SmartDNS

https://pymumu.github.io/smartdns/en
Admin
SmartDNS is a local DNS server with a dashboard that retrieves DNS query results from multiple...
Tokens:40,528
Snippets:424
Trust Score:8.3
Update:1 week ago
Show doc for...
Tokens:
Raw
### Install SmartDNS on X86_64 systems with tar and install script

Source: https://pymumu.github.io/smartdns/en/install/linux

Extract the .tar.gz package, change to the smartdns directory, make the install script executable, and run it with the -i option.

```bash
tar zxf smartdns.xxxxxxxx.x86_64-linux-all.tar.gz
cd smartdns
chmod +x ./install
./install -i
```

--------------------------------

### Enable and start SmartDNS service

Source: https://pymumu.github.io/smartdns/en/install/linux

Use systemctl to enable and start the SmartDNS service.

```bash
systemctl enable smartdns
systemctl start smartdns
```

--------------------------------

### Install SmartDNS on Debian

Source: https://pymumu.github.io/smartdns/en/download

Install SmartDNS using apt-get on Debian systems.

```shell
apt-get install smartdns
```

--------------------------------

### Example smartdns.conf configuration

Source: https://pymumu.github.io/smartdns/en/install/entware

Example configuration for smartdns.conf showing listen port, upstream servers, and domain rules.

```config
# set listen port
bind []:53 
# set upstream servers
server 1.1.1.1
server-tls 8.8.8.8
# set domain rules
address /example.com/1.2.3.4
domain-rules /example.com/ -address 1.2.3.4

```

--------------------------------

### Domain forwarding rules example

Source: https://pymumu.github.io/smartdns/en/config/domain-forwarding

Shows how to map domain suffixes to specific DNS servers. Lines starting with # are comments; the format is 'domain -> server'. This example sends .local domains to 192.168.1.1 and .com domains to 10.0.0.1.

```plaintext
.local -> 192.168.1.1 # .local domain names are sent to 192.168.1.1 for resolution
.com -> 10.0.0.1  # .com domain names are sent to 10.0.0.1 for resolution

```

--------------------------------

### Install SmartDNS IPK package

Source: https://pymumu.github.io/smartdns/en/install/entware

Run this command in the router's /tmp directory to install the SmartDNS IPK package using ipkg.

```bash
ipkg install smartdns.xxxxxxx.mipsbig.ipk

```

--------------------------------

### Install SmartDNS on OpenWrt before 24.10 using opkg

Source: https://pymumu.github.io/smartdns/en/install/openwrt

Use these commands to install SmartDNS and its LuCI interface on OpenWrt versions before 24.10. The package files are .ipk format.

```shell
opkg install smartdns.1.yyyy.MM.dd-REL.xxxx.ipk
opkg install luci-app-smartdns-lite.1.yyyy.MM.dd-REL.all.ipk

```

--------------------------------

### Install SmartDNS on Entware

Source: https://pymumu.github.io/smartdns/en/download

Install SmartDNS using ipkg on Entware. Software source: https://bin.entware.net/

```shell
ipkg update
ipkg install smartdns
```

--------------------------------

### Install SmartDNS on ARM/Debian systems with dpkg

Source: https://pymumu.github.io/smartdns/en/install/linux

Install the .deb package for ARM/Debian systems. The package name is like smartdns.xxxxxxxx.arm-debian-all.deb.

```bash
dpkg -i smartdns.xxxxxxxx.arm-debian-all.deb
```

--------------------------------

### Install SmartDNS on macOS using Homebrew

Source: https://pymumu.github.io/smartdns/en/download

Install SmartDNS using Homebrew on macOS. Software source (Rust port): https://github.com/mokeyish/smartdns-rs/releases/

```shell
brew update
brew install smartdns
```

--------------------------------

### Install SmartDNS on OpenWrt using opkg

Source: https://pymumu.github.io/smartdns/en/download

Use opkg command on OpenWrt systems after version 22.03. Software source: https://downloads.openwrt.org/releases/

```shell
opkg update
opkg install luci-app-smartdns
opkg install smartdns
```

--------------------------------

### Configure QUIC servers with server-quic

Source: https://pymumu.github.io/smartdns/en/config/upstream-dns

Example configuration for a DNS-over-QUIC upstream server. Basic parameters are the same as for TLS servers.

```plaintext
# Standard configuration
server-quic 223.5.5.5
```

--------------------------------

### Domain set usage example

Source: https://pymumu.github.io/smartdns/en/config/domain-rule

Shows how to define a domain set and use it in a domain rule. The domain-set command loads a file, and the domain-rules command applies the rule to all domains in the set.

```plaintext
domain-set -name ad -file /etc/smartdns/ad-list.conf
domain-rules /domain-set:ad/ -a #

```

--------------------------------

### Install SmartDNS on OpenWrt 24.10+ using apk

Source: https://pymumu.github.io/smartdns/en/install/openwrt

Use these commands to install SmartDNS and its LuCI interface on OpenWrt 24.10 or later. The --allow-untrusted flag is required because the packages are not signed.

```shell
apk add --allow-untrusted smartdns.1.yyyy.MM.dd-REL.xxxx.apk
apk add --allow-untrusted luci-app-smartdns-lite.1.yyyy.MM.dd-REL.all.apk

```

--------------------------------

### Use domain set in configuration

Source: https://pymumu.github.io/smartdns/en/faq

Shows how to reference the domain set in configuration directives by replacing /domain/ with /domain-set:ad/. The example includes address, domain-rules, and nameserver directives.

```plaintext
address /domain-set:ad/#
domain-rules /domain-set:ad/ -a #
nameserver /domain-set:ad/server
...
```

--------------------------------

### smartdns package directory structure

Source: https://pymumu.github.io/smartdns/en/install/wsl

Directory structure after extracting the smartdns installation package to D:\, showing the etc, package, src, and systemd folders.

```text
D:\SMARTDNS
├─etc
│  ├─default
│  ├─init.d
│  └─smartdns
├─package
│  └─windows
├─src
└─systemd

```

--------------------------------

### Configure HTTP3 servers with server-h3 and server-http3

Source: https://pymumu.github.io/smartdns/en/config/upstream-dns

Example configurations for DNS-over-HTTP3 upstream servers. The first uses the standard `server-h3` syntax, the second uses the alternative `server-http3` syntax. Basic parameters are the same as for HTTPS servers.

```plaintext
# Standard configuration
server-h3 h3://dns.alidns.com/dns-query
# Alternative compatible syntax
server-http3 http3://dns-unfiltered.adguard.com/dns-query
```

--------------------------------

### Use IP address set in configuration options

Source: https://pymumu.github.io/smartdns/en/config/ip-set

Shows how to reference an IP set in options that accept ip/subnet by using the ip-set:[set name] syntax. The example uses the 'cloudflare' set in ignore-ip, ip-rules, and ip-alias.

```text
ignore-ip ip-set:cloudflare
ip-rules ip-set:cloudflare -whitelist-ip
ip-alias ip-set:cloudflare 192.168.1.1

```

--------------------------------

### Install SmartDNS on OpenWrt using apk

Source: https://pymumu.github.io/smartdns/en/download

Use apk command on OpenWrt systems after version 24.10. Software source: https://downloads.openwrt.org/releases/

```shell
apk add luci-app-smartdns
apk add smartdns
```

--------------------------------

### Verify SmartDNS installation with nslookup

Source: https://pymumu.github.io/smartdns/en/install/asus

Query the PTR record for 'smartdns' to confirm the service is running. The 'name' field should show 'smartdns' or the hostname.

```bash
pi@raspberrypi:~/code/smartdns_build $ nslookup -querytype=ptr smartdns
Server:         192.168.1.1
Address:        192.168.1.1#53

Non-authoritative answer:
smartdns         name = smartdns.

```

--------------------------------

### SmartDNS directory structure on USB disk

Source: https://pymumu.github.io/smartdns/en/install/asus

Shows the directory layout after installation. SmartDNS runs in optware mode and is installed to the root of the USB disk.

```text
USB DISK
└── asusware.mipsbig
        ├── bin
        ├── etc
        |    ├── smartdns
        |    |     └── smartdns.conf
        |    └── init.d
        |          └── S50smartdns
        ├── lib
        ├── sbin
        ├── usr
        |    └── sbin
        |          └── smartdns
        ....

```

--------------------------------

### SmartDNS release page URL

Source: https://pymumu.github.io/smartdns/en/download

Download the matching version of the SmartDNS installation package from the release page.

```text
https://github.com/pymumu/smartdns/releases
```

--------------------------------

### IP set file format (cloudflare-list.conf)

Source: https://pymumu.github.io/smartdns/en/config/ip-set

Example content of the set file: one IP address per line, supporting CIDR notation.

```text
1.2.3.4
192.168.1.1/24

```

--------------------------------

### Domain wildcard examples

Source: https://pymumu.github.io/smartdns/en/config/domain-rule

Shows three wildcard patterns: prefix wildcard matching the main domain, matching only subdomains, and matching only the main domain. Note that * and - are only supported at the beginning of the domain name.

```plaintext
# prefix wild card
*-a.example.com
# only match subdomains
*.example.com
# only match the main domain name
-.example.com

```

--------------------------------

### Second DNS Server bind Configuration

Source: https://pymumu.github.io/smartdns/en/config/server-config

Configure a special second DNS server with additional features. This example disables address rules, speed check, and caching.

```plaintext
bind :53 -no-rule-addr -no-speed-check -no-cache

```

--------------------------------

### Configure HTTPS servers with server-https

Source: https://pymumu.github.io/smartdns/en/config/upstream-dns

Example configurations for DNS-over-HTTPS upstream servers. The first uses a standard URL, the second specifies an IP with host-name and http-host parameters. The -http-host parameter forces the HOST field in HTTP; by default it copies the upstream server parameter.

```plaintext
# Standard configuration
server-https https://dns.google/dns-query
# Specify HTTP host information.
server-https 8.8.8.8 -host-name dns.google -http-host dns.google
```

--------------------------------

### domain-rules example with -g group -address #6 -ipset ipset

Source: https://pymumu.github.io/smartdns/en/config/domain-rule

Sets multiple rules for the domain a.com using the domain-rules parameter. The -g option assigns a rule group, -address sets the domain address, and -ipset puts the result into the specified ipset.

```plaintext
domain-rules /a.com/ -g group -address #6 -ipset ipset

```

--------------------------------

### Configure SmartDNS ipset rule

Source: https://pymumu.github.io/smartdns/en/config/forwarding-with-ipset

Adds a SmartDNS configuration line to add IPs of example.com to the 'public' ipset.

```smartdns
ipset /example.com/public

```

--------------------------------

### Configure nftset in SmartDNS

Source: https://pymumu.github.io/smartdns/en/config/forwarding-with-ipset

Configures SmartDNS to use the nftset 'public_set' for the domain 'example.com'.

```bash
nftset /example.com/#4:ip#nat#public_set

```

--------------------------------

### Configure nftset in SmartDNS for TPROXY

Source: https://pymumu.github.io/smartdns/en/config/forwarding-with-ipset

Configures SmartDNS to use the nftset 'public' in the 'smartdns' table for the domain 'example.com'.

```bash
nftset /example.com/#4:ip#smartdns#public

```

--------------------------------

### Create SmartDNS configuration file

Source: https://pymumu.github.io/smartdns/en/install/docker

Create /etc/smartdns/smartdns.conf with the provided configuration to set the bind address and upstream DNS servers.

```plaintext
bind [::]:53
server 8.8.8.8
server 1.1.1.1

```

--------------------------------

### Use domain set in options with /domain-set:ad/

Source: https://pymumu.github.io/smartdns/en/config/domain-set

Demonstrates how to reference the 'ad' domain set in address, domain-rules, and nameserver options by replacing /domain/ with /domain-set:ad/.

```plaintext
address /domain-set:ad/#
domain-rules /domain-set:ad/ -a #
nameserver /domain-set:ad/server

```

--------------------------------

### Disable dual-stack selection for specific domain

Source: https://pymumu.github.io/smartdns/en/config/dualstack

Disables dual-stack selection for specific domain names using domain-rules. The example disables it for example.com.

```plaintext
domain-rules /example.com/ -dualstack-ip-selection no

```

--------------------------------

### Disable dual-stack selection on specified port

Source: https://pymumu.github.io/smartdns/en/config/dualstack

Disables dual-stack selection for queried domain names on the specified port (port 53 in this example).

```plaintext
bind [::]:53 -no-dualstack-selection

```

--------------------------------

### Sample smartdns.conf configuration

Source: https://pymumu.github.io/smartdns/en/config/basic-config

This configuration sets the service to listen on port 53 for both IPv4 and IPv6, and configures multiple upstream servers including plain, TLS, and QUIC. The bind option with [::]:53 binds IPv6 port 53 and also IPv4 on most systems. If no server is specified, the system DNS from /etc/resolv.conf is used automatically.

```plaintext
# Listen on port 53
bind [::]:53
# Configure upstream servers
server 8.8.8.8
server 114.114.114.114
server 202.96.128.166:53
server-tls 1.1.1.1
server-quic 1.1.1.1

```

--------------------------------

### Basic address configuration with multiple IPs

Source: https://pymumu.github.io/smartdns/en/config/domain-address

Use `address /domain/ip` to specify IP addresses for a domain. Supports suffix matching including subdomains, and multiple IPs separated by commas.

```plaintext
address /example.com/1.2.3.4
address /example.com/4.5.6.7,8.9.10.11,12.13.14.15

```

--------------------------------

### Access config via network neighborhood

Source: https://pymumu.github.io/smartdns/en/install/asus

Path to the init.d directory on the network share. The asusware.mipsbig directory is hidden, but you can enter the path directly in File Manager.

```text
\\192.168.1.1\sda1\asusware.mipsbig\etc\init.d

```

--------------------------------

### Include downloaded list via conf-file

Source: https://pymumu.github.io/smartdns/en/config/ad-block

Adds the downloaded configuration file to smartdns.conf using the conf-file option.

```plaintext
conf-file /etc/smartdns/anti-ad-smartdns.conf

```

--------------------------------

### Define a rule group with group-match conditions

Source: https://pymumu.github.io/smartdns/en/config/rule-group

Starts a rule group named 'rule', sets matching conditions for client IP and domain, and ends the group. The group-match lines can use CIDR, ip-set, and domain-set references.

```plaintext
# Rule begins, named as rule.
group-begin rule
# Set matching rules, as follows for matching IP, MAC or domain.
group-match -client-ip 192.168.1.1/24 -domain a.com
group-match -client-ip ip-set:clien-ip 
group-match -domain domain-set:domain-list
# Set related rules
address #
# Rule ends
group-end

```

--------------------------------

### Enable HTTPS service with certificate files

Source: https://pymumu.github.io/smartdns/en/config/dashboard

Use the https:// prefix in the smartdns-ui.ip parameter to enable HTTPS. Specify certificate files with bind-cert-file and bind-cert-key-file. If no certificate files are specified, SmartDNS automatically generates a root certificate with CN as SmartDNS Root and the related certificate chain.

```plaintext
# Enable HTTPS service
smartdns-ui.ip https://[::]:6080

# Specify certificate files
bind-cert-file /path/to/ca-file
bind-cert-key-file /path/to/ca-key-file

```

--------------------------------

### Enable audit logging (audit-enable yes)

Source: https://pymumu.github.io/smartdns/en/config/security

Enable audit logging to record DNS query requests. Configure the number of audit files, size, and file path.

```config
audit-enable yes
audit-num 16
audit-size 16M
audit-file /var/log/smartdns/smartdns-audit.log

```

--------------------------------

### View smartdns nftables rules

Source: https://pymumu.github.io/smartdns/en/config/forwarding-with-ipset

Lists all rules in the 'smartdns' table for verification.

```bash
# View rules
nft list table ip smartdns

```

--------------------------------

### Get SPKI for DNS-over-TLS using OpenSSL

Source: https://pymumu.github.io/smartdns/en/faq

Use this command to obtain the SPKI (Subject Public Key Info) for a DNS-over-TLS server when the provider does not publish it. Replace '1.0.0.1:853' with your own IP and port. The command outputs a base64-encoded SHA-256 hash of the server's public key.

```bash
echo | openssl s_client -connect '1.0.0.1:853' 2>/dev/null | openssl x509 -pubkey -noout | openssl pkey -pubin -outform der | openssl dgst -sha256 -binary | openssl enc -base64

```

--------------------------------

### Download community ad-blocking list

Source: https://pymumu.github.io/smartdns/en/config/ad-block

Downloads the anti-ad-for-smartdns.conf file to /etc/smartdns directory.

```bash
wget https://anti-ad.net/anti-ad-for-smartdns.conf -O /etc/smartdns/anti-ad-smartdns.conf

```

--------------------------------

### Configure TLS servers (DoT) with server-tls

Source: https://pymumu.github.io/smartdns/en/config/upstream-dns

Shows various server-tls configurations: standard, predefining server IP with -host-ip, verifying certificate SAN with -tls-host-verify, setting SNI with -host-name, validating SPKI pin with -spki-pin, and skipping certificate validation with -k.

```plaintext
# Standard configuration
server-tls 1.1.1.1
# Predefine the server IP to avoid domain resolution.
server-tls dns.google -host-ip 8.8.4.4
# Verify the SAN field of the remote server's certificate.
server-tls dns.google -tls-host-verify dns.google
# Set the host name for SNI in TLS.
server-tls 8.8.8.8 -host-name dns.google
# Validate SPKI pin.
server-tls 8.8.8.8 -spki-pin 3N9hMehDPwrM/PgifVYFZV4c3+H+GAKmhBDAtdoPgtA=
# Skip certificate validation.
server-tls 8.8.8.8 -k

```

--------------------------------

### Configure domain-rules for ipset transparent forwarding

Source: https://pymumu.github.io/smartdns/en/faq

Sets a domain rule for example.com to add matching IPs to ipset 'proxy', disables speed check, and filters IPv6 records. This is the first step for transparent forwarding.

```plaintext
# set rules
# -ipset proxy: The matching domain name is set to ipset:proxy.
# -c none: Disable speed check.
# -address #6: Filter IPV6 record.
domain-rules /example.com/ -ipset proxy -c none -address #6

```

--------------------------------

### Configure dnsmasq-lease-file

Source: https://pymumu.github.io/smartdns/en/config/resolv-dnsmasq-lease

Sets the path to the DNSMASQ lease file. The path may vary by system, so adjust it to match your environment. After configuration, hostnames can be used directly, but Windows requires a trailing dot (e.g., ping smartdns.) to force DNS resolution.

```plaintext
dnsmasq-lease-file /var/lib/misc/dnsmasq.leases

```

--------------------------------

### Define an IP address set with ip-set command

Source: https://pymumu.github.io/smartdns/en/config/ip-set

Creates an IP address set named 'cloudflare' from the file /etc/smartdns/cloudflare-list.conf. The file must contain one IP address per line.

```bash
ip-set -name cloudflare -file /etc/smartdns/cloudflare-list.conf

```

--------------------------------

### Create smartdns table and NFTSET collection

Source: https://pymumu.github.io/smartdns/en/config/forwarding-with-ipset

Creates a dedicated 'smartdns' table, an NFTSET collection named 'public', and a NAT prerouting chain with a REDIRECT rule to port 1081.

```bash
# Create smartdns table
nft add table ip smartdns
# Create NFTSET collection
nft add set ip smartdns public { type ipv4_addr\; flags interval\; auto-merge\; }
# Set forwarding rule
nft add chain ip smartdns prerouting { type nat hook prerouting priority dstnat + 1\; }
nft add rule ip smartdns prerouting meta l4proto tcp ip daddr @public redirect to :1081

```

--------------------------------

### Certificate and Key File Configuration

Source: https://pymumu.github.io/smartdns/en/config/server-config

Set certificate and key files for DOT/DOH. bind-cert-key-pass is optional. If not specified, smartdns auto-generates a certificate chain.

```plaintext
bind-cert-file smartdns-cert.pem
bind-cert-key-file smartdns-key.pem
bind-cert-key-pass pass

```

--------------------------------

### UDP Server bind Configuration

Source: https://pymumu.github.io/smartdns/en/config/server-config

Configure UDP server with bind parameter. @eth0 restricts to specific NIC, [::]:53 listens to both IPv6 and IPv4, :53 listens to IPv4 only.

```plaintext
bind 0.0.0.0:53@eth0
bind [::]:53@eth0
bind :53@eth0

```

--------------------------------

### Parental Control with Included Configuration File

Source: https://pymumu.github.io/smartdns/en/config/client-rule

Shows the main configuration file that includes 'child.conf' with the '-group child' option, and the included file that sets client rules, upstream server, and blocking rules. The group-begin/group-end block is equivalent to this conf-file inclusion.

```plaintext
conf-file child.conf -group child

```

```plaintext
# Set client IP for the rule group
client-rules 192.168.1.13
# Set upstream server for the rule group
server 1.2.3.4 -e
# Block specific domain
address /block.com/#
# Block specific IP
ignore-ip 2.2.2.2

```

--------------------------------

### Disable IPV6 for Specific Domain with address /example.com/#6

Source: https://pymumu.github.io/smartdns/en/config/block-ipv6

Use this configuration to disable IPV6 for a specific domain name, such as example.com. This is the second method described.

```plaintext
address /example.com/#6

```

--------------------------------

### Configure domain-set collection file

Source: https://pymumu.github.io/smartdns/en/config/domain-set

Defines a domain collection named 'ad' from the file /etc/smartdns/ad-list.conf. The file must contain one domain per line.

```plaintext
domain-set -name ad -file /etc/smartdns/ad-list.conf

```

--------------------------------

### Enable dashboard plugin and set server port

Source: https://pymumu.github.io/smartdns/en/config/dashboard

Configure the plugin parameter to enable the dashboard and set the server port. The default username and password are admin/password. The dashboard uses a plugin mechanism; if SmartDNS is statically compiled, the dashboard plugin is not supported.

```plaintext
# Enable the dashboard
plugin smartdns_ui.so
# Set the server port.
smartdns-ui.ip http://[::]:6080

```

--------------------------------

### Configure CNAME alias with cname command

Source: https://pymumu.github.io/smartdns/en/config/cname

Use the cname command with the format cname /a.com/b.com to set up an alias. When querying a.com, the query result of b.com will be used.

```plaintext
cname /a.com/b.com

```

--------------------------------

### Included rule file with matching conditions

Source: https://pymumu.github.io/smartdns/en/config/rule-group

The included rule file specifies matching conditions for client IP and domain, and sets related rules.

```plaintext
group-match -client-ip 192.168.1.1/24 -domain a.com
address #

```

--------------------------------

### Convert dnsmasq file to SmartDNS format

Source: https://pymumu.github.io/smartdns/en/config/ad-block

Converts a dnsmasq configuration file to SmartDNS format by extracting address lines and appending #.

```bash
cat /path/to/dnsmasq/file  | grep address | awk -F= '{print "address "$2"#"}' > anti-ad-smartdns.conf

```

--------------------------------

### Edit smartdns.conf with Vi

Source: https://pymumu.github.io/smartdns/en/install/entware

Open the smartdns configuration file for editing using the Vi editor.

```bash
Vi /opt/etc/smartdns/smartdns.conf

```

--------------------------------

### nftset-debug yes

Source: https://pymumu.github.io/smartdns/en/config/ipset-nftset

Enable nftset debugging for troubleshooting.

```plaintext
nftset-debug yes
```

--------------------------------

### Create IPSET collection

Source: https://pymumu.github.io/smartdns/en/config/forwarding-with-ipset

Creates an IPSET set named 'public' of type hash:net to store domain IP addresses for forwarding.

```bash
# Create ipset collection
ipset create public hash:net

```

--------------------------------

### Client-based Domain-based Query Forwarding Configuration

Source: https://pymumu.github.io/smartdns/en/config/client-rule

Main configuration file includes 'oversea.conf' with '-group oversea'. The included file sets client IP, multiple upstream servers (HTTPS, TLS, QUIC), disables speed check, forces SOA for types 28 and 65, and sets an ipset.

```plaintext
conf-file oversea.conf -group oversea

```

```plaintext
# Set the client IP for the rule group
client-rules 192.168.1.13
# Set the upstream servers for the rule group
server-https https://1.2.3.4 -e
server-tls tls://1.2.3.4 -e
server-quic quic://1.2.3.4 -e
# Disable speed check
speed-check-mode none
# Disable IPV6 and HTTPS logging
force-qtype-SOA 28 65
# Set ipset
ipset group-tv

```

--------------------------------

### ipset basic configuration

Source: https://pymumu.github.io/smartdns/en/config/ipset-nftset

Configure ipset rules globally or for specific domain names. Use 'ipset /domain/ipset' to set a single ipset, or specify IPv4 and IPv6 sets with '#4' and '#6'. Use 'ipset /domain/-' to ignore ipset for a domain.

```plaintext
# set global ipset
ipset ipsetname
# set ipset for specified domain names
ipset /domain/ipset
ipset /domain/[#4:ipsetv4,#6:ipsetv6]
# ignore ipset rule for specified domain names
ipset /domain/-
```

--------------------------------

### Enable IPv6 support by setting SMARTDNS_WORKMODE

Source: https://pymumu.github.io/smartdns/en/install/entware

Set SMARTDNS_WORKMODE to 2 in /opt/etc/smartdns/smartdns-opt.conf to disable dnsmasq DNS and run SmartDNS as primary DNS server for IPv6 support.

```config
SMARTDNS_WORKMODE="2"

```

--------------------------------

### Configure TPROXY routing and nftables rules

Source: https://pymumu.github.io/smartdns/en/config/forwarding-with-ipset

Sets up routing rules and nftables rules for TPROXY mode, forwarding TCP and UDP traffic to port 1081 with mark 1104.

```bash
# Set routing rules
ip rule add fwmark 1104 lookup 1104
ip route add local 0.0.0.0/0 dev lo table 1104

# Create smartdns table
nft add table ip smartdns
# Create NFTSET collection
nft add set ip smartdns public { type ipv4_addr\; flags interval\; auto-merge\; }
# Set forwarding rule
nft add chain ip smartdns prerouting { type filter hook prerouting priority 0\; }
nft add rule ip smartdns prerouting meta l4proto tcp ip daddr @public tproxy to :1081 mark set 1104
nft add rule ip smartdns prerouting meta l4proto udp ip daddr @public tproxy to :1081 mark set 1104

```
Tokens:
Raw