[arch-general] nsd 4.3.5 broken

Genes Lists lists at sapience.com
Sat Feb 6 17:09:31 UTC 2021

On 2/6/21 12:03 PM, Geo Kozey via arch-general wrote:
>> ----------------------------------------
>> From: Archange via arch-general <arch-general at lists.archlinux.org>
>>>>    nsd[10230]: setsockopt(..., IP_TRANSPARENT, ...) failed for tcp:
>>>> Operation not permitted
>> So if you use this option (IP_TRANSPARENT), which is non-default, you
> I disagree with downstream hardening efforts that limit app features (even when
> G. K.

Yes i am using ip-transparent - this is pretty helpful option to avoid 
non-starting when network unavailable for some reason.

I would also prefer that CAP_NET_ADMIN be added as default config.


More information about the arch-general mailing list