Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]


Groups > comp.protocols.dns.bind > #15774 > unrolled thread

Upgrade from 9.14 to 9.16 - transfer-source with low source port no longer works.

Started byIngeborg Hellemo <ingeborg.hellemo@uit.no>
First post2020-05-26 11:38 +0200
Last post2020-05-26 11:38 +0200
Articles 1 — 1 participant

Back to article view | Back to comp.protocols.dns.bind

This discussion starts older than the indexed window; earlier articles aren't shown. The article labeled Started by below is the oldest one visible, not the original post.


Contents

  Upgrade from 9.14 to 9.16 - transfer-source with low source port no  longer works. Ingeborg Hellemo <ingeborg.hellemo@uit.no> - 2020-05-26 11:38 +0200

#15774 — Upgrade from 9.14 to 9.16 - transfer-source with low source port no longer works.

FromIngeborg Hellemo <ingeborg.hellemo@uit.no>
Date2020-05-26 11:38 +0200
SubjectUpgrade from 9.14 to 9.16 - transfer-source with low source port no longer works.
Message-ID<mailman.435.1590485888.942.bind-users@lists.isc.org>
FreeBSD 11.3-RELEASE-p3

This morning I upgraded from BIND 9.14.11 to 9.16.3 via FreeBSD ports.

Then I realize that my slave server no longer transfer zones from the master. 
The zone transfers worked as expected before the upgrade.

There are no error messages. The slave receives notifies from the master:

May 26 09:40:35 ludvigsen named[22721]: client @0x81d593f68 
129.242.4.254#24673: received notify for zone 'av.uit.no'
May 26 09:40:35 ludvigsen named[22721]: zone av.uit.no/IN: notify from 
129.242.4.254#24673: serial 2020052600

I can do a 'rndc reload <zone>' without errors:

May 26 09:57:29 ludvigsen named[22721]: received control channel command 
'reload av.uit.no'

If I do a full 'rndc reload' I finally get an error:

May 26 11:08:14 ludvigsen named[25953]: unable to create dispatch for reserved 
port 129.242.5.254#53: permission denied

Since this is a host with serveral virtual interfaces this address/port is set 
in named.conf:

        transfer-source 129.242.5.254 port 53;

The solution was to remove the 'port 53' part of the config, 



Finally, the question: 

Has there been some change in when named changes user id and drops privilege 
from root? Or some other changes that can explain the error?




--Ingeborg
-- 
Ingeborg Østrem Hellemo  --  ingeborg.hellemo@uit.no
Dep. of Information Technology  ---  Univ. of Tromsø


[toc] | [standalone]


Back to top | Article view | comp.protocols.dns.bind


csiph-web