我在CentOS 6.6机器上运行Bind 9.10.2版本.
在运行dig命令时,我得到“net.c：577：sendmsg()失败：操作不被允许”通知.
在运行dig命令时,我得到“net.c：577：sendmsg()失败：操作不被允许”通知.
$dig nkn.in +short **net.c:577: sendmsg() Failed: Operation not permitted** 164.100.129.98 System Information :- cat /etc/*-release CentOS release 6.6 (Final) LSB_VERSION=base-4.0-amd64:base-4.0-noarch:core-4.0-amd64:core-4.0-noarch:graphics-4.0-amd64:graphics-4.0-noarch:printing-4.0-amd64:printing-4.0-noarch CentOS release 6.6 (Final) CentOS release 6.6 (Final)
有人可以帮我解释为什么我收到此通知？
IPv6防火墙规则集： –
*filter :INPUT DROP [0:0] :FORWARD DROP [0:0] :OUTPUT DROP [0:0] :LOGGING - [0:0] -A INPUT -i lo -j ACCEPT -A INPUT -p icmpv6 -j ACCEPT -A INPUT -p udp --dport 5353 -d ff02::fb -j ACCEPT -A INPUT -p udp -m udp --dport 631 -j ACCEPT -A INPUT -p tcp -m tcp --dport 631 -j ACCEPT -A INPUT -p udp -m udp --dport 53 -j ACCEPT -A INPUT -p tcp -m tcp --dport 53 -j ACCEPT -A OUTPUT -p icmpv6 --icmpv6-type echo-reply -j ACCEPT -A INPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A INPUT -m udp -p udp --sport 1812 -j ACCEPT -A INPUT -m udp -p udp --sport 1813 -j ACCEPT -A INPUT -s fe80::/64 -j ACCEPT -A INPUT -s ff02::/64 -j ACCEPT -A INPUT -j LOG --log-prefix "IP6Tables:INPUT " --log-level 7 -A OUTPUT -p udp -m udp --dport 53 -j ACCEPT -A OUTPUT -p tcp -m tcp --dport 53 -j ACCEPT -A OUTPUT -p icmpv6 -j ACCEPT -A OUTPUT -p icmpv6 --icmpv6-type echo-request -j ACCEPT -A OUTPUT -m state --state RELATED,ESTABLISHED -j ACCEPT -A OUTPUT -d 2001:db8::/32 -j ACCEPT -A OUTPUT -d fe80::/64 -j ACCEPT -A OUTPUT -d ff02::/64 -j ACCEPT -A OUTPUT -j LOG --log-prefix "IP6Tables:OUTPUT " --log-level 7 -A LOGGING -m limit --limit 2/min -j LOG --log-prefix "IP6Tables-Dropped: " -A LOGGING -j DROP COMMIT
解决方法
在我的arch linux中,它帮助添加了ip6tables防火墙规则,允许从localhost发送本地udp数据包到localhost：
ip6tables -I OUTPUT 1 -p udp -s 0000:0000:0000:0000:0000:0000:0000:0001 \ -d 0000:0000:0000:0000:0000:0000:0000:0001 -j ACCEPT
