[GH-ISSUE #6932] IPV6 DNS: net.c:137:try_proto(): socket(): Operation not supported (95) #3425

New issue

Open

opened 2026-05-05 09:59:36 -06:00 by gitea-mirror · 1 comment

gitea-mirror commented

2026-05-05 09:59:36 -06:00

Owner

Originally created by @pprocto on GitHub (Oct 10, 2025).
Original GitHub issue: https://github.com/netblue30/firejail/issues/6932

Description

Describe the bug

Steps to Reproduce

Hello,

I would like to use an IPV6 DNS. I start this:

/bin/firejail \
  --noprofile \
  --protocol=inet,inet6 \
  --dns=2606:4700:4700::1111 \
  --net=wlp112s0 \
  --ignore=seccomp \
  nslookup -type=AAAA google.com

Where is the problem ?

Expected behavior

Accept to use the ipv6 DNS

Actual behavior

But I receive this error:

Parent pid 1662754, child pid 1662757

Interface        MAC                IP               Mask             Status
lo                                  127.0.0.1        255.0.0.0        UP    
eth0-1662754     94:e6:f7:83:a2:c5  192.168.0.195    255.255.255.0    UP    
Default gateway 192.168.0.254
DNS server 2606:4700:4700::1111

Child process initialized in 1082.32 ms
Warning: an existing sandbox was detected. /usr/bin/nslookup will run without any additional sandboxing features
net.c:137:try_proto(): socket(): Operation not supported (95)
;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable.
;; no servers could be reached
;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable.
;; no servers could be reached
;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable.
;; no servers could be reached


Parent is shutting down, bye...

Environment

Name/version/arch of the Linux kernel (uname -srm): Linux 6.14.0-33-generic x86_64
Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Ubuntu 24.04.3 LTS
Version of Firejail (firejail --version): firejail version 0.9.72

Checklist

The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
I can reproduce the issue without custom modifications (e.g. globals.local).

Relates to:

#6931

Originally created by @pprocto on GitHub (Oct 10, 2025). Original GitHub issue: https://github.com/netblue30/firejail/issues/6932  ### Description _Describe the bug_ ### Steps to Reproduce Hello, I would like to use an IPV6 DNS. I start this: ```bash /bin/firejail \ --noprofile \ --protocol=inet,inet6 \ --dns=2606:4700:4700::1111 \ --net=wlp112s0 \ --ignore=seccomp \ nslookup -type=AAAA google.com ``` Where is the problem ? ### Expected behavior Accept to use the ipv6 DNS ### Actual behavior But I receive this error: ``` Parent pid 1662754, child pid 1662757 Interface MAC IP Mask Status lo 127.0.0.1 255.0.0.0 UP eth0-1662754 94:e6:f7:83:a2:c5 192.168.0.195 255.255.255.0 UP Default gateway 192.168.0.254 DNS server 2606:4700:4700::1111 Child process initialized in 1082.32 ms Warning: an existing sandbox was detected. /usr/bin/nslookup will run without any additional sandboxing features net.c:137:try_proto(): socket(): Operation not supported (95) ;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable. ;; no servers could be reached ;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable. ;; no servers could be reached ;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable. ;; no servers could be reached Parent is shutting down, bye... ``` ### Environment - Name/version/arch of the Linux kernel (`uname -srm`): Linux 6.14.0-33-generic x86_64 - Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Ubuntu 24.04.3 LTS - Version of Firejail (`firejail --version`): firejail version 0.9.72 ### Checklist  - [X] The issues is caused by firejail (i.e. running the program by path (e.g. `/usr/bin/vlc`) "fixes" it). - [X] I can reproduce the issue without custom modifications (e.g. globals.local). Relates to: * #6931