{"action":"created","issue":{"url":"https://api.github.com/repos/alterstep/dnscrypt-osxclient/issues/72","labels_url":"https://api.github.com/repos/alterstep/dnscrypt-osxclient/issues/72/labels{/name}","comments_url":"https://api.github.com/repos/alterstep/dnscrypt-osxclient/issues/72/comments","events_url":"https://api.github.com/repos/alterstep/dnscrypt-osxclient/issues/72/events","html_url":"https://github.com/alterstep/dnscrypt-osxclient/issues/72","id":106495840,"number":72,"title":"About Text - DNSCrypt Menubar via curl","user":{"login":"TraderStf","id":5954335,"avatar_url":"https://avatars.githubusercontent.com/u/5954335?v=3","gravatar_id":"","url":"https://api.github.com/users/TraderStf","html_url":"https://github.com/TraderStf","followers_url":"https://api.github.com/users/TraderStf/followers","following_url":"https://api.github.com/users/TraderStf/following{/other_user}","gists_url":"https://api.github.com/users/TraderStf/gists{/gist_id}","starred_url":"https://api.github.com/users/TraderStf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TraderStf/subscriptions","organizations_url":"https://api.github.com/users/TraderStf/orgs","repos_url":"https://api.github.com/users/TraderStf/repos","events_url":"https://api.github.com/users/TraderStf/events{/privacy}","received_events_url":"https://api.github.com/users/TraderStf/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":4,"created_at":"2015-09-15T07:11:41Z","updated_at":"2015-09-23T11:50:22Z","closed_at":null,"body":"I think DNSCrypt Menubar is missing, even if covered by one in curl, .\r\nAdding also the OS X firewall explanation can help rookies.\r\nAnd to make it easier to read it, one rule per line and exactly how they appear in LS.\r\n\r\nCorrect my English as I translate text/label/button's titles from French.\r\nThe final version:\r\n\r\n<h1>DNSCrypt Macintosh OS X Client</h1>\r\n\r\nDNSCrypt insure the communications between the DNS client, on your device, and a DNS Resolver which support the DNSCrypt protocol.\r\nIt prevents DNS spoofing and authenticate the responses are from the chosen DNS Resolver and have not been tampered with.\r\nMore information at https://www.DNSCrypt.org\r\n\r\nDNSCrypt for Macintosh is available at\r\nhttps://github.com/alterstep/dnscrypt-osx-client\r\n\r\n<h2>DHCP</h2>\r\nDNSCrypt requires DHCP, be sure to set it in System - Preferences - Network - Configure IP4 - Using DHCP.\r\n\r\n<h2>Firewalls</h2>\r\n\r\n- If you have a firewall, open TCP and UDP ports 53, 54, 443 and 1053. These are the most common ports used for DNSCrypt.\r\n\r\n- If OS X firewall is activated, you must authorize incoming connections for \"dnscrypt-proxy\" either manually or by answering the prompt at its first launch.\r\nThis can be done in from System Preferences - Security and confidentiality - Firewall Options panel.\r\n\r\n<h2>Automatically disable if blocked</h2>\r\nThis feature automatically disables DNSCrypt when DNS queries are not able to reach the DNSCrypt resolver. This can happen on public Wi-Fi networks that require going through a captive portal before you can access external networks.\r\nThis function is only provided for conveniency. When enabled, the protocol can be easily downgraded by third-parties. In other words, when the \"Automatically disable if blocked\" feature is enabled, this software doesn't provide any security at all against active attackers, but it can still be useful against passive attackers and in order to bypass DNS censorship.\r\nDon't enable it unless you are frequently roaming and you don't want to manually disable/enable DNSCrypt.\r\n\r\n<h2>Little Snitch</h2>\r\nThese rules must be defined manually or via the prompt during the first launch of DNSCrypt:\r\n\r\n<b>curl</b>\r\n- Allow outgoing TCP connections to port 80 (http) of updates.dnscrypt.org\r\n- Allow outgoing TCP connections to port 80 (http) of www.apple.com\r\n- Allow outgoing TCP connections to port 443 (https) in domain github.com\r\n\r\n<b>dig</b>\r\n- Allow any outgoing connection\r\n\r\n<b>dnscrypt-proxy</b> for the Preferences Pane\r\n- Allow any outgoing connection\r\n\r\n<b>dnscrypt-proxy</b> for the Daemon\r\n- Allow any incoming connection\r\n- Allow any outgoing connection\r\n\r\n<b>DNSCrypt Menubar</b> for the icon in the menu bar\r\n- Allow outgoing TCP connections via curl to port 80 (http) of updates.dnscrypt.org\r\n\r\n<small><i>This rule is perhaps already in section \"Suggestions\".\r\nYou can allow it even if it is already covered by a rule for curl.\r\nMove the mouse pointer over the title \"Suggestions\" and click on \"Show\".\r\nClick on \"Silent Mode Connections\"\r\nSelect the \"DNSCrypt Menubar\" line and click on the \"Allow\" button on top.</i></small>\r\n\r\nThanks to @cavemandaveman and @TraderStf.\r\n\r\n<h1>Check Your Configuration</h1>\r\nTo verify your network settings, you can use one of these sites:\r\nhttps://whoer.net\r\nhttps://www.browserleaks.com\r\nhttps://ipleak.net\r\n"},"comment":{"url":"https://api.github.com/repos/alterstep/dnscrypt-osxclient/issues/comments/142576897","html_url":"https://github.com/alterstep/dnscrypt-osxclient/issues/72#issuecomment-142576897","issue_url":"https://api.github.com/repos/alterstep/dnscrypt-osxclient/issues/72","id":142576897,"user":{"login":"TraderStf","id":5954335,"avatar_url":"https://avatars.githubusercontent.com/u/5954335?v=3","gravatar_id":"","url":"https://api.github.com/users/TraderStf","html_url":"https://github.com/TraderStf","followers_url":"https://api.github.com/users/TraderStf/followers","following_url":"https://api.github.com/users/TraderStf/following{/other_user}","gists_url":"https://api.github.com/users/TraderStf/gists{/gist_id}","starred_url":"https://api.github.com/users/TraderStf/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/TraderStf/subscriptions","organizations_url":"https://api.github.com/users/TraderStf/orgs","repos_url":"https://api.github.com/users/TraderStf/repos","events_url":"https://api.github.com/users/TraderStf/events{/privacy}","received_events_url":"https://api.github.com/users/TraderStf/received_events","type":"User","site_admin":false},"created_at":"2015-09-23T11:50:22Z","updated_at":"2015-09-23T11:50:22Z","body":"DoOoOo... just read my email.\r\nHTML is ok, tested and validated with BBEdit.\r\n"}}