> o you are running an open resolver in this way. yes, i am aware of this. gotta get a load on it somehow! :) > o you may need to symbolic link /dev/random to /your_chroot/dev/random, > so that openssl can get entropy. (or dev/urandom, depending on SSL config) openssl? i'll need openssl when the root is signed. i presume i will need a lot more in /etc/unbound as well for running jailed. randy