Bind 9.11 error in pfsense 2.33

luciano_frc

Hello,
I installed pfsense version 2.33 today, also the bind 9.11 package, but when I started the bind service I noticed the following error

setsockopt(22, TCP_FASTOPEN) failed with Protocol not available

And there is no longer available in the package manager version 9.10 that worked correctly

It is possible to go back to version 9.10
Or fix this error?
thank you

doktornotor

https://redmine.pfsense.org/issues/7293
https://bugs.freebsd.org/bugzilla/show_bug.cgi?id=217288

luciano_frc

I was looking at this topic
https://forums.freebsd.org/threads/59348/
I don't know where the file is

Added 'options TCP_RFC7413' to custom kernel config

Can you tell me what files I need to edit and what I need to put on them
thank you so much.
I'm sure there are other people with this same doubt, about the kernel config file

doktornotor

No cannot do any such thing on pfSense. Judging from the FreeBSD maintainer reaction, you'll have to live with the useless log noise unless the package is downgraded.

luciano_frc

OK! I understood.
I had done some testing in bind-pfsense-9.10.4P2 and there really was not that mistake.
However in the package manager, bind-pfsense-9.10.4P2 does not appear, only 9.11
It would be possible to remove bind 9.11 and install bind-pfsense-9.10.4P2 on pfsense 2.3.3 ?

doktornotor

Downgrade is what's been requested @ Redmine. Not up to me.

(I have this on a box with 10 VLANs -> 60+ lines of log junk on (re)start. Sigh.)

curtisgrice

I seem to be stuck with a non working BIND package (9.11.2) what was the work around? Is there a way to downgrade to 9.10?

johnpoz

Don't cross post, and dig up threads from year ago..

What part in your zone file do you think is correct about this?

@ IN NS 192.168.1.1.

So you think its ok to put in an IP for your NS record?