Project Number Date
test_Tails_ISO_devel 3891 29 Jun 2025, 13:55

Feature Report

Steps Scenarios Features
Feature Passed Failed Skipped Pending Undefined Total Passed Failed Total Duration Status
The Tor enforcement is effective 41 1 1 0 0 43 8 1 9 4:8.978 Failed
Tags: @product
Feature The Tor enforcement is effective
As a Tails user I want all direct Internet connections I do by mistake or applications do by misconfiguration or buggy leaks to be blocked And as a Tails developer I want to ensure that the automated test suite detects firewall leaks reliably
Tags: @product
13.184
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.007
Given I have started Tails from DVD and logged in and the network is connected 12.580
Then the firewall's policy is to drop all IPv4 traffic 0.149
And the firewall is configured to only allow the clearnet and debian-tor users to connect directly to the Internet over IPv4 0.247
And the firewall's NAT rules only redirect traffic for the Unsafe Browser, Tor's TransPort, and DNSPort 0.091
And the firewall is configured to block all external IPv6 traffic 0.115
After features/support/hooks.rb:330 0.704
After features/support/hooks.rb:100 0.000
Tags: @product
1:45.927
Scenario Anti test: Detecting TCP leaks from the Unsafe Browser with the firewall leak detector
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.005
Steps
Given I have started Tails from DVD and logged in and the network is connected 12.644
And I capture all network traffic 0.007
When I successfully start the Unsafe Browser 22.665
And I open the Tails homepage in the Unsafe Browser 10.398
And the Tails homepage loads in the Unsafe Browser 1:0.211
cannot find TailsHomepage.png on the screen (FindFailed)
./features/support/helpers/screen.rb:181:in `rescue in wait'
./features/support/helpers/screen.rb:165:in `wait'
./features/step_definitions/browser.rb:316:in `/^the Tails homepage loads in the Unsafe Browser$/'
features/tor_enforcement.feature:20:in `And the Tails homepage loads in the Unsafe Browser'
Then the firewall leak detector has detected leaks 0.000
After features/support/hooks.rb:330 5.929

SCENARIO FAILED: 'Anti test: Detecting TCP leaks from the Unsafe Browser with the firewall leak detector' (at time 05:22:18)

Boot log: https://jenkins.tails.boum.org/job/test_Tails_ISO_devel/3891/artifact/build-artifacts/05:22:18_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.file_content_var_log_boot.log

Screenshot: https://jenkins.tails.boum.org/job/test_Tails_ISO_devel/3891/artifact/build-artifacts/05:22:18_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.png

Video: https://jenkins.tails.boum.org/job/test_Tails_ISO_devel/3891/artifact/build-artifacts/05:22:18_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.mkv

Systemd journal: https://jenkins.tails.boum.org/job/test_Tails_ISO_devel/3891/artifact/build-artifacts/05:22:18_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.journal

After features/support/hooks.rb:100 0.069
Tags: @product
14.148
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.007
Given I have started Tails from DVD and logged in and the network is connected 13.131
And I capture all network traffic 0.007
And I disable Tails' firewall 0.228
When I do a TCP DNS lookup of "torproject.org" 0.674
Then the firewall leak detector has detected leaks 0.107
After features/support/hooks.rb:330 0.915
After features/support/hooks.rb:100 0.042
Tags: @product
14.250
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.007
Given I have started Tails from DVD and logged in and the network is connected 13.069
And I capture all network traffic 0.007
And I disable Tails' firewall 0.272
When I do a UDP DNS lookup of "torproject.org" 0.805
Then the firewall leak detector has detected leaks 0.096
After features/support/hooks.rb:330 0.595
After features/support/hooks.rb:100 0.033
Tags: @product
30.158
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.007
Given I have started Tails from DVD and logged in and the network is connected 25.594
And I capture all network traffic 0.005
And I disable Tails' firewall 0.222
When I send some ICMP pings 4.166
Then the firewall leak detector has detected leaks 0.169
After features/support/hooks.rb:330 0.601
After features/support/hooks.rb:100 0.030
15.106
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.005
Before features/support/hooks.rb:507 0.006
Given I have started Tails from DVD and logged in and the network is connected 13.545
When I open an untorified TCP connection to 1.2.3.4 on port 42 1.472
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.087
After features/support/hooks.rb:515 0.258
After features/support/hooks.rb:330 0.680
After features/support/hooks.rb:100 0.000
14.498
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.008
Before features/support/hooks.rb:507 0.007
Given I have started Tails from DVD and logged in and the network is connected 12.983
When I open an untorified UDP connection to 1.2.3.4 on port 42 1.414
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.100
After features/support/hooks.rb:515 0.223
After features/support/hooks.rb:330 0.946
After features/support/hooks.rb:100 0.000
18.230
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.007
Before features/support/hooks.rb:507 0.007
Given I have started Tails from DVD and logged in and the network is connected 12.760
When I open an untorified ICMP connection to 1.2.3.4 5.405
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.065
After features/support/hooks.rb:515 0.231
After features/support/hooks.rb:330 0.645
After features/support/hooks.rb:100 0.000
Tags: @product
23.473
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.008
Given I have started Tails from DVD without network and logged in 8.644
And the system DNS is using the local DNS resolver 0.015
And the network is plugged 0.082
And I successfully configure Tor 14.718
Then the system DNS is still using the local DNS resolver 0.012
After features/support/hooks.rb:330 0.621
After features/support/hooks.rb:100 0.000