Project Number Date
test_Tails_ISO_20297-debug-proxy-refusing-connections 116 08 Jul 2025, 21:50

Feature Report

Steps Scenarios Features
Feature Passed Failed Skipped Pending Undefined Total Passed Failed Total Duration Status
The Tor enforcement is effective 36 2 5 0 0 43 7 2 9 9:13.722 Failed
Tags: @product
Feature The Tor enforcement is effective
As a Tails user I want all direct Internet connections I do by mistake or applications do by misconfiguration or buggy leaks to be blocked And as a Tails developer I want to ensure that the automated test suite detects firewall leaks reliably
Tags: @product
1:14.208
Scenario The firewall configuration is very restrictive
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.003
Steps
Given I have started Tails from DVD and logged in and the network is connected 1:14.208
Failed 
Failed to restore snapshot (RuntimeError)
./features/step_definitions/common_steps.rb:89:in `rescue in post_snapshot_restore_hook'
./features/step_definitions/common_steps.rb:72:in `post_snapshot_restore_hook'
./features/step_definitions/snapshots.rb:167:in `reach_checkpoint'
./features/step_definitions/common_steps.rb:95:in `rescue in post_snapshot_restore_hook'
./features/step_definitions/common_steps.rb:72:in `post_snapshot_restore_hook'
./features/step_definitions/snapshots.rb:167:in `reach_checkpoint'
./features/step_definitions/common_steps.rb:95:in `rescue in post_snapshot_restore_hook'
./features/step_definitions/common_steps.rb:72:in `post_snapshot_restore_hook'
./features/step_definitions/snapshots.rb:167:in `reach_checkpoint'
./features/step_definitions/common_steps.rb:95:in `rescue in post_snapshot_restore_hook'
./features/step_definitions/common_steps.rb:72:in `post_snapshot_restore_hook'
./features/step_definitions/snapshots.rb:167:in `reach_checkpoint'
./features/step_definitions/snapshots.rb:173:in `/^I\ have\ started\ Tails\ from\ DVD\ and\ logged\ in\ and\ the\ network\ is\ connected$/'
features/tor_enforcement.feature:9:in `Given I have started Tails from DVD and logged in and the network is connected'
Then the firewall's policy is to drop all IPv4 traffic 0.000
And the firewall is configured to only allow the clearnet and debian-tor users to connect directly to the Internet over IPv4 0.000
And the firewall's NAT rules only redirect traffic for the Unsafe Browser, Tor's TransPort, and DNSPort 0.000
And the firewall is configured to block all external IPv6 traffic 0.000
After features/support/hooks.rb:335 6.009 
SCENARIO FAILED: 'The firewall configuration is very restrictive' (at time 06:39:26)
Boot log: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/116/artifact/build-artifacts/06:39:26_The_firewall_configuration_is_very_restrictive.file_content_var_log_boot.log
Screenshot: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/116/artifact/build-artifacts/06:39:26_The_firewall_configuration_is_very_restrictive.png
Video: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/116/artifact/build-artifacts/06:39:26_The_firewall_configuration_is_very_restrictive.mkv
Systemd journal: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/116/artifact/build-artifacts/06:39:26_The_firewall_configuration_is_very_restrictive.journal
After features/support/hooks.rb:105 0.000
Tags: @product
2:38.771
Scenario Anti test: Detecting TCP leaks from the Unsafe Browser with the firewall leak detector
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.008
Steps
Given I have started Tails from DVD and logged in and the network is connected 39.540
And I capture all network traffic 0.013
When I successfully start the Unsafe Browser 38.140
And I open the Tails homepage in the Unsafe Browser 21.025
And the Tails homepage loads in the Unsafe Browser 1:0.052
cannot 
cannot find TailsHomepage.png on the screen (FindFailed)
./features/support/helpers/screen.rb:181:in `rescue in wait'
./features/support/helpers/screen.rb:165:in `wait'
./features/step_definitions/browser.rb:316:in `/^the Tails homepage loads in the Unsafe Browser$/'
features/tor_enforcement.feature:20:in `And the Tails homepage loads in the Unsafe Browser'
Then the firewall leak detector has detected leaks 0.000
After features/support/hooks.rb:335 8.723 
SCENARIO FAILED: 'Anti test: Detecting TCP leaks from the Unsafe Browser with the firewall leak detector' (at time 06:42:11)
Boot log: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/116/artifact/build-artifacts/06:42:11_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.file_content_var_log_boot.log
Screenshot: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/116/artifact/build-artifacts/06:42:11_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.png
Video: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/116/artifact/build-artifacts/06:42:11_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.mkv
Systemd journal: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/116/artifact/build-artifacts/06:42:11_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.journal
After features/support/hooks.rb:105 0.038
Tags: @product
29.861
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.074
Given I have started Tails from DVD and logged in and the network is connected 28.107
And I capture all network traffic 0.062
And I disable Tails' firewall 0.551
When I do a TCP DNS lookup of "torproject.org" 0.986
Then the firewall leak detector has detected leaks 0.153
After features/support/hooks.rb:335 0.761
After features/support/hooks.rb:105 0.051
Tags: @product
59.091
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.003
Given I have started Tails from DVD and logged in and the network is connected 57.579
And I capture all network traffic 0.015
And I disable Tails' firewall 0.490
When I do a UDP DNS lookup of "torproject.org" 0.839
Then the firewall leak detector has detected leaks 0.166
After features/support/hooks.rb:335 1.014
After features/support/hooks.rb:105 0.069
Tags: @product
50.583
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.005
Given I have started Tails from DVD and logged in and the network is connected 40.905
And I capture all network traffic 0.008
And I disable Tails' firewall 0.474
When I send some ICMP pings 4.288
Then the firewall leak detector has detected leaks 4.906
After features/support/hooks.rb:335 4.634
After features/support/hooks.rb:105 0.046
Tags: @product @check_tor_leaks
27.044
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.034
Before features/support/hooks.rb:512 0.027
Given I have started Tails from DVD and logged in and the network is connected 25.431
When I open an untorified TCP connection to 1.2.3.4 on port 42 1.427
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.185
After features/support/hooks.rb:520 0.329
After features/support/hooks.rb:335 0.939
After features/support/hooks.rb:105 0.000
Tags: @product @check_tor_leaks
35.746
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.002
Before features/support/hooks.rb:512 0.003
Given I have started Tails from DVD and logged in and the network is connected 30.291
When I open an untorified UDP connection to 1.2.3.4 on port 42 5.379
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.075
After features/support/hooks.rb:520 0.301
After features/support/hooks.rb:335 0.669
After features/support/hooks.rb:105 0.000
Tags: @product @check_tor_leaks
1:3.246
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.003
Before features/support/hooks.rb:512 0.004
Given I have started Tails from DVD and logged in and the network is connected 57.549
When I open an untorified ICMP connection to 1.2.3.4 5.571
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.125
After features/support/hooks.rb:520 0.468
After features/support/hooks.rb:335 0.847
After features/support/hooks.rb:105 0.000
Tags: @product
55.168
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.004
Given I have started Tails from DVD without network and logged in 20.869
And the system DNS is using the local DNS resolver 1.184
And the network is plugged 5.465
And I successfully configure Tor 27.630
Then the system DNS is still using the local DNS resolver 0.018
After features/support/hooks.rb:335 0.764
After features/support/hooks.rb:105 0.000