{"id":2680,"date":"2016-11-01T13:03:49","date_gmt":"2016-11-01T12:03:49","guid":{"rendered":"https:\/\/kudzia.eu\/b\/?p=2680"},"modified":"2016-11-01T13:04:27","modified_gmt":"2016-11-01T12:04:27","slug":"bind9-on-debian-jessie-ignores-4-in-etcdefaultbind9-and-tries-to-make-lookups-via-ipv6","status":"publish","type":"post","link":"https:\/\/kudzia.eu\/b\/2016\/11\/bind9-on-debian-jessie-ignores-4-in-etcdefaultbind9-and-tries-to-make-lookups-via-ipv6\/","title":{"rendered":"bind9 on debian jessie ignores -4 in \/etc\/default\/bind9 and tries to make lookups via ipv6"},"content":{"rendered":"

while checking one of the servers running debian jessie i’ve noticed that logs are full of:<\/p>\n

\r\nNov  1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving 'ns1.linode.com\/A\/IN': 2400:cb00:2049:1::a29f:1b48#53\r\nNov  1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving 'ns4.linode.com\/A\/IN': 2400:cb00:2049:1::a29f:1819#53\r\nNov  1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving 'ns5.linode.com\/A\/IN': 2400:cb00:2049:1::a29f:1819#53\r\nNov  1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving 'ns4.linode.com\/AAAA\/IN': 2400:cb00:2049:1::a29f:1b48#53\r\nNov  1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving 'ns5.linode.com\/A\/IN': 2400:cb00:2049:1::a29f:1b48#53\r\nNov  1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving 'ns4.linode.com\/A\/IN': 2400:cb00:2049:1::a29f:1b48#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb3.glbdns2.microsoft.com\/A\/IN': 2001:503:ba3e::2:30#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb4.glbdns2.microsoft.com\/A\/IN': 2001:503:ba3e::2:30#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb3.glbdns2.microsoft.com\/AAAA\/IN': 2001:503:ba3e::2:30#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb4.glbdns2.microsoft.com\/AAAA\/IN': 2001:503:ba3e::2:30#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb3.glbdns2.microsoft.com\/A\/IN': 2001:500:2d::d#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb4.glbdns2.microsoft.com\/A\/IN': 2001:500:2d::d#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb3.glbdns2.microsoft.com\/AAAA\/IN': 2001:500:2d::d#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb4.glbdns2.microsoft.com\/AAAA\/IN': 2001:500:2d::d#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb3.glbdns2.microsoft.com\/A\/IN': 2001:500:2f::f#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb4.glbdns2.microsoft.com\/A\/IN': 2001:500:2f::f#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb3.glbdns2.microsoft.com\/AAAA\/IN': 2001:500:2f::f#53\r\nNov  1 06:26:47 xxxrtr named[32117]: error (network unreachable) resolving 'glb4.glbdns2.microsoft.com\/AAAA\/IN': 2001:500:2f::f#53\r\n<\/pre>\n
strange… didn’t i put “-4” in the \/etc\/default\/bind9 ages ago?<\/p>\n
\r\n# run resolvconf?\r\nRESOLVCONF=no\r\n\r\n# startup options for the server\r\nOPTIONS="-f -4 -u bind"\r\n<\/pre>\n
apparently i did but ps shows that it was ignored:<\/p>\n
\r\nbind     14931  0.1  0.9 404948 37100 ?        Ssl  11:58   0:00 \/usr\/sbin\/named -4 -f -u bind\r\n<\/pre>\n
a bit of googling told me it’s a known problem with systemd [sic!] – the \/etc\/default\/bind9 is ignored. <\/p>\n
workaround?<\/p>\n
\r\nmkdir \/etc\/systemd\/system\/bind9.service.d\/\r\necho -e "[Service]\\nExecStart=\\nExecStart=\/usr\/sbin\/named -4 -f -u bind\\n" > \/etc\/systemd\/system\/bind9.service.d\/local.conf\r\nsystemctl reenable bind9.service\r\nservice bind9 restart\r\n<\/pre>\n
now things look better on ps:<\/p>\n
\r\nbind     14931  0.1  0.9 404948 37100 ?        Ssl  11:58   0:00 \/usr\/sbin\/named -4 -f -u bind\r\n<\/pre>\n","protected":false},"excerpt":{"rendered":"
while checking one of the servers running debian jessie i’ve noticed that logs are full of: Nov 1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving ‘ns1.linode.com\/A\/IN’: 2400:cb00:2049:1::a29f:1b48#53 Nov 1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving ‘ns4.linode.com\/A\/IN’: 2400:cb00:2049:1::a29f:1819#53 Nov 1 06:26:43 xxxrtr named[32117]: error (network unreachable) resolving ‘ns5.linode.com\/A\/IN’: 2400:cb00:2049:1::a29f:1819#53 Nov 1 06:26:43 xxxrtr named[32117]: error […]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[17,51],"tags":[96,28,97],"class_list":["post-2680","post","type-post","status-publish","format-standard","hentry","category-tech","category-unimportant","tag-bind9","tag-debian","tag-systemd"],"_links":{"self":[{"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/posts\/2680","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/comments?post=2680"}],"version-history":[{"count":2,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/posts\/2680\/revisions"}],"predecessor-version":[{"id":2682,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/posts\/2680\/revisions\/2682"}],"wp:attachment":[{"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/media?parent=2680"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/categories?post=2680"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/kudzia.eu\/b\/wp-json\/wp\/v2\/tags?post=2680"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}