Package: bind9
Version: 1:9.8.4.dfsg.P1-6+nmu2+deb7u1
Severity: normal
Tags: ipv6

Dear Maintainer,

named silently fails at boot, perhaps because of these two IPv6 addresses that 
this host has:
2a00:12c0:1015:100:1::2 and
2a00:12c0:1015:100:1::3

Workaround: restart bind9 manually after boot

Reason: I assume that dependency based booting does not work here, perhaps this 
is related to
http://arstechnica.com/civis/viewtopic.php?f=16&t=1208677


Nov 14 11:01:13 binky named[1993]: starting BIND 9.8.4-rpz2+rl005.12-P1 -u bind
Nov 14 11:01:13 binky named[1993]: built with '--prefix=/usr' 
'--mandir=/usr/share/man' '--infodir=/usr/share/info' '--sysconfdir=/etc/bind' 
'--localstatedir=/var' '-
-enable-threads' '--enable-largefile' '--with-libtool' '--enable-shared' 
'--enable-static' '--with-openssl=/usr' '--with-gssapi=/usr' '--with-gnu-ld' 
'--with-geoip=/u
sr' '--enable-ipv6' 'CFLAGS=-fno-strict-aliasing -DDIG_SIGCHASE -O2'
Nov 14 11:01:13 binky named[1993]: 
----------------------------------------------------
Nov 14 11:01:13 binky named[1993]: BIND 9 is maintained by Internet Systems 
Consortium,
Nov 14 11:01:13 binky named[1993]: Inc. (ISC), a non-profit 501(c)(3) 
public-benefit
Nov 14 11:01:13 binky named[1993]: corporation.  Support and training for BIND 
9 are
Nov 14 11:01:13 binky named[1993]: available at https://www.isc.org/support
Nov 14 11:01:13 binky named[1993]: 
----------------------------------------------------
Nov 14 11:01:13 binky named[1993]: adjusted limit on open files from 4096 to 
1048576
Nov 14 11:01:13 binky named[1993]: found 1 CPU, using 1 worker thread
Nov 14 11:01:13 binky named[1993]: using up to 4096 sockets
Nov 14 11:01:13 binky named[1993]: loading configuration from 
'/etc/bind/named.conf'
Nov 14 11:01:13 binky named[1993]: reading built-in trusted keys from file 
'/etc/bind/bind.keys'
Nov 14 11:01:13 binky named[1993]: using default UDP/IPv4 port range: [1024, 
65535]
Nov 14 11:01:13 binky named[1993]: using default UDP/IPv6 port range: [1024, 
65535]
Nov 14 11:01:13 binky named[1993]: listening on IPv4 interface eth0, 
109.75.188.214#53
Nov 14 11:01:13 binky named[1993]: listening on IPv6 interface lo, ::1#53
Nov 14 11:01:13 binky named[1993]: listening on IPv6 interface eth0, 
2a00:12c0:1015:100:1::2#53
Nov 14 11:01:13 binky named[1993]: could not listen on UDP socket: address not 
available
Nov 14 11:01:13 binky named[1993]: creating IPv6 interface eth0 failed; 
interface ignored
Nov 14 11:01:13 binky named[1993]: generating session key for dynamic DNS
Nov 14 11:01:13 binky named[1993]: sizing zone task pool based on 11 zones
Nov 14 11:01:13 binky named[1993]: could not get query source dispatcher 
(2a00:12c0:1015:100:1::2#0)
Nov 14 11:01:13 binky named[1993]: additionally listening on IPv6 interface 
eth0, 2a00:12c0:1015:100:1::2#53
Nov 14 11:01:13 binky named[1993]: could not listen on UDP socket: address not 
available
Nov 14 11:01:13 binky named[1993]: creating IPv6 interface eth0 failed; 
interface ignored
Nov 14 11:01:13 binky named[1993]: loading configuration: address not available
Nov 14 11:01:13 binky named[1993]: exiting (due to fatal error)





-- System Information:
Debian Release: 7.2
  APT prefers stable-updates
  APT policy: (500, 'stable-updates'), (500, 'stable')
Architecture: amd64 (x86_64)

Kernel: Linux 3.2.0-4-amd64 (SMP w/1 CPU core)
Locale: LANG=en_US.UTF-8, LC_CTYPE=en_US.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash

Versions of packages bind9 depends on:
ii  adduser                3.113+nmu3
ii  bind9utils             1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  debconf [debconf-2.0]  1.5.49
ii  libbind9-80            1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  libc6                  2.13-38
ii  libcap2                1:2.22-1.2
ii  libdns88               1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  libgssapi-krb5-2       1.10.1+dfsg-5+deb7u1
ii  libisc84               1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  libisccc80             1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  libisccfg82            1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  liblwres80             1:9.8.4.dfsg.P1-6+nmu2+deb7u1
ii  libssl1.0.0            1.0.1e-2
ii  libxml2                2.8.0+dfsg1-7+nmu2
ii  lsb-base               4.1+Debian8+deb7u1
ii  net-tools              1.60-24.2
ii  netbase                5.0

bind9 recommends no packages.

Versions of packages bind9 suggests:
pn  bind9-doc   <none>
ii  dnsutils    1:9.8.4.dfsg.P1-6+nmu2+deb7u1
pn  resolvconf  <none>
pn  ufw         <none>

/etc/bind/named.conf.options changed:
key "fussel" {
        algorithm hmac-md5;
        secret "gX5u9ali30T8xxhacKWBxQ==";
};
controls {   
        // inet 127.0.0.1 allow { localhost; } 
        inet ::1 allow { localhost; } 
        keys { fussel; }; 
};
options {
        edns-udp-size 512;
        max-udp-size 512;
        listen-on-v6 { ::1; 2a00:12c0:1015:100:1::2; };
        listen-on { 109.75.188.214; };
        directory "/var/cache/bind";
        version "0.8.15";
        max-cache-size 2M;
        // max. 1 Tag:
        max-cache-ttl 86400;
        // max. 1 Stunde:
        max-ncache-ttl 3600;
        auth-nxdomain no;               // conform to RFC1035
        empty-zones-enable yes;
        notify yes;
        // falls Secondary kein Bind ist:
        transfer-format one-answer;
        transfer-source 109.75.188.214;
        transfer-source-v6 2a00:12c0:1015:100:1::2;
        notify-source 109.75.188.214;
        notify-source-v6 2a00:12c0:1015:100:1::2;
        query-source 109.75.188.214;
        query-source-v6 2a00:12c0:1015:100:1::2;
        //
        recursion yes;
        allow-recursion { 127.0.0.1; ::1; };
        blackhole { bogon; };
        allow-query { any; };
        forward first;
        forwarders {
                2a00:12c0:1:64::3:53;
                2a00:12c0:1:65::3:53;
        };
        dnssec-enable yes;
        dnssec-validation auto;
        dnssec-lookaside auto;
};
logging {
//      category queries { debug; };
//      category default { debug; };
//      category general { debug; };
//      category database { debug; };
        category security { debug; };
//      category config { debug; };
//      category resolver { debug; };
        category xfer-in { debug; };
        category xfer-out { debug; };
        category notify { debug; };
        category client { debug; };
//      category unmatched { debug; };
//      category network { debug; };
//      category update { debug; };
//      category dispatch { debug; };
        category dnssec { debug; };
//      category lame-servers { debug; };
        category delegation-only { debug; };
        category edns-disabled { debug; };
        channel debug {
                syslog daemon;
                severity debug;
                print-category yes;
                print-severity yes;
        };
        channel null {
                null;
        };
};


-- 
To UNSUBSCRIBE, email to debian-bugs-dist-requ...@lists.debian.org
with a subject of "unsubscribe". Trouble? Contact listmas...@lists.debian.org

Reply via email to