- Fix upper port range to 60999 because that's what selinux allows

This commit is contained in:
Paul Wouters 2016-07-07 19:22:06 +03:00
parent b0dab5d25d
commit a147b9358d
2 changed files with 5 additions and 2 deletions

View File

@ -77,7 +77,7 @@ server:
# permit unbound to use this port number or port range for
# making outgoing queries, using an outgoing interface.
# Only ephemeral ports are allowed by SElinux
outgoing-port-permit: 32768-65535
outgoing-port-permit: 32768-60999
# deny unbound the use this of port number or port range for
# making outgoing queries, using an outgoing interface.

View File

@ -21,7 +21,7 @@
Summary: Validating, recursive, and caching DNS(SEC) resolver
Name: unbound
Version: 1.5.9
Release: 2%{?extra_version:.%{extra_version}}%{?dist}
Release: 3%{?extra_version:.%{extra_version}}%{?dist}
License: BSD
Url: http://www.nlnetlabs.nl/unbound/
Source: http://www.unbound.net/downloads/%{name}-%{version}%{?extra_version}.tar.gz
@ -430,6 +430,9 @@ popd
%changelog
* Thu Jul 07 2016 Paul Wouters <pwouters@redhat.com> - 1.5.9-3
- Fix upper port range to 60999 because that's what selinux allows
* Thu Jun 16 2016 Paul Wouters <pwouters@redhat.com> - 1.5.9-2
- Patch for allowing more queries before failure (needed for query minimalization)