-
Notifications
You must be signed in to change notification settings - Fork 2
Closed
Labels
enhancementNew feature or requestNew feature or request
Description
Priority
Low
Description
The test suite lacks integration tests for IPv6 functionality, which leaves a gap in test coverage for IPv6 filtering and DNS configuration.
Impact
- Severity: Low
- Risk: IPv6 filtering bugs may go undetected
- Coverage Gap: IPv6 scenarios not validated in CI/CD
Proposed Solution
Add integration tests for:
- IPv6 DNS filtering (default: Google DNS IPv6 addresses)
- IPv6 traffic blocking when ip6tables is unavailable
- IPv6 sysctl configuration verification
- IPv6 address validation in domain patterns
Test Scenarios
# Test IPv6 DNS filtering
awf --dns-servers 2001:4860:4860::8888,2001:4860:4860::8844 'curl https://example.com'
# Test IPv6 traffic blocking
awf --allow-domains example.com 'curl -6 https://ipv6.google.com'Effort Estimate
~3 hours
References
- Source: Daily Security Review Discussion [Security Review] Daily Security Review - January 16, 2026 #228
- Related: IPv6 filtering gaps issue
Reactions are currently unavailable
Metadata
Metadata
Labels
enhancementNew feature or requestNew feature or request