ISC BIND 9.3.5-P2 is now available

The Doctor doctor at doctor.nl2k.ab.ca
Tue Aug 5 14:03:49 UTC 2008


On Tue, Aug 05, 2008 at 01:19:18PM +1000, Mark Andrews wrote:
> 
> > At Sat, 2 Aug 2008 11:21:47 -0600,
> > The Doctor <doctor at doctor.nl2k.ab.ca> wrote:
> > > 
> > > Bug!!
> > > 
> > > I do not see this in the P1, but is plaguing the P2s:
> > 
> > > Aug  2 11:15:25 doctor named[14742]: starting BIND 9.3.5-P2
> > > Aug  2 11:15:25 doctor named[14742]: found 1 CPU, using 1 worker thread
> > > Aug  2 11:15:25 doctor named[14742]: loading configuration from '/etc/named
> > .conf'
> > > Aug  2 11:15:25 doctor named[14742]: listening on IPv4 interface em0, 204.2
> > 09.81.1#53
> > > Aug  2 11:15:25 doctor named[14742]: socket.c:485: unexpected error:
> > > Aug  2 11:15:25 doctor named[14742]: fcntl(512, F_SETFL, -1): Bad file desc
> > riptor
> > 
> > Try specifying a small value such as 32 for the reserved-sockets
> > option:
> > 
> > options {
> > 	reserved-sockets 32;
> > 	...
> > };
> > 
> > But, even if this seemingly solves this error, I suspect the above
> > error indicates that your OS has a fundamental limitation on the
> > number of file descriptors and will soon trigger a different type of
> > trouble.  If you've not done this yet, I'd suggest you check the OS
> > capability with the tool I posted a few days ago, which is available
> > at http://www.jinmei.org/selecttest.tgz
> > 
> > One more thing: as already pointed out, if you specify a specific port
> > using query-source:
> > 
> > > Aug  2 11:15:25 doctor named[14742]: /etc/named.conf:60: using specific que
> > ry-source port suppresses port randomization and can be insecure.
> > 
> > you effectively disable any security feature of P1 or P2 or recent
> > beta versions.  Using these versions with a specific port doesn't
> > provide anything new and is meaningless.
> > 
> > ---
> > JINMEI, Tatuya
> > Internet Systems Consortium, Inc.
> 
> 	What's wierd here is that fcntl(F_DUPFD) succeeded but
> 	fcntl(F_SETFL) then failed on the value returned from
> 	fcntl(F_DUPFD).
> 
> 	Mark

Again this is a BSD system, BSD4 .

Could anything cause that.

I also have my MAx OPen Files set to 1024.

-- 
Member - Liberal International	
This is doctor at nl2k.ab.ca	Ici doctor at nl2k.ab.ca
God, Queen and country! Beware Anti-Christ rising!  
USA petition for dissolution of your nation!


More information about the bind-users mailing list