Netgate SG-1000 microFirewall

Author Topic: Bind 9.11 error in pfsense 2.33  (Read 1800 times)

0 Members and 1 Guest are viewing this topic.

Offline luciano_frc

  • Jr. Member
  • **
  • Posts: 35
  • Karma: +0/-1
    • View Profile
Bind 9.11 error in pfsense 2.33
« on: February 21, 2017, 04:58:15 pm »
Hello,
I installed pfsense version 2.33 today, also the bind 9.11 package, but when I started the bind service I noticed the following error

setsockopt(22, TCP_FASTOPEN) failed with Protocol not available

And there is no longer available in the package manager version 9.10 that worked correctly


It is possible to go back to version 9.10
Or fix this error?
thank you
« Last Edit: February 21, 2017, 09:57:11 pm by luciano_frc »

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8551
  • Karma: +964/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
« Last Edit: February 22, 2017, 02:30:23 am by doktornotor »
Do NOT PM for help!

Offline luciano_frc

  • Jr. Member
  • **
  • Posts: 35
  • Karma: +0/-1
    • View Profile
Re: Bind 9.11 error in pfsense 2.33
« Reply #2 on: February 22, 2017, 03:49:36 am »
I was looking at this topic
https://forums.freebsd.org/threads/59348/
I don't know where the file is

Added 'options TCP_RFC7413' to custom kernel config

Can you tell me what files I need to edit and what I need to put on them
thank you so much.
I'm sure there are other people with this same doubt, about the kernel config file
« Last Edit: February 22, 2017, 03:54:15 am by luciano_frc »

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8551
  • Karma: +964/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: Bind 9.11 error in pfsense 2.33
« Reply #3 on: February 22, 2017, 04:15:58 am »
No cannot do any such thing on pfSense. Judging from the FreeBSD maintainer reaction, you'll have to live with the useless log noise unless the package is downgraded.
Do NOT PM for help!

Offline luciano_frc

  • Jr. Member
  • **
  • Posts: 35
  • Karma: +0/-1
    • View Profile
Re: Bind 9.11 error in pfsense 2.33
« Reply #4 on: February 22, 2017, 04:24:15 am »
OK! I understood.
I had done some testing in bind-pfsense-9.10.4P2 and there really was not that mistake.
However in the package manager, bind-pfsense-9.10.4P2 does not appear, only 9.11
It would be possible to remove bind 9.11 and install bind-pfsense-9.10.4P2 on pfsense 2.3.3 ?

Offline doktornotor

  • Hero Member
  • *****
  • Posts: 8551
  • Karma: +964/-278
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: Bind 9.11 error in pfsense 2.33
« Reply #5 on: February 22, 2017, 05:19:14 am »
Downgrade is what's been requested @ Redmine. Not up to me.

(I have this on a box with 10 VLANs -> 60+ lines of log junk on (re)start. Sigh.)
Do NOT PM for help!

Offline curtisgrice

  • Jr. Member
  • **
  • Posts: 84
  • Karma: +5/-1
    • View Profile
Re: Bind 9.11 error in pfsense 2.33
« Reply #6 on: January 02, 2018, 04:58:58 pm »
I seem to be stuck with a non working BIND package (9.11.2) what was the work around? Is there a way to downgrade to 9.10?
Slow code? Sounds like a good reason to buy more hardware!

Online johnpoz

  • Hero Member
  • *****
  • Posts: 15734
  • Karma: +1469/-210
  • Not a pfSense employee, they cannot fire me...
    • View Profile
Re: Bind 9.11 error in pfsense 2.33
« Reply #7 on: January 04, 2018, 07:31:23 am »
Don't cross post, and dig up threads from year ago..

What part in your zone file do you think is correct about this?

@     IN NS    192.168.1.1.

So you think its ok to put in an IP for your NS record?



- An intelligent man is sometimes forced to be drunk to spend time with his fools.
- Please don't PM me for personal help
- if you want to say thanks applaud or https://www.freebsdfoundation.org/donate/
1x SG-2440 2.4.3-RELEASE (work)
1x SG-3100 2.4.3-RELEASE (work)
1x SG-4860 2.4.3-RELEASE (home)