IPV6 DNS: net.c:137:try_proto(): socket(): Operation not supported (95)

[pprocto]

Description

Describe the bug

Steps to Reproduce

Hello,

I would like to use an IPV6 DNS. I start this:

/bin/firejail \
  --noprofile \
  --protocol=inet,inet6 \
  --dns=2606:4700:4700::1111 \
  --net=wlp112s0 \
  --ignore=seccomp \
  nslookup -type=AAAA google.com

Where is the problem ?

Expected behavior

Accept to use the ipv6 DNS

Actual behavior

But I receive this error:

Parent pid 1662754, child pid 1662757

Interface        MAC                IP               Mask             Status
lo                                  127.0.0.1        255.0.0.0        UP    
eth0-1662754     94:e6:f7:83:a2:c5  192.168.0.195    255.255.255.0    UP    
Default gateway 192.168.0.254
DNS server 2606:4700:4700::1111

Child process initialized in 1082.32 ms
Warning: an existing sandbox was detected. /usr/bin/nslookup will run without any additional sandboxing features
net.c:137:try_proto(): socket(): Operation not supported (95)
;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable.
;; no servers could be reached
;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable.
;; no servers could be reached
;; UDP setup with 2606:4700:4700::1111#53(2606:4700:4700::1111) for google.com failed: network unreachable.
;; no servers could be reached


Parent is shutting down, bye...

Environment

• Name/version/arch of the Linux kernel (uname -srm): Linux 6.14.0-33-generic x86_64
• Name/version of the Linux distribution (e.g. "Ubuntu 20.04" or "Arch Linux"): Ubuntu 24.04.3 LTS
• Version of Firejail (firejail --version): firejail version 0.9.72

Checklist

• The issues is caused by firejail (i.e. running the program by path (e.g. /usr/bin/vlc) "fixes" it).
• I can reproduce the issue without custom modifications (e.g. globals.local).

Relates to:

• Cannot use IPV6 DNS #6931

[kmk3]

firejail version 0.9.72

Note that we do not maintain that version of firejail:

• https://github.com/netblue30/firejail/blob/master/SECURITY.md

Versions other than the latest usually have outdated profiles and may contain
bugs and security vulnerabilities that were fixed in later versions.

See also:

• https://github.com/netblue30/firejail#installing

What happens with the latest released version?