[tor-relays] debugging unbound on 'torexit' failing DNS queries

[nusenu]

Quintin:
> No outbound filters, this is my config:
> 
> If I stop tor then "dig @127.0.0.1 google.com" works 100%. It's seems like
> the pattern is that when tor traffic builds up so do DNS failures. And then
> my dig @127.0.0.1 only succeeds about 0.1% of the time. At this stage large
> amounts these errors start appearing:


Do you reach your server's conntrack limit?

https://stackoverflow.com/questions/6240951/sendto-operation-not-permitted-netsnmp

(you didn't say anything about unbound's config)




-- 
https://mastodon.social/@nusenu
twitter: @nusenu_

-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 833 bytes
Desc: OpenPGP digital signature
URL: <http://lists.torproject.org/pipermail/tor-relays/attachments/20180118/57935a8b/attachment.sig>