firewall_leaks.rb 1.23 KB
Newer Older
1
Then(/^the firewall leak detector has detected leaks$/) do
2
  assert_raise(FirewallAssertionFailedError) do
3
    step 'all Internet traffic has only flowed through Tor'
4
5
6
7
  end
end

Given(/^I disable Tails' firewall$/) do
8
  $vm.execute("/usr/local/lib/do_not_ever_run_me")
9
  iptables = $vm.execute("iptables -L -n -v").stdout.chomp.split("\n")
10
11
12
13
14
15
16
17
18
19
  for line in iptables do
    if !line[/Chain (INPUT|OUTPUT|FORWARD) \(policy ACCEPT/] and
       !line[/pkts[[:blank:]]+bytes[[:blank:]]+target/] and
       !line.empty?
      raise "The Tails firewall was not successfully disabled:\n#{iptables}"
    end
  end
end

When(/^I do a TCP DNS lookup of "(.*?)"$/) do |host|
20
  lookup = $vm.execute("host -T -t A #{host} #{SOME_DNS_SERVER}", :user => LIVE_USER)
21
22
23
24
  assert(lookup.success?, "Failed to resolve #{host}:\n#{lookup.stdout}")
end

When(/^I do a UDP DNS lookup of "(.*?)"$/) do |host|
25
  lookup = $vm.execute("host -t A #{host} #{SOME_DNS_SERVER}", :user => LIVE_USER)
26
27
28
29
30
  assert(lookup.success?, "Failed to resolve #{host}:\n#{lookup.stdout}")
end

When(/^I send some ICMP pings$/) do
  # We ping an IP address to avoid a DNS lookup
intrigeri's avatar
intrigeri committed
31
  ping = $vm.execute("ping -c 5 #{SOME_DNS_SERVER}")
32
  assert(ping.success?, "Failed to ping #{SOME_DNS_SERVER}:\n#{ping.stderr}")
33
end