DNSCrypt on Android

Question

I'd like to install DNSCrypt on Android. I have installed it on Windows 8, Linux Mint, and Kali Linux. But I'm very new to Linux, thus dealing with Android as a Linux distro is way out of my league. I've Google'd a tutorial for this for hours, and everyone seems to be asking with no one to answer them. The DNSCrypt website has an Android-specific version which means it should be possible, some forum member has written a couple of commands like "and then you configure and compile" and such. But no specific "spoon-feeding" command to type in the Android terminal. So, how do we install DNSCrypt.eu on Android?

Update 1:

https://github.com/jedisct1/dnscrypt-proxy/issues/98#issuecomment-41883910 Here's a similar explanation to what I referred to. How Do I write a script?! what do I copy exactly? There are three folders when I un-tar and tar.gz from the link above.

Answer 1

The solution is further down the same page:

https://github.com/jedisct1/dnscrypt-proxy/issues/98#issuecomment-62636551

I had a problem flashing the zip (made by qwerty12) in the link so you may need to extract the contents to the relevant directories (in /system) and make sure they have the correct permissions. I used Fx explorer for this. You obviously need root to do all of this. Then set the DNS to 127.0.0.1 (I used Static DNS for WiFi but many programs will do this) That's all it should take. I have posted in the same github link confirming it works fine.

edit: No problem. I should mention that if you have trouble with setting the internal DNS to 127.0.0.1 (as I did) you may find it easier to just add the following to the 99dnscrypt file that is placed in the init.d folder. (add the following line to the end of the file, there should only be one other line in the init.d file anyway, the one that executes dnscrypt-proxy, so add it after that line)

iptables -t nat -A OUTPUT -p udp --dport 53 -j DNAT --to-destination 127.0.0.1

There may be a better way to do this (i.e. using something like AFWall with a custom script to switch the DNS to 127.0.0.1 when you need it) because this will affect your 3G connection (as it will expect to find a working DNS server, not 127.0.0.1) but it does work.