","html_url":"https://github.com/jedisct1/dnscrypt-proxy/issues/324#issuecomment-162837191","issue_url":"https://api.github.com/repos/jedisct1/dnscrypt-proxy/issues/324","id":162837191,"user":{"login":"jedisct1","id":124872,"avatar_url":"https://avatars.githubusercontent.com/u/124872?v=3","gravatar_id":"","url":"https://api.github.com/users/jedisct1","html_url":"https://github.com/jedisct1","followers_url":"https://api.github.com/users/jedisct1/followers","following_url":"https://api.github.com/users/jedisct1/following{/other_user}","gists_url":"https://api.github.com/users/jedisct1/gists{/gist_id}","starred_url":"https://api.github.com/users/jedisct1/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/jedisct1/subscriptions","organizations_url":"https://api.github.com/users/jedisct1/orgs","repos_url":"https://api.github.com/users/jedisct1/repos","events_url":"https://api.github.com/users/jedisct1/events{/privacy}","received_events_url":"https://api.github.com/users/jedisct1/received_events","type":"User","site_admin":false},"created_at":"2015-12-08T10:01:11Z","updated_at":"2015-12-08T10:01:11Z","body":"You're looking at the wrong interface :)\r\n\r\n127.0.0.1 receives the regular unauthenticated queries from your applications. What gets authenticated and encrypted are the queries going to the external network!"}}