Re: Getting SERVFAIL when trying to reach .co.il domains

On 2021-01-01 05:14, Gil Levy wrote: But apparently your unbound.conf file indicates it's here: >> /etc/unbound/var/log/unbound This has already been fixed in my unbound.conf file (see here: unbound.conf ), but it still errors: *error: Could not open logfile /va

Re: Getting SERVFAIL when trying to reach .co.il domains

Thanks, guys! I'm running chroot on /etc/unbound. I followed this guide to compile unbound on my machine: https://pastebin.com/UUjss5aY Some initial values there made use of /etc/unbound instead of /var/log/unbound so after I compiled unbound-1.13.0, I changed the paths to point to /var/log/unboun

Re: Getting SERVFAIL when trying to reach .co.il domains

Joe Abley via Unbound-users writes: > > On Jan 1, 2021, at 14:15, Gil Levy via Unbound-users > wrote: > > >> Are you running unbound in a chroot(8)? > > I don't know how to check that. > > man chroot > > for a better description of what chroot does, and how the interpretation of > a

Re: Getting SERVFAIL when trying to reach .co.il domains

On Jan 1, 2021, at 14:15, Gil Levy via Unbound-users wrote: >> Are you running unbound in a chroot(8)? > I don't know how to check that. man chroot for a better description of what chroot does, and how the interpretation of absolute pathnames differs inside and outside the chroot namespace.

Re: Getting SERVFAIL when trying to reach .co.il domains

> > But apparently your unbound.conf file indicates it's here: > >> /etc/unbound/var/log/unbound > This has already been fixed in my unbound.conf file (see here: unbound.conf ), but it still errors: *error: Could not open logfile /var/log/unbound/unbound.log: No such

Re: Getting SERVFAIL when trying to reach .co.il domains

On 2021-01-01 03:06, Gil Levy via Unbound-users wrote: Thanks, Daisuke. However, I'm past that line. While I will change the settings as you kindly suggested (thank you for that), I'm encountering other issues which disable me from using Unbound. I shot an email earlier today with the following:

Re: Getting SERVFAIL when trying to reach .co.il domains

Thanks, Daisuke. However, I'm past that line. While I will change the settings as you kindly suggested (thank you for that), I'm encountering other issues which disable me from using Unbound. I shot an email earlier today with the following: > >1. Cannot open log file (despite it's configure

Re: Getting SERVFAIL when trying to reach .co.il domains

Hi, ".co.il" and ".il" (seemingly under DNSSEC algorithm rollover) have several errors. Current versions of Unbound in default configuration tolerate them, but in a specific configuration Unbound could make fatal errors. Assuming [1] is your configuration file, the offending line is: > harden