Project Number Date
test_Tails_ISO_devel 4269 09 Mar 2026, 13:55

Feature Report

Steps Scenarios Features
Feature Passed Failed Skipped Pending Undefined Total Passed Failed Total Duration Status
The Tor enforcement is effective 41 1 1 0 0 43 8 1 9 2:10.630 Failed
Tags: @product
Feature The Tor enforcement is effective
As a Tails user I want all direct Internet connections I do by mistake or applications do by misconfiguration or buggy leaks to be blocked And as a Tails developer I want to ensure that the automated test suite detects firewall leaks reliably
Tags: @product
10.386
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.017
Given I have started Tails from DVD and logged in and the network is connected 10.048
Then the firewall's policy is to drop all IPv4 traffic 0.071
And the firewall is configured to only allow the clearnet and debian-tor users to connect directly to the Internet over IPv4 0.155
And the firewall's NAT rules only redirect traffic for the Unsafe Browser, Tor's TransPort, and DNSPort 0.054
And the firewall is configured to block all external IPv6 traffic 0.055
After features/support/hooks.rb:331 0.871
After features/support/hooks.rb:100 0.000
Tags: @product @doc
24.804
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.005
Given I have started Tails from DVD and logged in and the network is connected 10.032
And I capture all network traffic 0.008
When I successfully start the Unsafe Browser 6.770
And I open the Tails homepage in the Unsafe Browser 7.255
And the Tails homepage loads in the Unsafe Browser 0.333
Then the firewall leak detector has detected leaks 0.403
After features/support/hooks.rb:331 0.984
After features/support/hooks.rb:100 0.054
Tags: @product
15.166
Scenario Anti test: Detecting TCP leaks of DNS lookups with the firewall leak detector
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.003
Steps
Given I have started Tails from DVD and logged in and the network is connected 10.030
And I capture all network traffic 0.004
And I disable Tails' firewall 0.112
When I do a TCP DNS lookup of "torproject.org" 5.019
Failed to resolve torproject.org:
;; communications error to 9.9.9.9#53: end of file
;; communications error to 9.9.9.9#53: end of file
;; no servers could be reached
.
<false> is not true. (Test::Unit::AssertionFailedError)
./features/step_definitions/firewall_leaks.rb:22:in `/^I do a TCP DNS lookup of "(.*?)"$/'
features/tor_enforcement.feature:28:in `When I do a TCP DNS lookup of "torproject.org"'
Then the firewall leak detector has detected leaks 0.000
After features/support/hooks.rb:331 4.673

SCENARIO FAILED: 'Anti test: Detecting TCP leaks of DNS lookups with the firewall leak detector' (at time 03:04:01)

Boot log: https://jenkins.tails.boum.org/job/test_Tails_ISO_devel/4269/artifact/build-artifacts/03:04:01_Anti_test:_Detecting_TCP_leaks_of_DNS_lookups_with_the_firewall_leak_detector.file_content_var_log_boot.log

Screenshot: https://jenkins.tails.boum.org/job/test_Tails_ISO_devel/4269/artifact/build-artifacts/03:04:01_Anti_test:_Detecting_TCP_leaks_of_DNS_lookups_with_the_firewall_leak_detector.png

Video: https://jenkins.tails.boum.org/job/test_Tails_ISO_devel/4269/artifact/build-artifacts/03:04:01_Anti_test:_Detecting_TCP_leaks_of_DNS_lookups_with_the_firewall_leak_detector.mkv

Systemd journal: https://jenkins.tails.boum.org/job/test_Tails_ISO_devel/4269/artifact/build-artifacts/03:04:01_Anti_test:_Detecting_TCP_leaks_of_DNS_lookups_with_the_firewall_leak_detector.journal

After features/support/hooks.rb:100 0.039
Tags: @product
10.272
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.003
Given I have started Tails from DVD and logged in and the network is connected 9.879
And I capture all network traffic 0.006
And I disable Tails' firewall 0.137
When I do a UDP DNS lookup of "torproject.org" 0.213
Then the firewall leak detector has detected leaks 0.034
After features/support/hooks.rb:331 0.875
After features/support/hooks.rb:100 0.035
Tags: @product
14.544
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.003
Given I have started Tails from DVD and logged in and the network is connected 10.288
And I capture all network traffic 0.004
And I disable Tails' firewall 0.115
When I send some ICMP pings 4.092
Then the firewall leak detector has detected leaks 0.043
After features/support/hooks.rb:331 0.613
After features/support/hooks.rb:100 0.072
11.260
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.003
Before features/support/hooks.rb:519 0.003
Given I have started Tails from DVD and logged in and the network is connected 9.861
When I open an untorified TCP connection to 1.2.3.4 on port 42 1.316
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.083
After features/support/hooks.rb:527 0.170
After features/support/hooks.rb:331 0.796
After features/support/hooks.rb:100 0.000
11.306
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.013
Before features/support/hooks.rb:519 0.014
Given I have started Tails from DVD and logged in and the network is connected 9.956
When I open an untorified UDP connection to 1.2.3.4 on port 42 1.281
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.068
After features/support/hooks.rb:527 0.177
After features/support/hooks.rb:331 0.719
After features/support/hooks.rb:100 0.000
15.602
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.003
Before features/support/hooks.rb:519 0.001
Given I have started Tails from DVD and logged in and the network is connected 10.126
When I open an untorified ICMP connection to 1.2.3.4 5.392
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.083
After features/support/hooks.rb:527 0.154
After features/support/hooks.rb:331 0.940
After features/support/hooks.rb:100 0.000
Tags: @product
17.287
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.004
Given I have started Tails from DVD without network and logged in 6.893
And the system DNS is using the local DNS resolver 0.005
And the network is plugged 0.026
And I successfully configure Tor 10.356
Then the system DNS is still using the local DNS resolver 0.005
After features/support/hooks.rb:331 0.938
After features/support/hooks.rb:100 0.000