Appearance

DNS/Direct‑IP Uploads Blocked ​

Validate that upload attempts fail when DNS resolution is blocked and when attempting direct IP access. The objective is to prove there is no fallback path that bypasses DNS policy or proxy enforcement.

Objectives ​

  • Deny uploads to DNS‑blocked destinations without fallback to direct IP.
  • Maintain proxy‑only routing and correct audit evidence.

Preconditions ​

  • DNS controls enabled; deny rules for target domain(s).
  • Egress default deny with proxy enforcement configured.
  • Test upload endpoint reachable only through authorized proxy.

Suite ​

IDCanonical IDsFlowProcedureExpected Outcome
INTEG-DNS-BYPASS-01NET-DNS-01, NET-EGRESS-01, DM-WEB-02DNS/Direct‑IP Uploads Blocked1) Attempt upload to a domain blocked by DNS policy. 2) Repeat using the service’s direct IP.Both attempts are denied; no direct fallback; audit shows action: "deny", proxyEnforced: true, and relevant rule.id.

Evidence Requirements ​

  • network events: action, reason, proxyEnforced, alpn/protocol as applicable, integrity.hash.
  • dataMotion web/upload events: action, outcome, rule.id, integrity.hash.

Turbo.net © 2025