can't bind socket: Permission denied for IPv6 (port bellow 1024)

[nusenu]

> I can see the similar issue with similar config (which is there btw
> because of selinux preventing use of non-dynamic ports.
> 
> Jul  3 12:56:28 resolver unbound: [18382:0] error: can't bind socket:
> Permission denied for ::
> Jul  3 13:56:27 resolver unbound: [18382:0] error: can't bind socket:
> Permission denied for 0.0.0.0
> 
> But in my log lines there are is no port.

to get the used ports you would have to apply the patch from this thread.

 
> Could it be auth-zone not using those outgoing-port-permit and
> outoging-port-avoid settings - timing from log looks like it could be
> caused by rfc7706 config.

I'm using auth-zone (for RFC7706) indeed.


-- 
https://twitter.com/nusenu_
https://mastodon.social/@nusenu

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.nlnetlabs.nl/pipermail/unbound-users/attachments/20180703/a9216df5/attachment.bin>