Skip to content

Releases: SamNet-dev/dnstm-setup

v1.3.1 — Update TUI, SSH MAC fix, DNS/Xray hardening

19 Mar 16:36
@SamNet-dev SamNet-dev
v1.3.1
3a0d61f

Choose a tag to compare

View all tags
v1.3.1 — Update TUI, SSH MAC fix, DNS/Xray hardening Latest
Latest

What's New

Update from TUI

  • New option 10) Update script in the management menu
  • --update flag for CLI usage
  • Auto-detects new versions, downloads, validates, and restarts

SSH MAC Compatibility

  • Fix for Bitvise and older SSH clients failing with no match for method mac algo
  • Adds non-ETM SHA2 MACs as fallbacks while keeping ETM preferred
  • Fixes #19

DNS Safety (never locks users out)

  • EXIT trap auto-fixes DNS if script crashes mid-operation
  • resolv.conf backed up and locked with chattr +i
  • Fallback nameservers written if DNS breaks after disabling stub listener

3x-ui / Xray Backend

  • Credentials set via x-ui setting binary (handles bcrypt hashing in v2.0+)
  • Panel port set via binary, not just sqlite3
  • Login probing validates JSON responses (not HTML error pages)
  • Fixes #18

microsocks GLIBC

  • Proactive GLIBC compatibility check right after dnstm install
  • Waits for dpkg lock (unattended-upgrades) before installing build tools

NoizDNS

  • Binaries self-hosted as GitHub release assets for reliability
  • Binary validation uses file command instead of unreliable -help flag

sshd_config Safety

  • Backed up before sshtun-user configure
  • Validated with sshd -t after modification
  • Auto-rollback if validation fails
Assets 2
Loading

NoizDNS Server Binaries v1.0

19 Mar 15:05
@SamNet-dev SamNet-dev
noizdns-v1.0
b8ab2c4

Choose a tag to compare

View all tags
NoizDNS Server Binaries v1.0

NoizDNS (DPI-resistant DNSTT fork) server binaries for bundled distribution.

Loading

v1.3 — NoizDNS + Xray Backend

16 Mar 17:44
@SamNet-dev SamNet-dev
v1.3
f86ace4

Choose a tag to compare

View all tags
v1.3 — NoizDNS + Xray Backend

What's New in v1.3

🛡️ NoizDNS Tunnels (DPI-Resistant)

Two new tunnel types added to the main setup — 6 tunnels instead of 4:

  • NoizDNS + SOCKS (n subdomain) — DPI-resistant DNS tunnel for SOCKS proxy
  • NoizDNS + SSH (z subdomain) — DPI-resistant DNS tunnel for SSH tunneling

NoizDNS is a DPI-resistant fork of DNSTT by anonvector (same author as SlipNet) that uses alternative DNS query encoding to evade Deep Packet Inspection. The server auto-detects both standard DNSTT and NoizDNS clients. In SlipNet, select NoizDNS as the tunnel type for n and z subdomains.

  • Zero extra configuration — binary downloaded automatically during setup
  • Graceful degradation — if download fails, creates 4 standard tunnels and continues
  • Works on all architectures (amd64, arm64, arm, 386)

🔌 Xray Backend Integration (Optional)

New optional feature to connect an existing 3x-ui panel (or raw Xray) to a DNS tunnel:

sudo bash dnstm-setup.sh --add-xray
# Or via management menu: --manage → option 8
  • Auto-detects 3x-ui (native or Docker) — or installs it for you (full panel or headless)
  • 4 protocols: VLESS, Shadowsocks, VMess, Trojan
  • Internal-only inbound on 127.0.0.1 — only reachable through the DNSTT tunnel
  • Generates client configs — SlipNet URL + client URI for Nekobox/v2rayNG/Shadowrocket
  • Compatible with any V2Ray/Xray client that supports proxy chaining

Other Improvements

  • 7 DNS records (was 5) — 2 new NS records for NoizDNS subdomains
  • --add-domain now creates NoizDNS tunnels for backup domains
  • --status displays NoizDNS tunnel info and SlipNet URLs
  • --remove-tunnel properly cleans up Xray and NoizDNS service overrides
  • Security — SQL injection prevention, cookie jar cleanup, restrictive file permissions, bcrypt password detection
  • Portable — no grep -P, no python3, pure bash

Full Tunnel Setup (v1.3)

Tunnel Subdomain Transport Backend
slip1 t Slipstream (QUIC) SOCKS
dnstt1 d DNSTT (Noise) SOCKS
noiz1 n NoizDNS (DPI-resistant) SOCKS
slip-ssh s Slipstream (QUIC) SSH
dnstt-ssh ds DNSTT (Noise) SSH
noiz-ssh z NoizDNS (DPI-resistant) SSH
Loading