noaione/fuck_pse.md

## fuck_pse.md

      
    Raw
  

              fuck_pse.md
            
          
    Circumventing Indonesia Stupidly Amazing Blocking System

a.k.a you should go buy a VPN or setup a proper DNS resolver because it's DNS level blocking lmao (with some hijacking sprinkled)
Dalam Bahasa Indonesia
Easiest way out is to go get Simple DNSCrypt (https://simplednscrypt.org/) (Windows Only)

Install it
In Resolvers, deselect everything and select either cloudflare (doh) or Google resolver
Disable Automatic mode in Resolvers
Go to Advances settings, and enable DNS cache for faster resolving
Go to the Main Menu and enable DNScrypt and DNS-over-HTTPS
Enable the DNScrypt service and install it
Change your System DNS to 127.0.0.1

Want to make it as a service where it enable everytime you restart without any GUI? Say no more. (Works on Windows/macOS/Linux)

Get dnscrypt-proxy2 and download it somewhere https://github.com/DNSCrypt/dnscrypt-proxy/releases
Copy example-dnscrypt-proxy.toml and rename it to dnscrypt-proxy.toml
Open that in Notepad
Find this line: # server_names = ['scaleway-fr', 'google', 'yandex', 'cloudflare']
Remove the leading hash (#) and set the server_names to just cloudflare and cloudflare-ipv6 (server_names = ['cloudflare', 'cloudflare-ipv6'])
If you have IPv6, find ipv6_servers line and set it to true
Save it
Run service-install.bat as an administrator

If you made any changes, run service-restart.bat as an administrator
Change your System DNS to 127.0.0.1

Example of proper configuration of dnscrypt-proxy.toml: https://gist.github.com/noaione/1e9c743709af1c66fcbf55795a999c73
If you still can't access it, let's force DoH on our Cloudflare DNS!


Open dnscrypt-proxy.toml
Scroll to the bottom of the file until you find [static]
Add this following line (1.1.1.1, DoH, No Logs)

  [static.'cloudflare-doh-force']
  stamp = 'sdns://AgcAAAAAAAAABzEuMC4wLjEAEmRucy5jbG91ZGZsYXJlLmNvbQovZG5zLXF1ZXJ5'
  
  [static.'cloudflare-ipv6-doh-force']
  stamp = 'sdns://AgcAAAAAAAAAFlsyNjA2OjQ3MDA6NDcwMDo6MTExMV0AIDFkb3QxZG90MWRvdDEuY2xvdWRmbGFyZS1kbnMuY29tCi9kbnMtcXVlcnk'

Find server_names again, then add cloudflare-doh-force and cloudflare-ipv6-doh-force or replace it to change the resolver to our new DNS stamp

server_names = ['cloudflare-doh-force', cloudflare-ipv6-doh-force] or server_names = ['cloudflare-doh-force', cloudflare-ipv6-doh-force, 'cloudflare', 'cloudflare-ipv6']
Save then restart dnscrypt-proxy

More info about setting DoH on Windows DNS: https://github.com/DNSCrypt/dnscrypt-proxy/wiki/Local-DoH
Only need it in Browser only? (Not recommended tbh)

Chrome/Edge

Open chrome://settings/security (Chrome) or edge://settings/privacy (Edge)
Enable Secure DNS
Select With, then select Clouflare or any other from the list

Firefox

Open preferences, and search for Network Settings
Click Enable DNS over HTTPS
Select any provider from the list and save

If somehow I can't use Cloudflare or other resolver?

Use a VPN, or ask a friend that have a custom DNS resolver setup and beg them to give access to it.
Or you can try making an account in NextDNS (https://nextdns.io/) and setup your DNS resolver to it. They have a guide on how to set it up for Windows, Android, iOS, dnscrypt-proxy, and more.
You use Android?

If you have Android 9+

Go to your network settings
Find Private DNS or something like that
Set to Private DNS provider hostname and enter one.one.one.one

If you have anything but Android 9+

Install 1.1.1.1 app, and set to DNS mode only (if it doesn't work, set to WARP + DNS mode)
You use iOS?

Use 1.1.1.1 app
I don't like DNS

Go buy a fucking VPN, I. Do. Not. Recommend. Free. One.
Recommended list of paid VPN that is good and have a great privacy policy:

MullvadVPN (5€/month, no account just number | https://mullvad.net/en/) [I use this one]
iVPN ($6/month or $10/month PRO, no account just number | https://www.ivpn.net/)
ProtonVPN (10€/month | https://protonvpn.com/)
Cloudflare WARP+ (1$/month or 14rb/month | https://1.1.1.1/)

The pricing I put is their base rate, some discount will be applied if you buy for months/year (not applicable to Mullvad)
https://freedom.press/training/choosing-a-vpn/
But, but, I don't want to use VPN or a DNS

Go find a provider that does not follow the Minister rule or go to another country.