Ports: []garden.PortRange{garden.PortRangeFromPort(53)}, } }) Context("when an IP within the denied network range is permitted", func() { BeforeEach(func() { args = append(args, "--deny-network", "0.0.0.0/0") }) JustBeforeEach(func() { Expect(checkConnection(container, "8.8.8.8", 53)).To(MatchError("Request failed. Process exited with code 1")) Expect(checkConnection(container, "8.8.4.4", 53)).To(MatchError("Request failed. Process exited with code 1")) }) It("should access internet", func() { Expect(container.BulkNetOut([]garden.NetOutRule{rule1, rule2})).To(Succeed()) Expect(checkConnection(container, "8.8.8.8", 53)).To(Succeed()) Expect(checkConnection(container, "8.8.4.4", 53)).To(Succeed()) }) Context("when the dropped packets should get logged", func() { BeforeEach(func() { rule1.Log = true rule2.Log = true }) It("should access internet", func() { Expect(container.BulkNetOut([]garden.NetOutRule{rule1, rule2})).To(Succeed()) Expect(checkConnection(container, "8.8.8.8", 53)).To(Succeed()) Expect(checkConnection(container, "8.8.4.4", 53)).To(Succeed())