1 ; config options 2 server: 3 trust-anchor: "example.net. 3600 IN DS 29332 8 2 fe9d2d1f797b8dbe717febca0b7ff2125e0bdc819eb529008aad5630e61d4d99" 4 val-override-date: "20201020135527" 5 target-fetch-policy: "0 0 0 0 0" 6 fake-sha1: yes 7 trust-anchor-signaling: no 8 target-fetch-policy: "0 0 0 0 0" 9 qname-minimisation: no 10 11 auth-zone: 12 name: "example.com." 13 master: ns.example.net. 14 for-downstream: yes 15 for-upstream: yes 16 ## fallback-enabled: no 17 ## this line generates zonefile: \n"/tmp/xxx.example.com"\n 18 zonefile: 19 TEMPFILE_NAME example.com 20 ## this is the inline file /tmp/xxx.example.com 21 ## the tempfiles are deleted when the testrun is over. 22 TEMPFILE_CONTENTS example.com 23 TEMPFILE_END 24 25 stub-zone: 26 name: "." 27 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 28 CONFIG_END 29 30 SCENARIO_BEGIN Test authority zone with bogus host name lookup 31 32 ; K.ROOT-SERVERS.NET. 33 RANGE_BEGIN 0 100 34 ADDRESS 193.0.14.129 35 ENTRY_BEGIN 36 MATCH opcode qtype qname 37 ADJUST copy_id 38 REPLY QR NOERROR 39 SECTION QUESTION 40 . IN NS 41 SECTION ANSWER 42 . IN NS K.ROOT-SERVERS.NET. 43 SECTION ADDITIONAL 44 K.ROOT-SERVERS.NET. IN A 193.0.14.129 45 ENTRY_END 46 47 ENTRY_BEGIN 48 MATCH opcode subdomain 49 ADJUST copy_id copy_query 50 REPLY QR NOERROR 51 SECTION QUESTION 52 com. IN NS 53 SECTION AUTHORITY 54 com. IN NS a.gtld-servers.net. 55 SECTION ADDITIONAL 56 a.gtld-servers.net. IN A 192.5.6.30 57 ENTRY_END 58 59 ENTRY_BEGIN 60 MATCH opcode subdomain 61 ADJUST copy_id copy_query 62 REPLY QR NOERROR 63 SECTION QUESTION 64 example.net. IN A 65 SECTION ANSWER 66 SECTION AUTHORITY 67 example.net. IN NS ns2.example.net. 68 SECTION ADDITIONAL 69 ns2.example.net. IN A 1.2.3.45 70 ENTRY_END 71 RANGE_END 72 73 ; a.gtld-servers.net. 74 RANGE_BEGIN 0 100 75 ADDRESS 192.5.6.30 76 ENTRY_BEGIN 77 MATCH opcode qtype qname 78 ADJUST copy_id 79 REPLY QR NOERROR 80 SECTION QUESTION 81 com. IN NS 82 SECTION ANSWER 83 com. IN NS a.gtld-servers.net. 84 SECTION ADDITIONAL 85 a.gtld-servers.net. IN A 192.5.6.30 86 ENTRY_END 87 88 ENTRY_BEGIN 89 MATCH opcode subdomain 90 ADJUST copy_id copy_query 91 REPLY QR NOERROR 92 SECTION QUESTION 93 example.com. IN NS 94 SECTION AUTHORITY 95 example.com. IN NS ns.example.com. 96 SECTION ADDITIONAL 97 ns.example.com. IN A 1.2.3.44 98 ENTRY_END 99 RANGE_END 100 101 ; ns.example.com. 102 RANGE_BEGIN 0 100 103 ADDRESS 1.2.3.44 104 ENTRY_BEGIN 105 MATCH opcode qtype qname 106 ADJUST copy_id 107 REPLY QR NOERROR 108 SECTION QUESTION 109 example.com. IN NS 110 SECTION ANSWER 111 example.com. IN NS ns.example.com. 112 SECTION ADDITIONAL 113 ns.example.com. IN A 1.2.3.44 114 ENTRY_END 115 116 ENTRY_BEGIN 117 MATCH opcode qtype qname 118 ADJUST copy_id 119 REPLY QR NOERROR 120 SECTION QUESTION 121 ns.example.com. IN A 122 SECTION ANSWER 123 ns.example.com. IN A 1.2.3.44 124 SECTION AUTHORITY 125 example.com. IN NS ns.example.com. 126 ENTRY_END 127 128 ENTRY_BEGIN 129 MATCH opcode qtype qname 130 ADJUST copy_id 131 REPLY QR NOERROR 132 SECTION QUESTION 133 ns.example.com. IN AAAA 134 SECTION AUTHORITY 135 example.com. IN NS ns.example.com. 136 SECTION ADDITIONAL 137 www.example.com. IN A 1.2.3.44 138 ENTRY_END 139 140 ENTRY_BEGIN 141 MATCH opcode qtype qname 142 ADJUST copy_id 143 REPLY QR NOERROR 144 SECTION QUESTION 145 example.com. IN NS 146 SECTION ANSWER 147 example.com. IN NS ns.example.com. 148 ENTRY_END 149 150 ENTRY_BEGIN 151 MATCH opcode qtype qname 152 ADJUST copy_id 153 REPLY QR NOERROR 154 SECTION QUESTION 155 www.example.com. IN A 156 SECTION ANSWER 157 www.example.com. IN A 10.20.30.40 158 ENTRY_END 159 160 ENTRY_BEGIN 161 MATCH opcode qtype qname 162 ADJUST copy_id 163 REPLY QR NOERROR 164 SECTION QUESTION 165 example.com. IN SOA 166 SECTION ANSWER 167 ; serial, refresh, retry, expire, minimum 168 example.com. IN SOA ns.example.com. hostmaster.example.com. 1 3600 900 86400 3600 169 ENTRY_END 170 171 ENTRY_BEGIN 172 MATCH opcode qtype qname 173 ADJUST copy_id 174 REPLY QR AA NOERROR 175 SECTION QUESTION 176 example.com. IN AXFR 177 SECTION ANSWER 178 example.com. IN SOA ns.example.com. hostmaster.example.com. 1 3600 900 86400 3600 179 example.com. IN NS ns.example.com. 180 www.example.com. IN A 1.2.3.4 181 example.com. IN SOA ns.example.com. hostmaster.example.com. 1 3600 900 86400 3600 182 ENTRY_END 183 RANGE_END 184 185 ; ns2.example.net 186 RANGE_BEGIN 0 100 187 ADDRESS 1.2.3.45 188 ENTRY_BEGIN 189 MATCH opcode qtype qname 190 ADJUST copy_id 191 REPLY QR AA NOERROR 192 SECTION QUESTION 193 ns2.example.net. IN A 194 SECTION ANSWER 195 ns2.example.net. 3600 IN A 1.2.3.45 196 ns2.example.net. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 29332 example.net. ttH0qGYFJp0zfoqb6h9cDGhkosucRPI64gd3+i7gwAcbOtfGJhHR7+NQ7uH+gRRv4lzPEiWP6zM7IiSeC1o+gW/Y2u6J1a330KzikT1YxIWGQJ825NU3PJ5ifTC8IgrN8HFwBuof3K4x/ftdA9VRcyCbFicazOD4RLlbhffMpoVQKyRa/NqHT8mSWLPry9q9skgdyRk17f65i0sdSCEyCXv8+vX6vBxaMF3in+zQxvnA9nyB4omwLLJZx3jaF0+lSiBcx3u20DTbCC/cyjxJArhLlv1N5U3GRUpFXl1d7k0FmacQCP4H5UXSzy6vf6XoQwtfIgNzwYgFN5RuCdJ71w== 197 ENTRY_END 198 199 ENTRY_BEGIN 200 MATCH opcode qtype qname 201 ADJUST copy_id 202 REPLY QR AA NOERROR 203 SECTION QUESTION 204 ns2.example.net. IN AAAA 205 SECTION ANSWER 206 SECTION AUTHORITY 207 example.net. 3600 IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 208 example.net. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 29332 example.net. OWDPS0sJQOhZlqKUbdL8OVwT0u1e1asbjW+9dMRxIF/VoxxRaYIqD/lsn1U+irRrbIPDp9wxDdFu7ChddB1n2/do/by9xuIMLD00mkxSJduxMjRl/8hWvhBV6j8jqU0pbsxS3Oolcju8imrobEqqCDi1YVD6OQuBzwnQ7trF9mfANv208pDA4chWXWUimFETKzpc3aLarcm3qVnb53AQhggyLow/ZLG1egbwaGn3pcf+kPHw+G4MSOR1TtS0mWKiPgdYRiqSS+AqrZUu/ZuAKAGweKeIypDgm6RZC5M4FmRA+f8gZg2rI2Xog6TLt0qrjD8ARwXkyBq8wL3G0Ihkew== 209 ns2.example.net. 3600 IN NSEC ns3.example.net. A RRSIG NSEC 210 ns2.example.net. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 29332 example.net. MMDdm3yz6Ocreg8HE7Cf9EnIJ5NFCVzEv+I9zBeUR90pFBlrBY4LqmMxC5GXoEEc1iql5XpPkIspsWTkCUSWutoiDh4Vlg54HrZ4ONy8GzVzg5ePcuXT51nYq1xjfDx4Yi124GT/QKx4+B7HFoyFfoRT1Kf+uP3c7F7qK+VB3FrBBQpl7f6dX87qO23Bb+Vp+L0RPCmuLkhdnrM34bB6jT1lGwgsD4upDy81XKSH6uces8D/fvl0+Evzcy3gkKlxY6uzV53cUD0FM9AVg7/ZWXwQe5n7PIU9gzQ3xtnH5MA8fG6iUyVQJixjqzEqjJdh2PMJA31qTT2X6LQO95ZM2w== 211 ENTRY_END 212 213 ENTRY_BEGIN 214 MATCH opcode qtype qname 215 ADJUST copy_id 216 REPLY QR AA NOERROR 217 SECTION QUESTION 218 example.net. IN DNSKEY 219 SECTION ANSWER 220 example.net. 3600 IN DNSKEY 257 3 8 AwEAAb4WMOTBLTFvmBra5m6SK4VfViOzmvyUAU0qv861ZQXeEFvwlndqNU9rwRsMxrSWAYs5nHErKDn49usC/HyxxW1477iGFHhfgL4mjNreJm9zft2QFB1VLbRbEPYdDMLCn4co0qnG7/KG8W2i8Pym1L7f+aREwbLo+/716AS2PbaKMhfWLKLiq5wnBcUClQMNzCiwhqxDJp1oePqfkVdeUgXOtgi0dYRIKyQFhJ5VWJ22npoi/Gif0XLCADAlAwRLKc8o/yJkCxskzgpHpw5Cki1lclg0aq4ssOuPRQ+ne6IHYCz9D2mwzulblhLFamKdq7aHzNt4NlyxhpANVFiKLD8= ;{id = 29332 (ksk), size = 2048b} 221 example.net. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 29332 example.net. a0AqvyBN1Dr1Try1RBjbWjhaaTj3WGpSBywSxLu09bElAFinC3kUgk/WTjfsIIxruUHmzVgPssYeb5g79rdaz7YanSi06LQsnEjMS+hexSU6TXBCtJnhA8taKPlPj+qBRQL/Ptju72upty6Mw8eMG05QOQOa2WC5mPLgo2k6PmgsBMyW3Rhn+lldlmz1NZIZ3udDHs6xxX6Gjio67ogGm0MUbWRZo68oGt/xYv6JzZAVzZROlWvs5D+pf1Mrfzn3yOMJ0jh2XTXJAiw3vX+i2k/P/Yfscm7BWULJ7fBx+0JcDuYccd2mj9ijmD7KuM/laFSIUvxAixu7gV2TDrKEjw== 222 ENTRY_END 223 224 ENTRY_BEGIN 225 MATCH opcode qtype qname 226 ADJUST copy_id 227 REPLY QR AA NOERROR 228 SECTION QUESTION 229 ns.example.net. IN A 230 SECTION ANSWER 231 ns.example.net. IN A 1.2.3.44 232 ; bad RRSIG 233 ns.example.net. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 29332 example.net. a0AqvyBN1Dr1Try1RBjbWjhaaTj3WGpSBywSxLu09bElAFinC3kUgk/WTjfsIIxruUHmzVgPssYeb5g79rdaz7YanSi06LQsnEjMS+hexSU6TXBCtJnhA8taKPlPj+qBRQL/Ptju72upty6Mw8eMG05QOQOa2WC5mPLgo2k6PmgsBMyW3Rhn+lldlmz1NZIZ3udDHs6xxX6Gjio67ogGm0MUbWRZo68oGt/xYv6JzZAVzZROlWvs5D+pf1Mrfzn3yOMJ0jh2XTXJAiw3vX+i2k/P/Yfscm7BWULJ7fBx+0JcDuYccd2mj9ijmD7KuM/laFSIUvxAixu7gV2TDrKEjw== 234 ENTRY_END 235 236 ENTRY_BEGIN 237 MATCH opcode qtype qname 238 ADJUST copy_id 239 REPLY QR AA NOERROR 240 SECTION QUESTION 241 ns.example.net. IN AAAA 242 SECTION ANSWER 243 SECTION AUTHORITY 244 example.net. 3600 IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 245 example.net. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 29332 example.net. OWDPS0sJQOhZlqKUbdL8OVwT0u1e1asbjW+9dMRxIF/VoxxRaYIqD/lsn1U+irRrbIPDp9wxDdFu7ChddB1n2/do/by9xuIMLD00mkxSJduxMjRl/8hWvhBV6j8jqU0pbsxS3Oolcju8imrobEqqCDi1YVD6OQuBzwnQ7trF9mfANv208pDA4chWXWUimFETKzpc3aLarcm3qVnb53AQhggyLow/ZLG1egbwaGn3pcf+kPHw+G4MSOR1TtS0mWKiPgdYRiqSS+AqrZUu/ZuAKAGweKeIypDgm6RZC5M4FmRA+f8gZg2rI2Xog6TLt0qrjD8ARwXkyBq8wL3G0Ihkew== 246 ns.example.net. 3600 IN NSEC ns2.example.net. A RRSIG NSEC 247 ns.example.net. 3600 IN RRSIG NSEC 8 3 3600 20201116135527 20201019135527 29332 example.net. bwmn1nX0amfcIK6+NXdX7i3VvebPGpVLd0Ry0P+5JbiLCO3lI8kbXxpQh2jpIAKAdfSq+WZPGAhwOSOTVak1mEcYf5xLvmiKWmGz0LH8RTCzQTAlcQTnuybmQWuwBjIXaetVQ1ADiJZK57M41d5lOE0KqWe5xfAHE+UhMOQ6JhQwLFK/QfQJB7ke1itM/qfsJHgdb/rbT7v7G8Nd342NMCZEgzP/wFyZ3JRP0XY5D7K71IuFZd9NfxXkKRMn5UM/lMDITqE3MknzXnsKJcH9SpoykKMya9SsrwI+IuOxpQkyiyd+N33H3di4uWI1MiWdayQnR2D3HhHi1Vdp42CDxQ== 248 ENTRY_END 249 RANGE_END 250 251 252 STEP 1 QUERY 253 ENTRY_BEGIN 254 REPLY RD 255 SECTION QUESTION 256 www.example.com. IN A 257 ENTRY_END 258 259 ; recursion happens here. 260 STEP 20 CHECK_ANSWER 261 ENTRY_BEGIN 262 MATCH all 263 REPLY QR AA RD RA SERVFAIL 264 SECTION QUESTION 265 www.example.com. IN A 266 SECTION ANSWER 267 ENTRY_END 268 269 STEP 30 TIME_PASSES ELAPSE 10 270 STEP 40 TRAFFIC 271 272 STEP 50 QUERY 273 ENTRY_BEGIN 274 REPLY RD 275 SECTION QUESTION 276 www.example.com. IN A 277 ENTRY_END 278 279 ; The bogus host was not used. 280 STEP 60 CHECK_ANSWER 281 ENTRY_BEGIN 282 MATCH all 283 REPLY QR AA RD RA SERVFAIL 284 SECTION QUESTION 285 www.example.com. IN A 286 SECTION ANSWER 287 ENTRY_END 288 289 ; the zonefile was updated with new contents 290 STEP 70 CHECK_TEMPFILE example.com 291 FILE_BEGIN 292 FILE_END 293 294 SCENARIO_END 295