Project Number Date
test_Tails_ISO_20297-debug-proxy-refusing-connections 101 24 Jun 2025, 21:09

Feature Report

Steps Scenarios Features
Feature Passed Failed Skipped Pending Undefined Total Passed Failed Total Duration Status
The Tor enforcement is effective 38 1 4 0 0 43 8 1 9 7:21.800 Failed
Tags: @product
Feature The Tor enforcement is effective
As a Tails user I want all direct Internet connections I do by mistake or applications do by misconfiguration or buggy leaks to be blocked And as a Tails developer I want to ensure that the automated test suite detects firewall leaks reliably
Tags: @product
1:24.855
Scenario The firewall configuration is very restrictive
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.134
Steps
Given I have started Tails from DVD and logged in and the network is connected 1:24.855
Failed to restore snapshot (RuntimeError)
./features/step_definitions/common_steps.rb:89:in `rescue in post_snapshot_restore_hook'
./features/step_definitions/common_steps.rb:72:in `post_snapshot_restore_hook'
./features/step_definitions/snapshots.rb:167:in `reach_checkpoint'
./features/step_definitions/common_steps.rb:95:in `rescue in post_snapshot_restore_hook'
./features/step_definitions/common_steps.rb:72:in `post_snapshot_restore_hook'
./features/step_definitions/snapshots.rb:167:in `reach_checkpoint'
./features/step_definitions/common_steps.rb:95:in `rescue in post_snapshot_restore_hook'
./features/step_definitions/common_steps.rb:72:in `post_snapshot_restore_hook'
./features/step_definitions/snapshots.rb:167:in `reach_checkpoint'
./features/step_definitions/common_steps.rb:95:in `rescue in post_snapshot_restore_hook'
./features/step_definitions/common_steps.rb:72:in `post_snapshot_restore_hook'
./features/step_definitions/snapshots.rb:167:in `reach_checkpoint'
./features/step_definitions/snapshots.rb:173:in `/^I\ have\ started\ Tails\ from\ DVD\ and\ logged\ in\ and\ the\ network\ is\ connected$/'
features/tor_enforcement.feature:9:in `Given I have started Tails from DVD and logged in and the network is connected'
Then the firewall's policy is to drop all IPv4 traffic 0.000
And the firewall is configured to only allow the clearnet and debian-tor users to connect directly to the Internet over IPv4 0.000
And the firewall's NAT rules only redirect traffic for the Unsafe Browser, Tor's TransPort, and DNSPort 0.000
And the firewall is configured to block all external IPv6 traffic 0.000
After features/support/hooks.rb:335 6.710

SCENARIO FAILED: 'The firewall configuration is very restrictive' (at time 06:11:48)

Boot log: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/101/artifact/build-artifacts/06:11:48_The_firewall_configuration_is_very_restrictive.file_content_var_log_boot.log

Screenshot: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/101/artifact/build-artifacts/06:11:48_The_firewall_configuration_is_very_restrictive.png

Video: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/101/artifact/build-artifacts/06:11:48_The_firewall_configuration_is_very_restrictive.mkv

Systemd journal: https://jenkins.tails.boum.org/job/test_Tails_ISO_20297-debug-proxy-refusing-connections/101/artifact/build-artifacts/06:11:48_The_firewall_configuration_is_very_restrictive.journal

After features/support/hooks.rb:105 0.000
Tags: @product
2:0.975
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.012
Given I have started Tails from DVD and logged in and the network is connected 34.850
And I capture all network traffic 0.024
When I successfully start the Unsafe Browser 49.917
And I open the Tails homepage in the Unsafe Browser 34.048
And the Tails homepage loads in the Unsafe Browser 1.479
Then the firewall leak detector has detected leaks 0.654
After features/support/hooks.rb:335 11.039
After features/support/hooks.rb:105 0.043
Tags: @product
1:22.914
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.089
Given I have started Tails from DVD and logged in and the network is connected 1:21.968
And I capture all network traffic 0.006
And I disable Tails' firewall 0.268
When I do a TCP DNS lookup of "torproject.org" 0.536
Then the firewall leak detector has detected leaks 0.135
After features/support/hooks.rb:335 0.685
After features/support/hooks.rb:105 0.066
Tags: @product
19.467
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.005
Given I have started Tails from DVD and logged in and the network is connected 18.283
And I capture all network traffic 0.006
And I disable Tails' firewall 0.287
When I do a UDP DNS lookup of "torproject.org" 0.749
Then the firewall leak detector has detected leaks 0.140
After features/support/hooks.rb:335 0.888
After features/support/hooks.rb:105 0.059
Tags: @product
21.348
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.021
Given I have started Tails from DVD and logged in and the network is connected 16.848
And I capture all network traffic 0.005
And I disable Tails' firewall 0.238
When I send some ICMP pings 4.149
Then the firewall leak detector has detected leaks 0.107
After features/support/hooks.rb:335 0.806
After features/support/hooks.rb:105 0.048
18.682
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.015
Before features/support/hooks.rb:512 0.014
Given I have started Tails from DVD and logged in and the network is connected 17.012
When I open an untorified TCP connection to 1.2.3.4 on port 42 1.517
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.152
After features/support/hooks.rb:520 0.526
After features/support/hooks.rb:335 1.060
After features/support/hooks.rb:105 0.000
20.581
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.004
Before features/support/hooks.rb:512 0.004
Given I have started Tails from DVD and logged in and the network is connected 18.994
When I open an untorified UDP connection to 1.2.3.4 on port 42 1.512
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.075
After features/support/hooks.rb:520 0.256
After features/support/hooks.rb:335 0.936
After features/support/hooks.rb:105 0.000
26.261
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.007
Before features/support/hooks.rb:512 0.005
Given I have started Tails from DVD and logged in and the network is connected 20.193
When I open an untorified ICMP connection to 1.2.3.4 5.898
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.169
After features/support/hooks.rb:520 1.033
After features/support/hooks.rb:335 1.401
After features/support/hooks.rb:105 0.000
Tags: @product
46.712
Before features/support/hooks.rb:271 0.000
Before features/support/hooks.rb:278 0.061
Given I have started Tails from DVD without network and logged in 28.696
And the system DNS is using the local DNS resolver 0.041
And the network is plugged 0.192
And I successfully configure Tor 17.769
Then the system DNS is still using the local DNS resolver 0.012
After features/support/hooks.rb:335 1.056
After features/support/hooks.rb:105 0.000