Project Number Date
test_Tails_ISO_stable-flatpak 18 15 Sep 2026, 19:53

Feature Report

Steps Scenarios Features
Feature Passed Failed Skipped Pending Undefined Total Passed Failed Total Duration Status
The Tor enforcement is effective 37 1 1 0 0 39 7 1 8 1:36.099 Failed
Tags: @product
Feature The Tor enforcement is effective
As a Tails user I want all direct Internet connections I do by mistake or applications do by misconfiguration or buggy leaks to be blocked And as a Tails developer I want to ensure that the automated test suite detects firewall leaks reliably
Tags: @product
9.352
Before features/support/hooks.rb:274 0.000
Before features/support/hooks.rb:281 0.004
Given I have started Tails from DVD and logged in and the network is connected 9.104
Then the firewall's policy is to drop all IPv4 traffic 0.040
And the firewall is configured to only allow the clearnet and debian-tor users to connect directly to the Internet over IPv4 0.103
And the firewall's NAT rules only redirect traffic for the Unsafe Browser, Tor's TransPort, and DNSPort 0.055
And the firewall is configured to block all external IPv6 traffic 0.049
After features/support/hooks.rb:339 0.769
After features/support/hooks.rb:108 0.000
Tags: @product @doc
19.523
Before features/support/hooks.rb:274 0.000
Before features/support/hooks.rb:281 0.004
Given I have started Tails from DVD and logged in and the network is connected 8.368
And I capture all network traffic 0.004
When I successfully start the Unsafe Browser 3.630
And I open the Tails homepage in the Unsafe Browser 6.937
And the Tails homepage loads in the Unsafe Browser 0.427
Then the firewall leak detector has detected leaks 0.154
After features/support/hooks.rb:339 0.613
After features/support/hooks.rb:108 0.049
Tags: @product
8.387
Scenario Anti test: Detecting TCP leaks of DNS lookups with the firewall leak detector
Before features/support/hooks.rb:274 0.000
Before features/support/hooks.rb:281 0.003
Steps
Given I have started Tails from DVD and logged in and the network is connected 8.192
And I capture all network traffic 0.004
And I disable Tails' firewall 0.092
When I do a TCP DNS lookup of "torproject.org" 0.097
Failed to resolve torproject.org:
;; communications error to 9.9.9.9#53: connection reset
;; communications error to 9.9.9.9#53: connection reset
;; no servers could be reached
.
<false> is not true. (Test::Unit::AssertionFailedError)
./features/step_definitions/firewall_leaks.rb:22:in `/^I do a TCP DNS lookup of "(.*?)"$/'
features/tor_enforcement.feature:28:in `When I do a TCP DNS lookup of "torproject.org"'
Then the firewall leak detector has detected leaks 0.000
After features/support/hooks.rb:339 4.835

SCENARIO FAILED: 'Anti test: Detecting TCP leaks of DNS lookups with the firewall leak detector' (at time 03:20:24)

Boot log: https://jenkins.tails.net/job/test_Tails_ISO_stable-flatpak/18/artifact/build-artifacts/03:20:24_Anti_test:_Detecting_TCP_leaks_of_DNS_lookups_with_the_firewall_leak_detector.file_content_var_log_boot.log

Screenshot: https://jenkins.tails.net/job/test_Tails_ISO_stable-flatpak/18/artifact/build-artifacts/03:20:24_Anti_test:_Detecting_TCP_leaks_of_DNS_lookups_with_the_firewall_leak_detector.png

Video: https://jenkins.tails.net/job/test_Tails_ISO_stable-flatpak/18/artifact/build-artifacts/03:20:24_Anti_test:_Detecting_TCP_leaks_of_DNS_lookups_with_the_firewall_leak_detector.mkv

Systemd journal: https://jenkins.tails.net/job/test_Tails_ISO_stable-flatpak/18/artifact/build-artifacts/03:20:24_Anti_test:_Detecting_TCP_leaks_of_DNS_lookups_with_the_firewall_leak_detector.journal

After features/support/hooks.rb:108 0.048
Tags: @product
8.714
Before features/support/hooks.rb:274 0.000
Before features/support/hooks.rb:281 0.003
Given I have started Tails from DVD and logged in and the network is connected 8.368
And I capture all network traffic 0.006
And I disable Tails' firewall 0.099
When I do a UDP DNS lookup of "torproject.org" 0.103
Then the firewall leak detector has detected leaks 0.135
After features/support/hooks.rb:339 0.918
After features/support/hooks.rb:108 0.047
Tags: @product
12.368
Before features/support/hooks.rb:274 0.000
Before features/support/hooks.rb:281 0.003
Given I have started Tails from DVD and logged in and the network is connected 8.104
And I capture all network traffic 0.004
And I disable Tails' firewall 0.090
When I send some ICMP pings 4.060
Then the firewall leak detector has detected leaks 0.108
After features/support/hooks.rb:339 0.724
After features/support/hooks.rb:108 0.027
8.372
Before features/support/hooks.rb:274 0.000
Before features/support/hooks.rb:281 0.003
Before features/support/hooks.rb:527 0.003
Given I have started Tails from DVD and logged in and the network is connected 8.125
When I open an untorified UDP connection to 1.2.3.4 on port 42 0.174
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.071
After features/support/hooks.rb:535 0.224
After features/support/hooks.rb:339 0.530
After features/support/hooks.rb:108 0.000
13.677
Before features/support/hooks.rb:274 0.000
Before features/support/hooks.rb:281 0.003
Before features/support/hooks.rb:527 0.002
Given I have started Tails from DVD and logged in and the network is connected 8.287
When I open an untorified ICMP connection to 1.2.3.4 5.312
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.077
After features/support/hooks.rb:535 0.219
After features/support/hooks.rb:339 0.738
After features/support/hooks.rb:108 0.000
Tags: @product
15.702
Before features/support/hooks.rb:274 0.000
Before features/support/hooks.rb:281 0.003
Given I have started Tails from DVD without network and logged in 6.249
And the system DNS is using the local DNS resolver 0.009
And the network is plugged 0.031
And I successfully configure Tor 9.406
Then the system DNS is still using the local DNS resolver 0.005
After features/support/hooks.rb:339 1.056
After features/support/hooks.rb:108 0.000