<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=gb2312">
<style type="text/css" style="display:none;"> P {margin-top:0;margin-bottom:0;} </style>
</head>
<body dir="ltr">
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<span style="font-family: "Microsoft Yahei UI", Verdana, Simsun, "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif; font-size: 14.6667px;">Selinux is not installed</span><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<span style="font-family:"Microsoft Yahei UI", Verdana, Simsun, "Segoe UI", -apple-system, BlinkMacSystemFont, Roboto, "Helvetica Neue", sans-serif;font-size:14.6667px;background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted3 ContentPasted4"><br>
</span></div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
# free -h
<div class="ContentPasted0">              total        used        free      shared  buff/cache   available</div>
<div class="ContentPasted0">Mem:           11Gi       872Mi       5.9Gi       5.0Mi       4.9Gi        10Gi</div>
Swap:         4.0Gi          0B       4.0Gi<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted5">
“max-cache-size 1G” or <em style="color:rgb(34, 34, 34);font-family:Arial;font-size:15px" class="ContentPasted6">"<span style="color:rgb(0, 0, 0);font-family:Calibri, Arial, Helvetica, sans-serif;font-size:16px;font-style:normal;background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted7">max-cache-size
 1G</span>" or remove <span style="color:rgb(0, 0, 0);font-family:Calibri, Arial, Helvetica, sans-serif;font-size:16px;font-style:normal;background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted8">max-cache-size</span> limit, the same
 question.</em><br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0">
<br>
</div>
<div style="font-family: Calibri, Arial, Helvetica, sans-serif; font-size: 12pt; color: rgb(0, 0, 0); background-color: rgb(255, 255, 255);" class="elementToProof ContentPasted0 ContentPasted1">
<span style="background-color:rgb(255, 255, 255);display:inline !important" class="ContentPasted2">#<span class="ContentPasted2"> </span></span> named-checkconf -px
<div class="ContentPasted1">acl "trusted" {</div>
<div class="ContentPasted1">        127.0.0.1/32;</div>
<div class="ContentPasted1">        202.192.142.0/22;</div>
<div class="ContentPasted1">        2002:249:3404::/48;</div>
<div class="ContentPasted1">        "localhost";</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">acl "bogon" {</div>
<div class="ContentPasted1">        0.0.0.0/8;</div>
<div class="ContentPasted1">        10.0.0.0/8;</div>
<div class="ContentPasted1">        172.16.0.0/12;</div>
<div class="ContentPasted1">        192.0.2.0/24;</div>
<div class="ContentPasted1">        192.168.0.0/16;</div>
<div class="ContentPasted1">        224.0.0.0/3;</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">controls {</div>
<div class="ContentPasted1">        inet 127.0.0.1 port 953 allow {</div>
<div class="ContentPasted1">                127.0.0.1/32;</div>
<div class="ContentPasted1">        } keys {</div>
<div class="ContentPasted1">                "rndc-key";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        inet ::1 port 953 allow {</div>
<div class="ContentPasted1">                ::1/128;</div>
<div class="ContentPasted1">        } keys {</div>
<div class="ContentPasted1">                "rndc-key";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">logging {</div>
<div class="ContentPasted1">        channel "default_syslog" {</div>
<div class="ContentPasted1">                file "/var/log/named/dns-bind.log" versions 3 size 209715200;</div>
<div class="ContentPasted1">                severity info;</div>
<div class="ContentPasted1">                print-time yes;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        channel "audit_log" {</div>
<div class="ContentPasted1">                file "/var/log/named/dns-named.log" versions 3 size 209715200;</div>
<div class="ContentPasted1">                severity info;</div>
<div class="ContentPasted1">                print-time yes;</div>
<div class="ContentPasted1">                print-category yes;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        channel "query_log" {</div>
<div class="ContentPasted1">                file "/var/log/named/dns-query.log" versions 20 size 629145600;</div>
<div class="ContentPasted1">                severity info;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        channel "security_log" {</div>
<div class="ContentPasted1">                file "/var/log/named/dns-security.log" versions 3 size 209715200;</div>
<div class="ContentPasted1">                severity info;</div>
<div class="ContentPasted1">                print-time yes;</div>
<div class="ContentPasted1">                print-severity yes;</div>
<div class="ContentPasted1">                print-category yes;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        channel "lame_log" {</div>
<div class="ContentPasted1">                file "/var/log/named/dns-lame.log" versions 3 size 209715200;</div>
<div class="ContentPasted1">                severity info;</div>
<div class="ContentPasted1">                print-time yes;</div>
<div class="ContentPasted1">                print-severity yes;</div>
<div class="ContentPasted1">                print-category yes;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "default" {</div>
<div class="ContentPasted1">                "default_syslog";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "general" {</div>
<div class="ContentPasted1">                "default_syslog";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "security" {</div>
<div class="ContentPasted1">                "security_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "config" {</div>
<div class="ContentPasted1">                "default_syslog";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "resolver" {</div>
<div class="ContentPasted1">                "audit_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "xfer-in" {</div>
<div class="ContentPasted1">                "audit_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "xfer-out" {</div>
<div class="ContentPasted1">                "audit_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "notify" {</div>
<div class="ContentPasted1">                "audit_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "client" {</div>
<div class="ContentPasted1">                "audit_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "network" {</div>
<div class="ContentPasted1">                "audit_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "update" {</div>
<div class="ContentPasted1">                "audit_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "queries" {</div>
<div class="ContentPasted1">                "query_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        category "lame-servers" {</div>
<div class="ContentPasted1">                "lame_log";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">options {</div>
<div class="ContentPasted1">        blackhole {</div>
<div class="ContentPasted1">                "bogon";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        datasize 209715200;</div>
<div class="ContentPasted1">        directory "/var/cache/bind";</div>
<div class="ContentPasted1">        interface-interval 0;</div>
<div class="ContentPasted1">        listen-on {</div>
<div class="ContentPasted1">                202.192.142.33/32;</div>
<div class="ContentPasted1">                127.0.0.1/32;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        listen-on-v6 {</div>
<div class="ContentPasted1">                "any";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        pid-file "/var/run/named.pid";</div>
<div class="ContentPasted1">        use-v4-udp-ports {</div>
<div class="ContentPasted1">                range 32768 65535;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        use-v6-udp-ports {</div>
<div class="ContentPasted1">                range 32768 65535;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        version "Karst";</div>
<div class="ContentPasted1">        allow-query-cache {</div>
<div class="ContentPasted1">                "trusted";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        dnssec-validation auto;</div>
<div class="ContentPasted1">        max-cache-size 1073741824;</div>
<div class="ContentPasted1">        recursion no;</div>
<div class="ContentPasted1">        allow-query {</div>
<div class="ContentPasted1">                "any";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        allow-transfer {</div>
<div class="ContentPasted1">                202.192.142.34/32;</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        notify yes;</div>
<div class="ContentPasted1">        zone-statistics yes;</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">view "internal-in" {</div>
<div class="ContentPasted1">        match-clients {</div>
<div class="ContentPasted1">                key "internal-key";</div>
<div class="ContentPasted1">                !key "external-key";</div>
<div class="ContentPasted1">                "trusted";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        server 202.192.142.34/32 {</div>
<div class="ContentPasted1">                keys "internal-key";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "." {</div>
<div class="ContentPasted1">                type hint;</div>
<div class="ContentPasted1">                file "/usr/share/dns/root.hints";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "localhost" {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "/etc/bind/db.local";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "127.in-addr.arpa" {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "/etc/bind/db.127";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "0.in-addr.arpa" {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "/etc/bind/db.0";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "255.in-addr.arpa" {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "/etc/bind/db.255";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "co2.net" in {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "internal.co2.net.zone";</div>
<div class="ContentPasted1">                allow-query {</div>
<div class="ContentPasted1">                        "any";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-transfer {</div>
<div class="ContentPasted1">                        key "internal-key";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "142.192.202.in-addr.arpa" in {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "internal.202.192.142.rev";</div>
<div class="ContentPasted1">                allow-query {</div>
<div class="ContentPasted1">                        "any";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-transfer {</div>
<div class="ContentPasted1">                        key "internal-key";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "4.0.4.3.9.4.2.0.2.0.0.2.ip6.arpa" {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "internal.2002:249:3404.rev";</div>
<div class="ContentPasted1">                allow-query {</div>
<div class="ContentPasted1">                        "any";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-transfer {</div>
<div class="ContentPasted1">                        key "internal-key";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-update {</div>
<div class="ContentPasted1">                        "none";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        recursion yes;</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">view "external-in" {</div>
<div class="ContentPasted1">        match-clients {</div>
<div class="ContentPasted1">                key "external-key";</div>
<div class="ContentPasted1">                !key "internal-key";</div>
<div class="ContentPasted1">                "any";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        server 202.192.142.34/32 {</div>
<div class="ContentPasted1">                keys "external-key";</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "co2.net" in {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "external.co2.net.zone";</div>
<div class="ContentPasted1">                allow-query {</div>
<div class="ContentPasted1">                        "any";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-transfer {</div>
<div class="ContentPasted1">                        key "external-key";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-update {</div>
<div class="ContentPasted1">                        "none";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "142.192.202.in-addr.arpa" in {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "external.202.192.142.rev";</div>
<div class="ContentPasted1">                allow-query {</div>
<div class="ContentPasted1">                        "any";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-transfer {</div>
<div class="ContentPasted1">                        key "external-key";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-update {</div>
<div class="ContentPasted1">                        "none";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        zone "4.0.4.3.9.4.2.0.2.0.0.2.ip6.arpa" {</div>
<div class="ContentPasted1">                type master;</div>
<div class="ContentPasted1">                file "external.2002:249:3404.rev";</div>
<div class="ContentPasted1">                allow-query {</div>
<div class="ContentPasted1">                        "any";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-transfer {</div>
<div class="ContentPasted1">                        key "external-key";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">                allow-update {</div>
<div class="ContentPasted1">                        "none";</div>
<div class="ContentPasted1">                };</div>
<div class="ContentPasted1">        };</div>
<div class="ContentPasted1">        recursion no;</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">key "rndc-key" {</div>
<div class="ContentPasted1">        algorithm "hmac-md5";</div>
<div class="ContentPasted1">        secret "????????????????????????";</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">key "internal-key" {</div>
<div class="ContentPasted1">        algorithm "hmac-md5";</div>
<div class="ContentPasted1">        secret "????????????????????????";</div>
<div class="ContentPasted1">};</div>
<div class="ContentPasted1">key "external-key" {</div>
<div class="ContentPasted1">        algorithm "hmac-md5";</div>
<div class="ContentPasted1">        secret "????????????????????????";</div>
};<br>
</div>
<div class="elementToProof">
<div id="Signature">
<div></div>
</div>
</div>
<div id="signature_bookmark"></div>
<div id="appendonsend"></div>
<div style="font-family:Calibri,Arial,Helvetica,sans-serif; font-size:12pt; color:rgb(0,0,0)">
<br>
</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>发件人:</b> bind-users <bind-users-bounces@lists.isc.org> 代表 Benny Pedersen <me@junc.eu><br>
<b>发送时间:</b> 2022年11月12日 15:25<br>
<b>收件人:</b> bind-users@lists.isc.org <bind-users@lists.isc.org><br>
<b>主题:</b> Re: 回复: failed to start BIND 9.16.34 on Ubuntu 20.04</font>
<div> </div>
</div>
<div class="BodyFragment"><font size="2"><span style="font-size:11pt">
<div class="PlainText elementToProof">Ling Yun skrev den 2022-11-12 07:22:<br>
> # journalctl -u named<br>
<br>
> Nov 12 11:18:05 h2o named[110517]: out of memory [110517]<br>
<br>
imho you have software that limit memory "selinux?"<br>
<br>
<a href="https://james-morris.livejournal.com/33622.html" data-auth="NotApplicable">https://james-morris.livejournal.com/33622.html</a> same problem ?<br>
<br>
</div>
<div class="PlainText elementToProof"><a href="https://flylib.com/books/en/2.684.1/limiting_the_memory_a_name_server_uses.html" data-auth="NotApplicable">https://flylib.com/books/en/2.684.1/limiting_the_memory_a_name_server_uses.html</a><br>
</div>
<div class="PlainText elementToProof"><br>
free shows how much mem is used or avail ?<br>
<br>
unsure please check "named-checkconf -px" if there is settings that make <br>
this errors<br>
<br>
> How to fix? thanks.<br>
<br>
don't know<br>
-- <br>
Visit <a href="https://lists.isc.org/mailman/listinfo/bind-users" data-auth="NotApplicable">
https://lists.isc.org/mailman/listinfo/bind-users</a> to unsubscribe from this list<br>
<br>
ISC funds the development of this software with paid support subscriptions. Contact us at
<a href="https://www.isc.org/contact/" data-auth="NotApplicable">https://www.isc.org/contact/</a> for more information.<br>
<br>
<br>
bind-users mailing list<br>
bind-users@lists.isc.org<br>
<a href="https://lists.isc.org/mailman/listinfo/bind-users" data-auth="NotApplicable">https://lists.isc.org/mailman/listinfo/bind-users</a><br>
</div>
</span></font></div>
</body>
</html>