In message <4f0cebb5.3040...@dougbarton.us>, Doug Barton writes: > On 01/10/2012 17:34, Mark K. Pettit wrote: > > There are some caveats to trying to use "interface-interval" to pick up new > IPs. If your BIND drops privileges (e.g., by using the "-u" command-line op > tion to named), you might have a problem getting BIND to bind() to the new IP > addresses. > > > > For example, on FreeBSD if you use "-u" to drop privileges, BIND will not b > e able to bind() to new addresses without modifying the kernel to allow non-r > oot users to bind() to port 53. > > > > On modern versions of Linux, BIND can bind() to new IP addresses even with > the "-u" option because the kernel has a mechanism to allow it. > > > > In my environment (FreeBSD) we've worked around this problem (just recently > , in fact), and I can provide more details if there's any interest. > > well I'm definitely interested. :)
http://www.freebsd.org/doc/en_US.ISO8859-1/books/handbook/mac-portacl.html -- Mark Andrews, ISC 1 Seymour St., Dundas Valley, NSW 2117, Australia PHONE: +61 2 9871 4742 INTERNET: ma...@isc.org _______________________________________________ Please visit https://lists.isc.org/mailman/listinfo/bind-users to unsubscribe from this list bind-users mailing list bind-users@lists.isc.org https://lists.isc.org/mailman/listinfo/bind-users
