[squid-users] FATAL: Could not create a DNS socket in squid 3.5.3 stable

[Amos Jeffries]

On 12/08/2015 11:01 p.m., vin_krish wrote:
> Hi,
> 
>    I'm running squid 3.5.3 stable version on the linux ARM platform. When I
> start to run squid, I get the following errors:
> 
> 2015/08/12 10:11:54.136| dns_internal.cc(1525) dnsInit: idnsInit: attempt
> open DNS socket to: [::]
> 2015/08/12 10:11:54.137| comm.cc(347) comm_openex: comm_openex: Attempt open
> socket for: [::]
> 2015/08/12 10:11:54.137| comm.cc(360) comm_openex: comm_openex: Attempt
> fallback open socket for: 0.0.0.0
> 2015/08/12 10:11:54.138| comm.cc(362) comm_openex: attempt open DNS Socket
> IPv6 socket on: 0.0.0.0
> 2015/08/12 10:11:54.138| comm_open: socket failure: (13) Permission denied
> 2015/08/12 10:11:54.139| dns_internal.cc(1534) dnsInit: idnsInit: attempt
> open DNS socket to: 0.0.0.0
> 2015/08/12 10:11:54.139| comm.cc(347) comm_openex: comm_openex: Attempt open
> socket for: 0.0.0.0
> 2015/08/12 10:11:54.139| comm_open: socket failure: (13) Permission denied
> 2015/08/12 10:11:54.141| tools.cc(543) leave_suid: leave_suid: PID 4305
> called
> 2015/08/12 10:11:54.141| storeDirWriteCleanLogs: Starting...
> 2015/08/12 10:11:54.141|   Finished.  Wrote 0 entries.
> 2015/08/12 10:11:54.141|   Took 0.00 seconds (  0.00 entries/sec).
> FATAL: Could not create a DNS socket
> 
>     I have gone through the forum and searched but none solved the issue
> like udp/tcp outgoing_address. I have disabled ipv6 in squid config.
> Please help in solving the issue..

IPv6 has nothing to do with it AFAICS. Apparently the user account
starting Squid just dont have permission to open listening sockets, or
at least ones with randomly OS-assigned port.

To send send receive DNS packets Squid requires a UDP listening port
opened. But for security the OS is left to assign a random port number.

Amos