SDC - Secure DNS Client v3.2.9

Change Log of v3.2.9

• Bug Fixed: Showing duplicate results on parallel scan.
• Built-in servers are not redacted anymore.
• Added a few web source to scrap DNS addresses when built-in is selected.
• Added a section to add malicious domains/IPs. (Application will ignore these servers when built-in is selected) #236
  • Settings -> Connect
• Internet Status:
  • Online (Ping and DNS answer of bootstrap)
  • PingOnly (Can't receive DNS answer from bootstrap)
  • DnsOnly (Bootstrap ping is 100% lost)
  • Unstable (Non of the above)
• Application works on Online/PingOnly/DnsOnly. This helps you to connect when network is limited to Intranet. #237
• Better bootstrap handling. (Tries both UDP and TCP)
• Better Anonymized DNSCrypt handling. (Tries both UDP and TCP)

SDC - Secure DNS Client v3.2.7

Change Log of v3.2.7

• Bug Fixed: Unnecessary port 53 occupation error in SDCAgnosticServer.exe. #227
• Bug Fixed: Error connecting to GoodbyeDPI. #229

SDC - Secure DNS Client v3.2.6

Change Log of v3.2.6

• Bug Fixed: Couldn't Prevent Multiple Instances. #219
• WinDivert Updated To v2.2.2 (Please delete all 3 WinDivert Files in binary folder in order to update) #211
• Bug Fixed: Couldn't Shutdown WinDivert Service And Driver On Disconnect. #211
• Bug Fixed: Rules Couldn't Understand IPv6 When It Was Between Brackets (Left Side).
  • e.g. [2001:4860:4860::8888]|[2001:4860:4860::8844];

Currently Working On DNSveil...

SDC - Secure DNS Client v3.2.5

Change Log of v3.2.5

• DNS Rules and Proxy Rules Merged into one.
  If you have some rules SDC will merged them automatically.
  You can take a look and modify them if needed Settings -> Rules
  Benefits:
  • Domain/IPs/Advertisements can be block at DNS level hence on whole system.
  • Supports Domain, CIDR and IP.
• Geo Assets added including auto-update.
• Currently supporting:
  • IR Domains: Direct
  • IR IPs: Direct
  • IR Ads: Block
  • Update URL: https://github.com/msasanmh/Iran-clash-rules a fork of https://github.com/Chocolate4U/Iran-clash-rules
  • Location: Settings -> Geo Assets
• Faster auto anti-DPI method selection. (If both are active)
• You can only choose one anti-DPI method to force it. (Auto selection will be deactivated)
• GUI communication with console improved.
• IPv6 support for bootstrap.
  • Location: Settings -> Others
• IPv6 support for unsetting DNS.
  • Location: Settings -> Set/Unset DNS
• Auto detection of blocked websites improved while using upstream proxy. (e.g. Telegram Desktop app)
  • Location: Settings -> Share -> Apply only to blocked IPs
• Redirecting all Cloudflare IPs to a Clean IP (IPv4 or IPv6) is now also on DNS level.
  • Location: Settings -> Rules
• Cloudflare clean IP scanner updated, supporting IPv6 ranges.
  • Location: Tools -> Clean IP Scanner
• Bug fixed: https://github.com/msasanmh/SecureDNSClient/issues/197
• Bug fixed: GUI flashes on Maximize/Restore (Reported by email)
• Binaries updated and some minor changes.

---

By the way:
- I'm working on SDC Plus.
- Excluding applications (Block/Direct/Proxy) is on my to-do list.
- YouTube new policy: If you disable ads YouTube will interrupt playing videos. (It has nothing to do with SDC)

SDC - Secure DNS Client v3.2.1

Change Log of v3.2.1

• Added detection of unstable network.
  
  When your network is unstable don't expect the application to work properly.

• Proxy DPI bypass improved.

  • Supported for twitch.tv, pxxxhub.com and others.

SDC - Secure DNS Client v3.2.0

Change Log of v3.2.0

• New supported protocols:

  • Anonymized DNSCrypt (DNSCrypt DNS Server + DNSCrypt Relay)

    Pattern: <DNSCrypt Server in Stamp format> <Space> <DNSCrypt Relay>
    Relay can be in Stamp and IP:Port format.
    Example:

    sdns://AQcAAAAAAAAAETg5LjM4LjEzMS4zODo0MzQzIKWHS9r0FoKY--wcnJl1Ar5aOUb91xsufvPUjid3rNRaHzIuZG5zY3J5cHQtY2VydC5hbXMtZG5zY3J5cHQtbmw sdns://gQ4xNzcuNTQuMTQ1LjEzMQ

    sdns://AQcAAAAAAAAAETg5LjM4LjEzMS4zODo0MzQzIKWHS9r0FoKY--wcnJl1Ar5aOUb91xsufvPUjid3rNRaHzIuZG5zY3J5cHQtY2VydC5hbXMtZG5zY3J5cHQtbmw 177.54.145.131:443

    Note: Not all DNSCrypt Servers are compatible with relays. e.g. Adguard
    You can find Relays Here

  • H3 (DoH Over HTTP Version 3)

    e.g. h3://max.rethinkdns.com/dns-query
    Note 1: DoH Server must support HTTP3
    Note 2: HTTP3 is only supported on Windows 11 above

• Auto Port conflict resolver improved.

• Support for servers with TTL 0 improved.

• Proxy Fragment performance improved.

• App Startup issue fixed for Turkish language.

• DNS Server output is now full Async.

• App gets built-in servers from Github (I can update them remotely).

• Add support for importing servers from any static HTML web page

  • Added to:

    • Custom Servers -> New Group -> Add Servers -> Add From URL
    • Tools -> DNS Scanner -> DNSs From URLs

  • For example you can extract all public servers from below URL:
    https://raw.githubusercontent.com/DNSCrypt/dnscrypt-resolvers/master/v3/public-resolvers.md

• Double Click on custom servers to get info and status.

• Tools -> DNS Scanner doesn't need SDC to be online.

• Bug fixed in Tools -> benchmark.

• No lag while Connecting and Disconnecting.

• Retry option added to Settings -> Connect.

and some other changes.

SDC - Secure DNS Client v3.0.4

Change Log of v3.0.4

• Auto resolve port conflict. issue
• Compatible with Windows 10, 11 Mobile Hotspot.
• Compatible with Internet Connection Sharing (ICS).
• Support for DNS Servers with TTL 0. issue
• Shows "Minimized to tray" only on first run. issue
• Performance of DoH Server increased.

SDC - Secure DNS Client v3.0.0

Change Log of v3.0.0

• Using Msmh Agnostic Server (Can run 10 servers on one port).
• Lowest DNS latency ever using live cache.
• Full support for IPv6.
• IPv4 is mapped to IPv6 to get advantage of IPv6 performance.
• Bootstrap support is back.
• Theme bug fixed issue
• Support for IPv6 listening address issue
• Fixed Change SNI Doesn't Work Without Activating "Proxy Rules" From Settings issue 144 issue 147 issue 152
• Fixed problem with smart dns (not bypassing boycotted websites)
• Support for DNS Rules:
  Example:

// Variables
SmartDns1 = https://free.shecan.ir/dns-query;
SmartDns2 = https://pro.shecan.ir/dns-query;
SmartDns3 = https://dns.shecan.ir/dns-query;

// YouTube
youtube.com|dnsdomain:google.com;
ytimg.com|dnsdomain:google.com;
*.ytimg.com|dnsdomain:google.com;
ggpht.com|dnsdomain:google.com;
*.ggpht.com|dnsdomain:*.googleusercontent.com;
*.googleapis|dnsdomain:google.com;
*.googlevideo.com|dnsdomain:*.c.docs.google.com;

// Use Smart DNS For These Domains
developers.google.com|dns:SmartDns1,SmartDns2,SmartDns3;
*.googleusercontent.com|dns:SmartDns1,SmartDns2,SmartDns3;
developer.android.com|dns:SmartDns1,SmartDns2,SmartDns3;
gemini.google.com|dns:SmartDns1,SmartDns2,SmartDns3;
*.openai.com|dns:SmartDns1;
claude.ai|dns:SmartDns1,SmartDns2,SmartDns3;
*.claude.ai|dns:SmartDns1,SmartDns2,SmartDns3;
spotify.com|dns:SmartDns1,SmartDns2,SmartDns3;
*.spotify.com|dns:SmartDns1,SmartDns2,SmartDns3;

• Support for showing DNS queries in the log (Settings -> Connect -> Write DNS requests to log).
• You can activate SSL Decryption and Fragment DPI bypass methods at the same time.
  If SSL Decryption is incompatible with a website, proxy will use Fragment instead.
  If Fragment is incompatible, proxy will turn it off to reduce errors caused by incompatibility.
• And Some other changes.
  

SDC - Secure DNS Client v2.9.2

Change Log of v2.9.2

• UI reassembled to support more controls (Current number of controls: 412)
• You can check multiple server groups including built-in by disabling Settings -> Check -> Clear working servers on new check
• Support for Automatic detection of active Network Adapters.
• Added Exit button on UI (Benchmark moved to tools).
• Some suspicious servers removed from built-in list. Issue
• Warning about screen settings changes is optional now. Issue
• App try to unset DNS on shutdown now. Issue
• Reconnect button added to Connect Tab. Issue
• Uninstall Certificate button now removes all certs related to Secure DNS Client (This can fix users mistakes).
• Network speed in Net Info window is now smoother.
• Added Max download and upload speed to Net Info.
• If by any chance CPU usage reaches 95% application will kill itself to protect PC.
• Binaries updated.
• All Proxy rules merged into one list:
  Supports: Dns, Fake Dns, Fake SNI, Variables, Upstream proxy, Don't bypass, etc.
  Example:

// Variables - Use these smart DNSs only for some specific websites like developer.android.com
SmartDns1 = https://free.shecan.ir/dns-query;
SmartDns2 = https://pro.shecan.ir/dns-query;
SmartDns3 = https://dns.shecan.ir/dns-query;

// Defaults
blockport:53,80;
dns:127.0.0.1,tcp://8.8.8.8,system;

// YouTube
youtube.com|dnsdomain:google.com;sni:google.com;
ytimg.com|dnsdomain:google.com;
*.ytimg.com|dnsdomain:google.com;
ggpht.com|dnsdomain:google.com;
*.ggpht.com|dnsdomain:*.googleusercontent.com;
*.googleapis|dnsdomain:google.com;
*.googlevideo.com|dnsdomain:*.c.docs.google.com;sni:google.com;

// Use Smart DNS For These Domains
developers.google.com|--;dns:SmartDns1,SmartDns2,SmartDns3;
*.googleusercontent.com|--;dns:SmartDns1,SmartDns2,SmartDns3;
developer.android.com|--;dns:SmartDns1,SmartDns2,SmartDns3;

// Don't Apply DPI Bypass To These Domains
google.com|--;
*.google.com|--;
github.com|--;
*.github.com|--;
githubusercontent.com|--;
*.githubusercontent.com|--;
stackoverflow.com|--;
*.stackoverflow.com|--;
*.sstatic.net|--;
*.cookielaw.org|--;
nslookup.io|--;
*.nslookup.io|--;
php.net|--;
save.tube|--;

// Apply Defaults To Other Domains
*|+;

So this rule *.ir|--; means don't apply DPI bypass to .ir domains.
this rule *.ch|-; means block all .ch domains.
I'll add full documentation ASAP.

SDC - Secure DNS Client v2.8.5

Change Log of v2.8.5

• High DPI Screen fixed. Thanks to wolfkingal2000
• App can find active adapter of first run when there's no app settings.
• App can detect if any other proxy is set to system.
• CPU Usage optimized.
• Benchmark added. (The BM button).
• Right click on Scan button to access more options.
• App removes startup if app path does not exist.
• App can detect if DNS get unset by another app (Optional).
  To activate: Settings -> Set/Unset DNS
• Proxy SSL Decryption is based on Domain Fronting now.
  You can set a custom SNI for a website by Settings -> Share -> SSL Decryption -> Fake SNI List
  Rule e.g. *.googlevideo.com|*.c.docs.google.com
• Now all Proxy Programs supports wildcard (*.) and comment (start with //)
• Binaries updated.
• and some minor changes.