Trying to set up dns-over-https

Support Network
1

I found an arch guide

$ ss -lp 'sport = :domain'
Netid State   Recv-Q  Send-Q   Local Address:Port     Peer Address:Port Process 
udp   UNCONN  0       0        192.168.122.1:domain        0.0.0.0:*            
tcp   LISTEN  0       32       192.168.122.1:domain        0.0.0.0:*

It then says:

If the output contains more than the first line of column names, you need to disable whatever service is using port 53."

I had no idea what service that would be. Then I found an ubuntu guide

sudo lsof -i :53
COMMAND  PID   USER FD   TYPE DEVICE SIZE/OFF NODE NAME
dnsmasq 1559 nobody 5u  IPv4  19221      0t0  UDP my-host-name:domain 
dnsmasq 1559 nobody 6u  IPv4  19222      0t0  TCP my-host-name:domain (LISTEN)

But dnsmasq appears disabled:

sudo systemctl status dnsmasq
â—‹ dnsmasq.service - dnsmasq - A lightweight DHCP and caching DNS server
     Loaded: loaded (/usr/lib/systemd/system/dnsmasq.service; disabled; preset:>
     Active: inactive (dead)
       Docs: man:dnsmasq(8)

dnsmasq is also on my OpenWrt router. Is that what this is referring to??

I’m afraid to mess around too much and end up with broken DNS. Can someone point me in the right direction? In case it’s worth mentioning, I’m connected to a wifi extender via ethernet port, functioning as a wifi adapter. DHCP works with this setup on windows, but didn’t initially on linux. I had to assign an address manually. However, since creating a bridged network with a KVM/Qemu VM it seems to be working with DHCP again. /shrug

The 192.168.122.1 address mentioned above appears to be the virbr0 virtual network for the VM.

I’m on kernel 6.12.64-1 Manjaro Mate

2

Instead of that mess that you will inevitably create following random tutorials, I recommend simply using systemd-resolved which has native support for DoT.

If you have to use DoH instead, I’d rather setup doh-client on a random port and direct systemd-resolved to use that as upstream.

2 Likes
3

For what it’s worth, thank you for your response. There was some useful info there, but with all due respect I find this response quite unhelpful. Tutorials exist for a reason. I’m doing my best to learn what I can on my own… that should be the takeaway. It should be dead obvious from the level of my questions that I wouldn’t know how to do what you just suggested, so I fail to understand why you would do so without any attempt to explain how, or (god forbid) point me to another post or tutorial. You’re talking to me like I’m supposed to be on your level already, when I’m clearly not. I appreciate that you’re just a volunteer and maybe you don’t feel like doing more and you don’t owe me, but then nobody made you respond but yourself. At any rate I’ll be trying to do this at the OpenWRT level on my router instead.

4

They will likely have one or more articles on how to do that there.

Some DNS providers like cloudflare or google have some easily transferrable descriptions/instructions as well in their documentation.

ps:
removed the solution mark since there is no solution provided here
closed the topic instead

1 Like
6

@prodigeek

Learning on your own is admirable.

Manjaro is based on Arch Linux. As a general rule, I’d strongly recommend avoiding random tutorials obviously based on other Linux distributions such as Ubuntu.

@mithrial made a suggestion intended to help you – or, point you in a direction – I gleaned from their post several key words/phrases that when copy/pasted into a search engine might have produced useful results.

By way of example:

These are not “Tutorials” – they are examples of real-world documentation – you are expected to decide for yourself whether or not this information may be useful for your needs.

2 Likes