Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > comp.protocols.dns.bind > #15774

Upgrade from 9.14 to 9.16 - transfer-source with low source port no longer works.

Show all headers | View raw

FreeBSD 11.3-RELEASE-p3

This morning I upgraded from BIND 9.14.11 to 9.16.3 via FreeBSD ports.

Then I realize that my slave server no longer transfer zones from the master. 
The zone transfers worked as expected before the upgrade.

There are no error messages. The slave receives notifies from the master:

May 26 09:40:35 ludvigsen named[22721]: client @0x81d593f68 
129.242.4.254#24673: received notify for zone 'av.uit.no'
May 26 09:40:35 ludvigsen named[22721]: zone av.uit.no/IN: notify from 
129.242.4.254#24673: serial 2020052600

I can do a 'rndc reload <zone>' without errors:

May 26 09:57:29 ludvigsen named[22721]: received control channel command 
'reload av.uit.no'

If I do a full 'rndc reload' I finally get an error:

May 26 11:08:14 ludvigsen named[25953]: unable to create dispatch for reserved 
port 129.242.5.254#53: permission denied

Since this is a host with serveral virtual interfaces this address/port is set 
in named.conf:

        transfer-source 129.242.5.254 port 53;

The solution was to remove the 'port 53' part of the config, 



Finally, the question: 

Has there been some change in when named changes user id and drops privilege 
from root? Or some other changes that can explain the error?




--Ingeborg
-- 
Ingeborg Østrem Hellemo  --  ingeborg.hellemo@uit.no
Dep. of Information Technology  ---  Univ. of Tromsø

Back to comp.protocols.dns.bind | Previous | Next | Find similar

Thread

Upgrade from 9.14 to 9.16 - transfer-source with low source port no  longer works. Ingeborg Hellemo <ingeborg.hellemo@uit.no> - 2020-05-26 11:38 +0200

csiph-web