Ports: []garden.PortRange{garden.PortRangeFromPort(53)},
}
})
Context("when an IP within the denied network range is permitted", func() {
BeforeEach(func() {
args = append(args, "--deny-network", "0.0.0.0/0")
})
JustBeforeEach(func() {
Expect(checkConnection(container, "8.8.8.8", 53)).To(MatchError("Request failed. Process exited with code 1"))
Expect(checkConnection(container, "8.8.4.4", 53)).To(MatchError("Request failed. Process exited with code 1"))
})
It("should access internet", func() {
Expect(container.BulkNetOut([]garden.NetOutRule{rule1, rule2})).To(Succeed())
Expect(checkConnection(container, "8.8.8.8", 53)).To(Succeed())
Expect(checkConnection(container, "8.8.4.4", 53)).To(Succeed())
})
Context("when the dropped packets should get logged", func() {
BeforeEach(func() {
rule1.Log = true
rule2.Log = true
})
It("should access internet", func() {
Expect(container.BulkNetOut([]garden.NetOutRule{rule1, rule2})).To(Succeed())
Expect(checkConnection(container, "8.8.8.8", 53)).To(Succeed())
Expect(checkConnection(container, "8.8.4.4", 53)).To(Succeed())