From: Nicki Křížek Date: Thu, 23 Jul 2026 16:37:02 +0000 (+0000) Subject: Disable IPv6 listening explicitly on v4-only instances X-Git-Url: http://git.ipfire.org/gitweb.cgi?a=commitdiff_plain;h=291268b8778519a28b36ea79629b2f819278aaf0;p=thirdparty%2Fbind9.git Disable IPv6 listening explicitly on v4-only instances Instances without a listen-on-v6 statement listened on every IPv6 address at the assigned port. No test relies on it, nor could it, as all of the tests instances will be listening on all the IPv6 addresses, making it unpredictable which packet would arrive to which instance. The configuration makes no sense and is most likely a copy-paste error. Explicitly disable IPv6 on IPv4-only test named instances. Assisted-by: Claude:claude-fable-5 --- diff --git a/bin/tests/system/cap_glues/ns1/named.conf.j2 b/bin/tests/system/cap_glues/ns1/named.conf.j2 index ef0f9a93838..0cc901254d0 100644 --- a/bin/tests/system/cap_glues/ns1/named.conf.j2 +++ b/bin/tests/system/cap_glues/ns1/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/cap_glues/ns2/named.conf.j2 b/bin/tests/system/cap_glues/ns2/named.conf.j2 index 958f0a2f66c..6f5986d7f0c 100644 --- a/bin/tests/system/cap_glues/ns2/named.conf.j2 +++ b/bin/tests/system/cap_glues/ns2/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/cap_glues/ns3/named.conf.j2 b/bin/tests/system/cap_glues/ns3/named.conf.j2 index f5863da1a25..3ccb80b195b 100644 --- a/bin/tests/system/cap_glues/ns3/named.conf.j2 +++ b/bin/tests/system/cap_glues/ns3/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.3; }; + listen-on-v6 { none; }; recursion yes; dnssec-validation no; }; diff --git a/bin/tests/system/delegation_ttl/ns1/named.conf.j2 b/bin/tests/system/delegation_ttl/ns1/named.conf.j2 index ef0f9a93838..0cc901254d0 100644 --- a/bin/tests/system/delegation_ttl/ns1/named.conf.j2 +++ b/bin/tests/system/delegation_ttl/ns1/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/delegation_ttl/ns2/named.conf.j2 b/bin/tests/system/delegation_ttl/ns2/named.conf.j2 index b425652cde5..e0e6ec90efd 100644 --- a/bin/tests/system/delegation_ttl/ns2/named.conf.j2 +++ b/bin/tests/system/delegation_ttl/ns2/named.conf.j2 @@ -8,6 +8,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; recursion yes; dnssec-validation no; {% if minttl != None %} diff --git a/bin/tests/system/delegdb_flush/ns1/named.conf.j2 b/bin/tests/system/delegdb_flush/ns1/named.conf.j2 index 6db5eb785be..0e2f8eeac65 100644 --- a/bin/tests/system/delegdb_flush/ns1/named.conf.j2 +++ b/bin/tests/system/delegdb_flush/ns1/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; max-cache-size 8000; }; diff --git a/bin/tests/system/ede24/ns1/named.conf.j2 b/bin/tests/system/ede24/ns1/named.conf.j2 index 7b530d3174e..5f07e5b810f 100644 --- a/bin/tests/system/ede24/ns1/named.conf.j2 +++ b/bin/tests/system/ede24/ns1/named.conf.j2 @@ -2,6 +2,7 @@ options { port @PORT@; query-source address 10.53.0.1; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; transfer-source 10.53.0.1; pid-file "named.pid"; recursion no; diff --git a/bin/tests/system/ede24/ns2/named.conf.j2 b/bin/tests/system/ede24/ns2/named.conf.j2 index ad1fac2f654..27e3b71296f 100644 --- a/bin/tests/system/ede24/ns2/named.conf.j2 +++ b/bin/tests/system/ede24/ns2/named.conf.j2 @@ -3,6 +3,7 @@ options { query-source address 10.53.0.2; notify-source 10.53.0.2; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; transfer-source 10.53.0.2; pid-file "named.pid"; recursion no; diff --git a/bin/tests/system/expiredglue/ns1/named.conf.j2 b/bin/tests/system/expiredglue/ns1/named.conf.j2 index b81b2a50556..42dba75f869 100644 --- a/bin/tests/system/expiredglue/ns1/named.conf.j2 +++ b/bin/tests/system/expiredglue/ns1/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/expiredglue/ns2/named.conf.j2 b/bin/tests/system/expiredglue/ns2/named.conf.j2 index af32dc46fd3..d0b75bf8657 100644 --- a/bin/tests/system/expiredglue/ns2/named.conf.j2 +++ b/bin/tests/system/expiredglue/ns2/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/expiredglue/ns3/named.conf.j2 b/bin/tests/system/expiredglue/ns3/named.conf.j2 index 42408a9d6a2..f83df484965 100644 --- a/bin/tests/system/expiredglue/ns3/named.conf.j2 +++ b/bin/tests/system/expiredglue/ns3/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.3; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/expiredglue/ns4/named.conf.j2 b/bin/tests/system/expiredglue/ns4/named.conf.j2 index 88729c56598..8cadbee4b02 100644 --- a/bin/tests/system/expiredglue/ns4/named.conf.j2 +++ b/bin/tests/system/expiredglue/ns4/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.4; }; + listen-on-v6 { none; }; recursion yes; dnssec-validation no; }; diff --git a/bin/tests/system/hooks/ns1/named.conf.j2 b/bin/tests/system/hooks/ns1/named.conf.j2 index 65d0dc2334d..50388ca2df5 100644 --- a/bin/tests/system/hooks/ns1/named.conf.j2 +++ b/bin/tests/system/hooks/ns1/named.conf.j2 @@ -7,6 +7,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; notify yes; diff --git a/bin/tests/system/hooks/ns2/named.conf.j2 b/bin/tests/system/hooks/ns2/named.conf.j2 index 68e885b5bc4..50342376993 100644 --- a/bin/tests/system/hooks/ns2/named.conf.j2 +++ b/bin/tests/system/hooks/ns2/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; recursion no; dnssec-validation yes; notify yes; diff --git a/bin/tests/system/nslimit_outdomain/ns1/named.conf.j2 b/bin/tests/system/nslimit_outdomain/ns1/named.conf.j2 index 987693a98b6..a14fedbb4e7 100644 --- a/bin/tests/system/nslimit_outdomain/ns1/named.conf.j2 +++ b/bin/tests/system/nslimit_outdomain/ns1/named.conf.j2 @@ -18,6 +18,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/nslimit_outdomain/ns4/named.conf.j2 b/bin/tests/system/nslimit_outdomain/ns4/named.conf.j2 index 543c5a08ef6..05d992cc739 100644 --- a/bin/tests/system/nslimit_outdomain/ns4/named.conf.j2 +++ b/bin/tests/system/nslimit_outdomain/ns4/named.conf.j2 @@ -19,6 +19,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.4; }; + listen-on-v6 { none; }; recursion yes; dnssec-validation no; dnstap { resolver query; }; diff --git a/bin/tests/system/nsprocessinglimit/ns1/named.conf.j2 b/bin/tests/system/nsprocessinglimit/ns1/named.conf.j2 index b81b2a50556..42dba75f869 100644 --- a/bin/tests/system/nsprocessinglimit/ns1/named.conf.j2 +++ b/bin/tests/system/nsprocessinglimit/ns1/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/nsprocessinglimit/ns2/named.conf.j2 b/bin/tests/system/nsprocessinglimit/ns2/named.conf.j2 index af32dc46fd3..d0b75bf8657 100644 --- a/bin/tests/system/nsprocessinglimit/ns2/named.conf.j2 +++ b/bin/tests/system/nsprocessinglimit/ns2/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/nsprocessinglimit/ns3/named.conf.j2 b/bin/tests/system/nsprocessinglimit/ns3/named.conf.j2 index 7a1cc54d9ee..bca15ee2ee8 100644 --- a/bin/tests/system/nsprocessinglimit/ns3/named.conf.j2 +++ b/bin/tests/system/nsprocessinglimit/ns3/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.3; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/nsprocessinglimit/ns4/named.conf.j2 b/bin/tests/system/nsprocessinglimit/ns4/named.conf.j2 index 4885b240d36..8e98fcc2ecf 100644 --- a/bin/tests/system/nsprocessinglimit/ns4/named.conf.j2 +++ b/bin/tests/system/nsprocessinglimit/ns4/named.conf.j2 @@ -7,6 +7,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.4; }; + listen-on-v6 { none; }; recursion yes; dnssec-validation no; dnstap { resolver query; }; diff --git a/bin/tests/system/redirect/ns10/named.conf.j2 b/bin/tests/system/redirect/ns10/named.conf.j2 index d33395ae883..37e036c5d08 100644 --- a/bin/tests/system/redirect/ns10/named.conf.j2 +++ b/bin/tests/system/redirect/ns10/named.conf.j2 @@ -8,6 +8,7 @@ options { transfer-source 10.53.0.10; port @PORT@; listen-on { 10.53.0.10; }; + listen-on-v6 { none; }; pid-file "named.pid"; nxdomain-redirect redirect; dnssec-validation yes; diff --git a/bin/tests/system/redirect/ns5/named.conf.j2 b/bin/tests/system/redirect/ns5/named.conf.j2 index 60b7a17f49a..2af413e3f74 100644 --- a/bin/tests/system/redirect/ns5/named.conf.j2 +++ b/bin/tests/system/redirect/ns5/named.conf.j2 @@ -6,6 +6,7 @@ options { transfer-source 10.53.0.5; port @PORT@; listen-on { 10.53.0.5; }; + listen-on-v6 { none; }; pid-file "named.pid"; nxdomain-redirect signed; dnssec-validation no; diff --git a/bin/tests/system/redirect/ns6/named.conf.j2 b/bin/tests/system/redirect/ns6/named.conf.j2 index 7f99d5567de..618b89f0249 100644 --- a/bin/tests/system/redirect/ns6/named.conf.j2 +++ b/bin/tests/system/redirect/ns6/named.conf.j2 @@ -6,6 +6,7 @@ options { transfer-source 10.53.0.6; port @PORT@; listen-on { 10.53.0.6; }; + listen-on-v6 { none; }; pid-file "named.pid"; nxdomain-redirect unsigned; dnssec-validation no; diff --git a/bin/tests/system/redirect/ns7/named.conf.j2 b/bin/tests/system/redirect/ns7/named.conf.j2 index 46af5b6bd02..b5e2aaef382 100644 --- a/bin/tests/system/redirect/ns7/named.conf.j2 +++ b/bin/tests/system/redirect/ns7/named.conf.j2 @@ -6,6 +6,7 @@ options { transfer-source 10.53.0.7; port @PORT@; listen-on { 10.53.0.7; }; + listen-on-v6 { none; }; pid-file "named.pid"; nxdomain-redirect redirect; dnssec-validation no; diff --git a/bin/tests/system/redirect/ns8/named.conf.j2 b/bin/tests/system/redirect/ns8/named.conf.j2 index 3ba4abf8042..4c67fb8b5e8 100644 --- a/bin/tests/system/redirect/ns8/named.conf.j2 +++ b/bin/tests/system/redirect/ns8/named.conf.j2 @@ -6,6 +6,7 @@ options { transfer-source 10.53.0.8; port @PORT@; listen-on { 10.53.0.8; }; + listen-on-v6 { none; }; pid-file "named.pid"; nxdomain-redirect redirect; dnssec-validation no; diff --git a/bin/tests/system/redirect/ns9/named.conf.j2 b/bin/tests/system/redirect/ns9/named.conf.j2 index 0488abce1a9..11329fd04c8 100644 --- a/bin/tests/system/redirect/ns9/named.conf.j2 +++ b/bin/tests/system/redirect/ns9/named.conf.j2 @@ -7,6 +7,7 @@ options { transfer-source 10.53.0.9; port @PORT@; listen-on { 10.53.0.9; }; + listen-on-v6 { none; }; pid-file "named.pid"; dnssec-validation no; recursion no; diff --git a/bin/tests/system/rpzextra/ns2/named.conf.j2 b/bin/tests/system/rpzextra/ns2/named.conf.j2 index 2961b5185ed..f7ba0ec6183 100644 --- a/bin/tests/system/rpzextra/ns2/named.conf.j2 +++ b/bin/tests/system/rpzextra/ns2/named.conf.j2 @@ -6,6 +6,7 @@ options { transfer-source 10.53.0.2; port @PORT@; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; pid-file "named.pid"; notify no; dnssec-validation no; diff --git a/bin/tests/system/rpzextra/ns3/named.conf.j2 b/bin/tests/system/rpzextra/ns3/named.conf.j2 index 8ba631b798a..08723e4302d 100644 --- a/bin/tests/system/rpzextra/ns3/named.conf.j2 +++ b/bin/tests/system/rpzextra/ns3/named.conf.j2 @@ -6,6 +6,7 @@ options { transfer-source 10.53.0.3; port @PORT@; listen-on { 10.53.0.3; }; + listen-on-v6 { none; }; pid-file "named.pid"; notify no; dnssec-validation no; diff --git a/bin/tests/system/selfpointedglue/ns1/named.conf.j2 b/bin/tests/system/selfpointedglue/ns1/named.conf.j2 index 987693a98b6..a14fedbb4e7 100644 --- a/bin/tests/system/selfpointedglue/ns1/named.conf.j2 +++ b/bin/tests/system/selfpointedglue/ns1/named.conf.j2 @@ -18,6 +18,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/selfpointedglue/ns2/named.conf.j2 b/bin/tests/system/selfpointedglue/ns2/named.conf.j2 index 080731257f7..3ee7077ea07 100644 --- a/bin/tests/system/selfpointedglue/ns2/named.conf.j2 +++ b/bin/tests/system/selfpointedglue/ns2/named.conf.j2 @@ -18,6 +18,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; }; diff --git a/bin/tests/system/selfpointedglue/ns4/named.conf.j2 b/bin/tests/system/selfpointedglue/ns4/named.conf.j2 index 543c5a08ef6..05d992cc739 100644 --- a/bin/tests/system/selfpointedglue/ns4/named.conf.j2 +++ b/bin/tests/system/selfpointedglue/ns4/named.conf.j2 @@ -19,6 +19,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.4; }; + listen-on-v6 { none; }; recursion yes; dnssec-validation no; dnstap { resolver query; }; diff --git a/bin/tests/system/showconf/ns1/named.conf.j2 b/bin/tests/system/showconf/ns1/named.conf.j2 index 0b437d0eaeb..5d21133484e 100644 --- a/bin/tests/system/showconf/ns1/named.conf.j2 +++ b/bin/tests/system/showconf/ns1/named.conf.j2 @@ -5,6 +5,7 @@ options { port @PORT@; pid-file "named.pid"; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; recursion no; dnssec-validation no; notify yes; diff --git a/bin/tests/system/shutdown/ns1/named.conf.j2 b/bin/tests/system/shutdown/ns1/named.conf.j2 index 59639068183..49393e6f463 100644 --- a/bin/tests/system/shutdown/ns1/named.conf.j2 +++ b/bin/tests/system/shutdown/ns1/named.conf.j2 @@ -6,6 +6,7 @@ options { transfer-source 10.53.0.1; port @PORT@; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; pid-file "named.pid"; notify no; dnssec-validation no; diff --git a/bin/tests/system/shutdown/ns2/named.conf.j2 b/bin/tests/system/shutdown/ns2/named.conf.j2 index 7d4df6b77e0..dcc6824fe34 100644 --- a/bin/tests/system/shutdown/ns2/named.conf.j2 +++ b/bin/tests/system/shutdown/ns2/named.conf.j2 @@ -6,6 +6,7 @@ options { transfer-source 10.53.0.2; port @PORT@; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; pid-file "named.pid"; notify no; dnssec-validation no; diff --git a/bin/tests/system/xfer_servers_list/ns1/named.conf.j2 b/bin/tests/system/xfer_servers_list/ns1/named.conf.j2 index 4f1dbdc372d..71dd04a6c8c 100644 --- a/bin/tests/system/xfer_servers_list/ns1/named.conf.j2 +++ b/bin/tests/system/xfer_servers_list/ns1/named.conf.j2 @@ -2,6 +2,7 @@ options { port @PORT@; query-source address 10.53.0.1; listen-on { 10.53.0.1; }; + listen-on-v6 { none; }; transfer-source 10.53.0.1; pid-file "named.pid"; recursion no; diff --git a/bin/tests/system/xfer_servers_list/ns2/named.conf.j2 b/bin/tests/system/xfer_servers_list/ns2/named.conf.j2 index 9be27c0c7d8..0da1e0de29b 100644 --- a/bin/tests/system/xfer_servers_list/ns2/named.conf.j2 +++ b/bin/tests/system/xfer_servers_list/ns2/named.conf.j2 @@ -3,6 +3,7 @@ options { query-source address 10.53.0.2; notify-source 10.53.0.2; listen-on { 10.53.0.2; }; + listen-on-v6 { none; }; transfer-source 10.53.0.2; pid-file "named.pid"; recursion no; diff --git a/bin/tests/system/xfer_servers_list/ns3/named.conf.j2 b/bin/tests/system/xfer_servers_list/ns3/named.conf.j2 index 4e5b928c130..6d9cfee088d 100644 --- a/bin/tests/system/xfer_servers_list/ns3/named.conf.j2 +++ b/bin/tests/system/xfer_servers_list/ns3/named.conf.j2 @@ -3,6 +3,7 @@ options { query-source address 10.53.0.3; notify-source 10.53.0.3; listen-on { 10.53.0.3; }; + listen-on-v6 { none; }; transfer-source 10.53.0.3; pid-file "named.pid"; recursion no; diff --git a/bin/tests/system/xfer_servers_list/ns4/named.conf.j2 b/bin/tests/system/xfer_servers_list/ns4/named.conf.j2 index 6d7d29057b7..08fe9a2d09a 100644 --- a/bin/tests/system/xfer_servers_list/ns4/named.conf.j2 +++ b/bin/tests/system/xfer_servers_list/ns4/named.conf.j2 @@ -3,6 +3,7 @@ options { query-source address 10.53.0.4; notify-source 10.53.0.4; listen-on { 10.53.0.4; }; + listen-on-v6 { none; }; transfer-source 10.53.0.4; pid-file "named.pid"; recursion no;