rsrc/extra/dns/README.md

local dns control for linux with leak reduction, firewall-aware protections, and repair tools.

what it does

• routes system dns through local dnsmasq -> unbound
• keeps dns easier to monitor and control
• helps reduce dns leak risk
• adds rollback and repair workflows for safer network changes

local chain

• dnsmasq on 127.0.0.1:53
• unbound on 127.0.0.1:5335

includes

• localhost-only dns listeners
• blocklist and whitelist support
• upstream dns presets and custom upstreams
• vpn-aware firewall rules
• lockdown mode on disconnect
• dns-only fallback mode
• route and wireguard checks
• one-click repair and dns repair
• ipv4-only unbound
• gui and headless command support

Note

optional proton cli supported- if unavailable, local dns, firewall, and repair features can still be used normally.

install

tar -xzf dns-linux-amd64.tar.gz
cd dns
chmod +x dns
sudo cp dns /usr/local/bin/dns
sudo chmod +x /usr/local/bin/dns
sudo cp app.ico /usr/share/pixmaps/dns.ico
sudo tee /usr/share/applications/dns.desktop >/dev/null <<'EOF'
[Desktop Entry]
Version=1.0
Type=Application
Name=dns
Comment=dns manager
Exec=/usr/local/bin/dns
Icon=/usr/share/pixmaps/dns.ico
Terminal=false
Categories=Network;Security;System;
StartupNotify=true
EOF
sudo update-desktop-database /usr/share/applications 2>/dev/null || true
dns --headless status

run

dns

cmds

dns --headless status
dns --headless tests
dns --headless startup-report

admin

sudo dns --headless apply
sudo dns --headless confirm-apply
sudo dns --headless repair
sudo dns --headless repair-dns
sudo dns --headless revert

build

chmod +x install.sh build.sh package-install.sh
./install.sh
./build.sh onefile

uninstall

sudo rm -f /usr/local/bin/dns
sudo rm -f /usr/share/pixmaps/dns.ico
sudo rm -f /usr/share/applications/dns.desktop
sudo rm -rf /opt/dns
sudo update-desktop-database /usr/share/applications 2>/dev/null || true