Project Number Date
test_Tails_ISO_stable 5755 02 Jul 2025, 14:45

Feature Report

Steps Scenarios Features
Feature Passed Failed Skipped Pending Undefined Total Passed Failed Total Duration Status
The Tor enforcement is effective 41 1 1 0 0 43 8 1 9 4:44.488 Failed
Tags: @product
Feature The Tor enforcement is effective
As a Tails user I want all direct Internet connections I do by mistake or applications do by misconfiguration or buggy leaks to be blocked And as a Tails developer I want to ensure that the automated test suite detects firewall leaks reliably
Tags: @product
18.582
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.008
Given I have started Tails from DVD and logged in and the network is connected 18.027
Then the firewall's policy is to drop all IPv4 traffic 0.119
And the firewall is configured to only allow the clearnet and debian-tor users to connect directly to the Internet over IPv4 0.247
And the firewall's NAT rules only redirect traffic for the Unsafe Browser, Tor's TransPort, and DNSPort 0.101
And the firewall is configured to block all external IPv6 traffic 0.086
After features/support/hooks.rb:330 1.841
After features/support/hooks.rb:100 0.000
Tags: @product
1:56.802
Scenario Anti test: Detecting TCP leaks from the Unsafe Browser with the firewall leak detector
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.072
Steps
Given I have started Tails from DVD and logged in and the network is connected 16.684
And I capture all network traffic 0.005
When I successfully start the Unsafe Browser 28.806
And I open the Tails homepage in the Unsafe Browser 11.032
And the Tails homepage loads in the Unsafe Browser 1:0.272
cannot find TailsHomepage.png on the screen (FindFailed)
./features/support/helpers/screen.rb:181:in `rescue in wait'
./features/support/helpers/screen.rb:165:in `wait'
./features/step_definitions/browser.rb:316:in `/^the Tails homepage loads in the Unsafe Browser$/'
features/tor_enforcement.feature:20:in `And the Tails homepage loads in the Unsafe Browser'
Then the firewall leak detector has detected leaks 0.000
After features/support/hooks.rb:330 9.022

SCENARIO FAILED: 'Anti test: Detecting TCP leaks from the Unsafe Browser with the firewall leak detector' (at time 05:28:26)

Boot log: https://jenkins.tails.boum.org/job/test_Tails_ISO_stable/5755/artifact/build-artifacts/05:28:26_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.file_content_var_log_boot.log

Screenshot: https://jenkins.tails.boum.org/job/test_Tails_ISO_stable/5755/artifact/build-artifacts/05:28:26_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.png

Video: https://jenkins.tails.boum.org/job/test_Tails_ISO_stable/5755/artifact/build-artifacts/05:28:26_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.mkv

Systemd journal: https://jenkins.tails.boum.org/job/test_Tails_ISO_stable/5755/artifact/build-artifacts/05:28:26_Anti_test:_Detecting_TCP_leaks_from_the_Unsafe_Browser_with_the_firewall_leak_detector.journal

After features/support/hooks.rb:100 0.041
Tags: @product
17.446
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.012
Given I have started Tails from DVD and logged in and the network is connected 13.645
And I capture all network traffic 0.007
And I disable Tails' firewall 0.268
When I do a TCP DNS lookup of "torproject.org" 1.301
Then the firewall leak detector has detected leaks 2.223
After features/support/hooks.rb:330 0.861
After features/support/hooks.rb:100 0.040
Tags: @product
20.060
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.054
Given I have started Tails from DVD and logged in and the network is connected 15.660
And I capture all network traffic 0.205
And I disable Tails' firewall 1.208
When I do a UDP DNS lookup of "torproject.org" 1.732
Then the firewall leak detector has detected leaks 1.252
After features/support/hooks.rb:330 1.364
After features/support/hooks.rb:100 0.067
Tags: @product
21.256
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.014
Given I have started Tails from DVD and logged in and the network is connected 14.959
And I capture all network traffic 0.092
And I disable Tails' firewall 0.744
When I send some ICMP pings 5.290
Then the firewall leak detector has detected leaks 0.170
After features/support/hooks.rb:330 1.117
After features/support/hooks.rb:100 0.037
16.132
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.029
Before features/support/hooks.rb:507 0.042
Given I have started Tails from DVD and logged in and the network is connected 13.672
When I open an untorified TCP connection to 1.2.3.4 on port 42 2.338
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.121
After features/support/hooks.rb:515 0.377
After features/support/hooks.rb:330 0.948
After features/support/hooks.rb:100 0.000
17.124
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.083
Before features/support/hooks.rb:507 0.071
Given I have started Tails from DVD and logged in and the network is connected 14.037
When I open an untorified UDP connection to 1.2.3.4 on port 42 2.208
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.877
After features/support/hooks.rb:515 0.801
After features/support/hooks.rb:330 0.927
After features/support/hooks.rb:100 0.000
22.001
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.017
Before features/support/hooks.rb:507 0.013
Given I have started Tails from DVD and logged in and the network is connected 14.981
When I open an untorified ICMP connection to 1.2.3.4 6.845
Then the untorified connection fails 0.000
And the untorified connection is logged as dropped by the firewall 0.174
After features/support/hooks.rb:515 0.378
After features/support/hooks.rb:330 0.967
After features/support/hooks.rb:100 0.000
Tags: @product
35.082
Before features/support/hooks.rb:266 0.000
Before features/support/hooks.rb:273 0.007
Given I have started Tails from DVD without network and logged in 10.319
And the system DNS is using the local DNS resolver 0.017
And the network is plugged 0.073
And I successfully configure Tor 24.619
Then the system DNS is still using the local DNS resolver 0.052
After features/support/hooks.rb:330 2.711
After features/support/hooks.rb:100 0.000