On 2/6/21 12:03 PM, Geo Kozey via arch-general wrote:
----------------------------------------
From: Archange via arch-general <arch-general@lists.archlinux.org>
...
nsd[10230]: setsockopt(..., IP_TRANSPARENT, ...) failed for tcp:
Operation not permitted
So if you use this option (IP_TRANSPARENT), which is non-default, you
...
I disagree with downstream hardening efforts that limit app features (even when
..
G. K.
Yes i am using ip-transparent - this is pretty helpful option to avoid
non-starting when network unavailable for some reason.
I would also prefer that CAP_NET_ADMIN be added as default config.
thanks.
