Problem with chroot-ed BIND

Michael Kjorling michael at kjorling.com
Wed Sep 12 15:24:26 UTC 2001


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

I assume you are running BIND unpriviledged? In that case it may not
be able to bind to reserved ports (< 1024) after the initial startup.

It sure would be nice if one could say "allow user named to bind to
port 53 on any interface using tcp or udp", or something on that
order.

Depending on whether or not this shows up when you start BIND, I
belive interface-interval is your friend.


Michael Kjörling


On Sep 12 2001 11:33 +0300, Odhiambo Washington wrote:

> I am getting the following errors from my chroot-ed BIND:
>
> Sep 09 11:01:06.536 network: info: listening on IPv4 interface rl0, 62.8.66.3#53
> Sep 09 11:01:06.536 network: error: could not listen on UDP socket: permission denied
> Sep 09 11:01:06.536 network: error: creating IPv4 interface rl0 failed; interface ignored
> Sep 09 11:01:06.536 network: info: listening on IPv4 interface lo0, 127.0.0.1#53
> Sep 09 11:01:06.536 network: error: could not listen on UDP socket: permission denied
> Sep 09 11:01:06.537 network: error: creating IPv4 interface lo0 failed; interface ignored
> Sep 09 11:01:06.537 network: warning: not listening on any interfaces
>
> What could I be missing here?
>
> TIA
>
>
>
> -Wash

- -- 
Michael Kjörling - michael at kjorling.com - PGP: 8A70E33E
Manager Wolf.COM -- Programmer -- Network Administrator
"We must be the change we wish to see" (Mahatma Gandhi)

^..^     Support the wolves in Norway -- go to     ^..^
 \/   http://home.no.net/ulvelist/protest_int.htm   \/

***** Please only send me emails which concern me *****

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.0.6 (GNU/Linux)
Comment: For my PGP key: http://michael.kjorling.com/contact/pgp.html

iD8DBQE7n34tKqN7/Ypw4z4RAgRMAKCQ5expBGTneJ6okp5X0AMRaiy+ygCg0QMK
79YeoyCQJTuSPVbwRQ60DTo=
=w09G
-----END PGP SIGNATURE-----




More information about the bind-users mailing list