Permission denied

[Kevin Darcy]

Sergio Alves Lima Jr wrote:

> Hello all,
>
> I am problem to stating nameserver.
>
> The bind runing, however return error messages:
>
> Oct 28 12:51:49 srv1 named[858]: bad referral (62.182.200.in-addr.arpa
> !< 128-191.62.182.200.in-addr.arpa) from [200.182.62.133].53
> Oct 28 12:51:49 srv1 named[858]: bad referral (62.182.200.in-addr.arpa
> !< 128-191.62.182.200.in-addr.arpa) from [200.182.62.133].53
> Oct 28 12:51:51 srv1 named[858]: bad referral (61.192.200.in-addr.arpa
> !< 33-62.61.192.200.in-addr.arpa) from [200.192.61.33].53
> Oct 28 12:51:52 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:51:52 srv1 named[858]: ns_forw:
> query(50.0-63.125.212.200.in-addr.arpa) All possible A RR's lame
> Oct 28 12:51:53 srv1 named[858]: bad referral (200.in-addr.arpa !<
> 64-127.163.213.200.in-addr.arpa) from [200.213.163.35].53
> Oct 28 12:51:54 srv1 named[858]: ns_forw:
> query(168.160-191.210.202.200.in-addr.arpa) All possible A RR's lame
> Oct 28 12:51:56 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:52:01 srv1 last message repeated 2 times
> Oct 28 12:52:04 srv1 named[858]: ns_forw:
> query(4.0.111.224.200.in-addr.arpa) All possible A RR's lame
> Oct 28 12:52:11 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:52:13 srv1 named[858]: bad referral (62.182.200.in-addr.arpa
> !< 128-191.62.182.200.in-addr.arpa) from [200.182.62.133].53
> Oct 28 12:52:19 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:52:19 srv1 named[858]: bad referral (113.230.200.in-addr.arpa
> !< 192-255.113.230.200.in-addr.arpa) from [200.230.113.211].53
> Oct 28 12:52:22 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:52:24 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:52:24 srv1 named[858]: bad referral (34.245.200.IN-ADDR.ARPA
> !< 0-63.34.245.200.in-addr.arpa) from [200.207.53.179].53
> Oct 28 12:52:27 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:52:27 srv1 named[858]: bad referral (34.245.200.IN-ADDR.ARPA
> !< 0-63.34.245.200.in-addr.arpa) from [200.207.53.179].53
> Oct 28 12:52:28 srv1 named[858]: bad referral (127.195.200.in-addr.arpa
> !< 0-63.127.195.200.in-addr.arpa) from [200.195.127.18].53
> Oct 28 12:52:31 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:52:37 srv1 last message repeated 2 times
> Oct 28 12:52:39 srv1 named[858]: ns_forw:
> query(227.239-226.196.194.200.in-addr.arpa) All possible A RR's lame
> Oct 28 12:52:54 srv1 named[858]: tcp_send: bind(query_source):
> Permission denied
> Oct 28 12:53:26 srv1 last message repeated 17 times
> Oct 28 12:54:17 srv1 last message repeated 32 times
>
> Witsh resolve it's problem?
>
> Accept sugestions!
>
> Thack a lot.
>
> P.S.: Please, sorry my bad english.

This can happen if you lock your query-source to 53, run unprivileged and
then a new interface comes up after named is started. Since named is
unprivileged, it cannot bind to port 53 on the new interface to send its
queries. Don't lock your query-source to 53 unless you absolutely have to.


- Kevin