About DNSCrypt-OSXClient

This software encrypts and authenticates DNS packets between your computer and a DNS resolver using DNSCrypt.

Tips:

• If you have a firewall, open TCP and UDP ports 53 and 443. These are the most common ports used for DNSCrypt.
• WiFi captive portals dont work if they can't intercept DNS queries and often block DNSCrypt. So on public WiFi network, disable DNSCrypt, log in, then you can enable it again.
• Using Little Snitch? There are a few rules you need to establish, which Little Snitch should prompt for when trying to activate this application:
  1. Allow any outgoing connection for system processes (dnscrypt-proxy)
  2. Allow any incoming connection for system process (dnscrypt-proxy)
  3. Allow any outgoing connection for system processes (dig)
  4. For automatic updates, allow outgoing TCP connections to port 80 (http) of updates.dnscrypt.org and download.dnscrypt.org, as well as to port 443 (https) of github.com and download.dnscrypt.org for system process (curl)
  (Thanks to @cavemandaveman and @TraderStf)