I have this config: # grep ^[a-zA-Z] /etc/dnsmasq.conf domain-needed no-resolv user=dnsmasq group=nogroup listen-address=127.0.0.1 conf-dir=/etc/dnsmasq.d/,*.conf Shouldn't this be enough to make dnsmasq listen only on 127.0.0.1 ? Yet what I see is this: # ss -ltn State Recv-Q Send-Q Local Address:Port Peer Address:Port LISTEN 0 5 0.0.0.0:873 0.0.0.0:* LISTEN 0 80 127.0.0.1:3306 0.0.0.0:* LISTEN 0 32 0.0.0.0:53 0.0.0.0:* LISTEN 0 100 127.0.0.1:25 0.0.0.0:* LISTEN 0 128 0.0.0.0:31577 0.0.0.0:* LISTEN 0 5 [::]:873 [::]:* LISTEN 0 32 [::]:53 [::]:* LISTEN 0 100 [::1]:25 [::]:* LISTEN 0 128 [::]:31577 [::]:* -- Per Jessen, Zürich (8.5°C) http://www.dns24.ch/ - free dynamic DNS, made in Switzerland. -- To unsubscribe, e-mail: opensuse+unsubscribe@opensuse.org To contact the owner, e-mail: opensuse+owner@opensuse.org