Project Number Date
test_Tails_ISO_20297-debug-proxy-refusing-connections 109 02 Jul 2025, 20:24

Feature Report

Steps Scenarios Features
Feature Passed Failed Skipped Pending Undefined Total Passed Failed Total Duration Status
The Tor enforcement is effective 41 1 1 0 0 43 8 1 9 4:29.597 Failed
Tags: @product
Feature The Tor enforcement is effective
As a Tails user I want all direct Internet connections I do by mistake or applications do by misconfiguration or buggy leaks to be blocked And as a Tails developer I want to ensure that the automated test suite detects firewall leaks reliably
Tags: @product
18.375
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.008
Given I have started Tails from DVD and logged in and the network is connected 17.631
Then the firewall's policy is to drop all IPv4 traffic 0.196
And the firewall is configured to only allow the clearnet and debian-tor users to connect directly to the Internet over IPv4 0.344
And the firewall's NAT rules only redirect traffic for the Unsafe Browser, Tor's TransPort, and DNSPort 0.084
And the firewall is configured to block all external IPv6 traffic 0.119
After features/support/hooks.rb:335 0.835
After features/support/hooks.rb:105 0.000
Tags: @product
1:50.136
Scenario Anti test: Detecting TCP leaks from the Unsafe Browser with the firewall leak detector
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.006
Steps
Given I have started Tails from DVD and logged in and the network is connected 14.136
And I capture all network traffic 0.016
When I successfully start the Unsafe Browser 24.566
And I open the Tails homepage in the Unsafe Browser 11.373
And the Tails homepage loads in the Unsafe Browser 1:0.043
cannot find TailsHomepage.png on the screen (FindFailed)
./features/support/helpers/screen.rb:181:in `rescue in wait'
./features/support/helpers/screen.rb:165:in `wait'
./features/step_definitions/browser.rb:316:in `/^the Tails homepage loads in the Unsafe Browser$/'
features/tor_enforcement.feature:20:in `And the Tails homepage loads in the Unsafe Browser'
Then the firewall leak detector has detected leaks 0.000
After features/support/hooks.rb:335 7.051

SCENARIO FAILED: 'Anti test: Detecting TCP leaks from the Unsafe Browser with the firewall leak detector' (at time 05:39:31)

Boot log: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/109/artifact/build-artifacts/05:39:31_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.file_content_var_log_boot.log

Screenshot: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/109/artifact/build-artifacts/05:39:31_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.png

Video: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/109/artifact/build-artifacts/05:39:31_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.mkv

Systemd journal: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/109/artifact/build-artifacts/05:39:31_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.journal

After features/support/hooks.rb:105 0.047
Tags: @product
17.968
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.007
Given I have started Tails from DVD and logged in and the network is connected 15.309
And I capture all network traffic 0.172
And I disable Tails' firewall 0.730
When I do a TCP DNS lookup of "torproject.org" 1.099
Then the firewall leak detector has detected leaks 0.657
After features/support/hooks.rb:335 1.271
After features/support/hooks.rb:105 0.047
Tags: @product
17.601
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.055
Given I have started Tails from DVD and logged in and the network is connected 14.022
And I capture all network traffic 0.066
And I disable Tails' firewall 0.554
When I do a UDP DNS lookup of "torproject.org" 2.265
Then the firewall leak detector has detected leaks 0.693
After features/support/hooks.rb:335 0.863
After features/support/hooks.rb:105 0.043
Tags: @product
21.534
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.029
Given I have started Tails from DVD and logged in and the network is connected 15.253
And I capture all network traffic 0.661
And I disable Tails' firewall 1.170
When I send some ICMP pings 4.309
Then the firewall leak detector has detected leaks 0.138
After features/support/hooks.rb:335 1.092
After features/support/hooks.rb:105 0.064
17.274
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.056
Before features/support/hooks.rb:512 0.011
Given I have started Tails from DVD and logged in and the network is connected 14.170
When I open an untorified TCP connection to 1.2.3.4 on port 42 3.014
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.088
After features/support/hooks.rb:520 0.299
After features/support/hooks.rb:335 1.792
After features/support/hooks.rb:105 0.000
17.371
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.024
Before features/support/hooks.rb:512 0.021
Given I have started Tails from DVD and logged in and the network is connected 14.363
When I open an untorified UDP connection to 1.2.3.4 on port 42 2.847
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.159
After features/support/hooks.rb:520 0.509
After features/support/hooks.rb:335 0.709
After features/support/hooks.rb:105 0.000
21.501
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.013
Before features/support/hooks.rb:512 0.008
Given I have started Tails from DVD and logged in and the network is connected 14.710
When I open an untorified ICMP connection to 1.2.3.4 6.696
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.094
After features/support/hooks.rb:520 0.260
After features/support/hooks.rb:335 0.843
After features/support/hooks.rb:105 0.000
Tags: @product
27.832
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.011
Given I have started Tails from DVD without network and logged in 9.182
And the system DNS is using the local DNS resolver 0.020
And the network is plugged 0.074
And I successfully configure Tor 18.461
Then the system DNS is still using the local DNS resolver 0.092
After features/support/hooks.rb:335 1.022
After features/support/hooks.rb:105 0.000