[Unbound-users] Lots of logging

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Mike,

The operating system tells unbound that it cannot send to a 'normal'
IP address.  (unbound has do-not-query and access-control in its
config to block IPs you do not like).

If you have a strange setup and traffic from clients not on localhost
arrives to 127.0.0.1 and unbound tries to answer back, then this error
is normal for trying to send to 192... with source address 127.0.0.1.

Otherwise, this must be traffic that unbound sends to nameservers
('upstream').  If you dig @192.203.230.10 , is that also operation not
permitted?

This error is not throttled by verbosity, because it is likely a local
misconfiguration.  The OS disallows network access to unbound ...

Best regards,
   Wouter

On 06/19/2013 12:29 AM, Mike. wrote:
> On 6/18/2013 at 4:06 PM Doug Calvert wrote:
> 
> |On Tue, Jun 18, 2013 at 12:22 PM, Mike. <the.lists at mgm51.com>
> wrote: |> |> Why is unbound doing this? What is unbound trying to
> tell me? | |Traditionally questions like this will include the
> config file you are |using. I imagine it has to do with the
> verbosity of your logging |config statements. =============
> 
> 
> My bad.  :)
> 
> 
> 
> server:
> 
> verbosity:		1
> 
> statistics-interval: 	0
> 
> interface:		127.0.0.1 interface:		::1
> 
> root-hints: 		"/usr/local/etc/unbound/named.cache" 
> auto-trust-anchor-file:	"/usr/local/etc/unbound/root.key"
> 
> hide-identity:		yes hide-version:		yes
> 
> harden-glue:		yes harden-dnssec-stripped:	yes use-caps-for-id:	yes
> 
> 
> 
> 
> _______________________________________________ Unbound-users
> mailing list Unbound-users at unbound.net 
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v2.0.18 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=hda1
-----END PGP SIGNATURE-----