[BUG] Encrypted DNS (DoH) not working on MT6000 Flint 2 - Firmware 4.8.4

Hi

Thank you for the report. We’ve reproduced the issue and identified the root cause, and will have the R&D team work on a fix.

For now, please SSH into the router and run the following commands as a temporary workaround:

cat << 'EOF' > /etc/init.d/dnscrypt-proxy
#!/bin/sh /etc/rc.common

USE_PROCD=1

# starts before dnsmasq starts
START=18
# stops before networking stops
STOP=89

PROG=/usr/sbin/dnscrypt-proxy
CONFIGFILE=/etc/dnscrypt-proxy2/dnscrypt-proxy.toml

start_service() {
    local mode=$(uci -q get gl-dns.@dns[0].mode)
    local proto=$(uci -q get gl-dns.@dns[0].proto)

    [ "$mode" = "secure" ] || exit 0
    [ "$proto" = "DoT" ] && exit 0

    /etc/init.d/dnscrypt-proxy-vpn start

    procd_open_instance
    procd_set_param group nonevpn
    procd_set_param command "$PROG" -config "$CONFIGFILE"
    procd_set_param file "$CONFIGFILE"
    procd_set_param stdout 1
    procd_set_param stderr 1
    procd_set_param respawn ${respawn_threshold:-3600} ${respawn_timeout:-5} ${respawn_retry:-5}
    procd_close_instance
}

stop_service() {
    /etc/init.d/dnscrypt-proxy-vpn stop
}
EOF

/etc/init.d/dnscrypt-proxy start
2 Likes