Package: bind9
Version: 1:9.3.4-2
Severity: important

Hi,

I've configured bind9 to listen to a specific IPv6 address on port 53.
This works fine using the normal no-chroot setup that Debian ships with.
As soon as I move it inside a chroot (following:
  http://www.tldp.org/HOWTO/Chroot-BIND-HOWTO.html
bind9 no longer binds to the specified IPv6 address.  It will still bind
to "any".

To repeat (if you aren't already using IPv6):

modprobe ipv6
ip -6 addr add fec0::1

Edit /etc/bind/named.conf.options and add (inside options):

        listen-on-v6 port 53 { fec0::1; };
        listen-on-v6 port 153 { any; };

(The port 153 is to see it listen to any, and what I actually use on my
network to allow bind and dnsmasq to play nice together)

Restart bind9 and you should see in daemon.log:

Jul 28 10:21:17 cerberus named[3378]: listening on IPv6 interface eth0, 
fec0::1#53
Jul 28 10:22:01 cerberus named[3475]: listening on IPv6 interfaces, port 153

Now setup a chroot, copy the config files into place and you'll see:

Jul 28 10:22:01 cerberus named[3475]: listening on IPv6 interfaces, port 153

Not listening on the specified IPv6 address.  Is something else now required
in the chroot?

Cheers!

-- System Information:
Debian Release: 4.0
  APT prefers stable
  APT policy: (500, 'stable')
Architecture: i386 (i686)
Shell:  /bin/sh linked to /bin/bash
Kernel: Linux 2.6.21.5-cerberus
Locale: LANG=en_NZ, LC_CTYPE=en_NZ (charmap=ISO-8859-1) (ignored: LC_ALL set to 
en_NZ)

Versions of packages bind9 depends on:
ii  adduser                     3.102        Add and remove users and groups
ii  libbind9-0                  1:9.3.4-2    BIND9 Shared Library used by BIND
ii  libc6                       2.3.6.ds1-13 GNU C Library: Shared libraries
ii  libdns22                    1:9.3.4-2    DNS Shared Library used by BIND
ii  libisc11                    1:9.3.4-2    ISC Shared Library used by BIND
ii  libisccc0                   1:9.3.4-2    Command Channel Library used by BI
ii  libisccfg1                  1:9.3.4-2    Config File Handling Library used 
ii  liblwres9                   1:9.3.4-2    Lightweight Resolver Library used 
ii  libssl0.9.8                 0.9.8c-4     SSL shared libraries
ii  lsb-base                    3.1-23.1     Linux Standard Base 3.1 init scrip
ii  netbase                     4.29         Basic TCP/IP networking system

bind9 recommends no packages.

-- no debconf information


-- 
To UNSUBSCRIBE, email to [EMAIL PROTECTED]
with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]

Reply via email to