Getting SERVFAIL when trying to reach .co.il domains
jaap at NLnetLabs.nl
Fri Jan 1 14:05:04 UTC 2021
Joe Abley via Unbound-users writes:
> On Jan 1, 2021, at 14:15, Gil Levy via Unbound-users <unbound-users at lists.nlnetlabs.nl> wrote:
> >> Are you running unbound in a chroot(8)?
> > I don't know how to check that.
> man chroot
> for a better description of what chroot does, and how the interpretation of
> absolute pathnames differs inside and outside the chroot namespace.
> man man
> if you're unfamiliar with how manual pages are organised. If you don't have
> manual pages installed and can't add them as a package, it should not be hard
> to find collections of manual pages for your particular distribution if you
> search for them.
> grep chroot unbound.conf
For a running unbound, do
unbound-control get_option chroot
to get the value it is using.
> seems like a reasonable place to start to find configuration options in your
> environment that relate to chroot. You might also refer to the unbound
> documentation to understand the defaults and the specific meaning of individual
Especially take notice what
tells you about the interaction between chroot and absolute path names.
> Another common error is to try and write log files to places where the process
> generating them does not have the necessary permissions. Determine the
> user that unbound is running as and check the permissions in the filesystem.
Or the directories are missing after the chroot took place...
More information about the Unbound-users