On Mon, Oct 23, 2017 at 07:33:01PM -0400, Roberto C. Sánchez wrote: > So, I edited resolv.conf to my preference and then made it immutable > with `chattr +i /etc/resolv.conf`. Several hours later the name server > was changed back to the ISP router's address. That is very odd.
ls -ld /etc/resolv.conf On Tue, Oct 24, 2017 at 03:15:30AM -0400, Roberto C. Sánchez wrote: > > > So if you: > > > $ ls -l --full-time /etc/resolv.conf > > > and then look at what happened at that precise time in /var/log/syslog > > > or wherever your logs are being written. What took place? And what does the ls actually SHOW? > So, it happened again at 03:02:26 that resolv.conf was changed. ls -ld /etc/resolv.conf If it's a SYMLINK and you made the symlink immutable, well, that would explain a whole lot.
