[Unbound-users] Can't Bind Socket Error

[W.C.A. Wijngaards]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hi Paul,

Did you configure the interface or the outgoing-interface?  In any
case, 0.0.0.0 or your IP giving permission denied once in a while is
bad.  Something is wrong with your system somehow, and it is
intermittent.  Are there port numbers that are not allowed by system
policy that you have enabled in unbound.conf (by default it skips
<1024 ports) ?

Best regards,
   Wouter

On 09/10/14 13:42, Paul Stewart wrote:
> Thank you for the response.  There is only one interface configured
> in the CentOS and IPv6 is disabled (for now - it will be turned up
> shortly).
> 
> In the configuration of Unbound, I specified the IP address (there
> is only one) - should I perhaps change the IP to 0.0.0.0?  It
> doesn't appear that the error in the log file is causing any
> serious issues ....
> 
> Cheers, Paul
> 
> 
>> 
>> We just started migrating some of our customer base over to
>> Unbound.
>> 
>> 
>> 
>> Server is VM instance (VmWare) with 8 Gig RAM, 4 vCPU's running
>> CentOS 7 (64 bit).  Unbound version 1.4.20 via YUM package
>> install.
> 
> The socket bind this late is for queries to upstream authority
> servers, it is trying to bind one of the outgoing-interface IP
> addresses.  If you configured it, one of those addresses is not
> actually served by your system (or the VM).  Another option is
> that IPv6 is broken in the VM and binding the ipv6 fd to ::0
> fails.
> 
> Best regards, Wouter
> 
>> We started noticing the following errors in the logs this
>> evening:
>> 
>> 
>> 
>> Oct  8 19:48:51 dns2-pppoe unbound: [1110:0] error: can't bind 
>> *socket*: Permission denied
> 
> 
> _______________________________________________ Unbound-users
> mailing list Unbound-users at unbound.net 
> http://unbound.nlnetlabs.nl/mailman/listinfo/unbound-users
> 

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJUNnc5AAoJEJ9vHC1+BF+NOgEP/3mvjW1WWj8Db27pAf/QpwAr
1UeIIpbeM/KKRC0avQv2GfPSH3XVVG/F2+vY7wSaCWOmWML/GAFPcahPgLP1eTrZ
N99mDOQuOvWEVCuFUXGxyxZAPx5PB2caXhU9Viq1I6ulepfaFqYrk/xE7cCQZjDV
RVcGVyYg83is/FFSV4Qoqp1zwLbgtNKKpXk/hotx+D86hV7fkxWW05NxuHLOEXWY
5xKmnZ5Yt8A1apXFjRX0kH7ElIN04GlXClEGxD6JAH4b+IM7R9EPffaSq6umWhrf
XexmCxuMCwAIa3PwB6TCWKN3uMiQuu9KBq0tSQc83udLW3tsH3rKDh0J9+Zc7olJ
ZDbAheoVOBAuNAHsU1jqNtCntjvyK6/UHrof2mMdXZrUHhHm10Y2BTTpiiTcZWfw
UD+5GhgiymP7fGa8PCjiAYH9BwsYd7b1t9i/mw5uePAsYblOggZ7GdRxJCU6wB2u
THyo5eP5TEjHnZdCcQYChskJAdb5JVtJ4HNq6TFSMPMtmTuUHuRGq3j+ID6UguFW
VRm2L0d7aDgp6EIFdezCQeQZrqSKYVlNrgeH8n+JElcAvhrzkQaipOoTHQU6L/ce
NUnyeIeJEZ3JlnKHxJ5WlGEzsfDgFKkkuV9tDRq9FHgNGj0cXitXzawlAczT2HZw
1kUNZMl75prkbdJtGyqI
=2sOu
-----END PGP SIGNATURE-----