GeoIP plugin for DNSCrypt

This used to be a plugin for the legacy version 1.x of dnscrypt-proxy to return a REFUSED response code to DNS queries resolving to a given set of countries.

Dependencies

• cmake
• GeoIP
• ldns

Installation

$ mkdir build && cd build && cmake .. && make

The resulting plugin can be copied anywhere on the system.

Example usage

The full path to GeoIP's GeoIP.dat file must be provided, as well as the path to a text file containing the set of country codes to block. This text file should list one country per line. For example:

CA
UK

The plugin can then be loaded like any regular dnscrypt plugin, such as:

$ sudo dnscrypt-proxy --plugin libgeoip_block,--blacklist=/etc/blk-countries,--geoipdb=/etc/GeoIP.dat