fix tests?

Author: konradodwrot

README.md

@@ -66,13 +66,13 @@ make proxy-logs
 **DENY**
 
 ```sh
-# .discoverychannel.pl is not present in allowed-sites.txt
-curl -I https://discoverchannel.pl
+# .instagram.com is not present in allowed-sites.txt
+curl -I https://www.instagram.com
 # HTTP/1.1 403 Forbidden
 
 # proxy blocked the request
 make proxy-logs
-# 0 172.21.0.2 TCP_DENIED/403 3408 CONNECT discoverchannel.pl:443 - HIER_NONE/- text/html
+# 0 172.20.0.2 TCP_DENIED/403 3406 CONNECT www.instagram.com:443 - HIER_NONE/- text/html
 ```
 
 3. SSH traffic is denied unless domain is in allowed sites.txt

tests/proxy.sh

@@ -37,13 +37,14 @@ else
 fi
 
 # --- 3. HTTPS to a non-whitelisted domain is denied -----------------------
-name='HTTPS to non-whitelisted domain (discoverchannel.pl) blocked'
-out=$(curl -sS --max-time 15 -o /dev/null -w '%{http_code}' https://discoverchannel.pl 2>&1)
-# squid returns 403 on the CONNECT; curl surfaces it as a non-2xx or as exit 56.
-if [[ "$out" == 403 ]] || [[ "$out" == 000 ]]; then
+name='HTTPS to non-whitelisted domain (instagram.com) blocked'
+code=$(curl -s --max-time 15 -o /dev/null -w '%{http_code}' https://instagram.com 2>/dev/null)
+rc=$?
+# squid returns 403 on the CONNECT; curl surfaces it as http_code 403 or exits 56.
+if [[ "$code" == 403 ]] || [[ "$rc" == 56 ]]; then
     report PASS "$name"
 else
-    report FAIL "$name" "expected proxy denial, got '$out'"
+    report FAIL "$name" "expected proxy denial, got code='$code' exit=$rc"
 fi
 
 # --- 4. Direct internet (bypassing proxy) is unreachable ------------------
@@ -61,7 +62,8 @@ fi
 # If squid denied the CONNECT, nc exits early and ssh reports
 # "Connection closed by remote host" / "kex_exchange_identification".
 name='SSH to whitelisted host (github.com) tunnels through proxy'
-ssh_out=$(ssh -o BatchMode=yes \
+ssh_out=$(ssh -F none \
+              -o BatchMode=yes \
               -o StrictHostKeyChecking=accept-new \
               -o ConnectTimeout=15 \
               -T git@github.com 2>&1 || true)
@@ -73,7 +75,8 @@ fi
 
 # --- 6. SSH to non-whitelisted host is denied by squid --------------------
 name='SSH to non-whitelisted host (gitlab.com) blocked'
-ssh_out=$(ssh -o BatchMode=yes \
+ssh_out=$(ssh -F none \
+              -o BatchMode=yes \
               -o StrictHostKeyChecking=no \
               -o UserKnownHostsFile=/dev/null \
               -o ConnectTimeout=10 \