1 ; Test DNS Error Reporting. 2 3 server: 4 module-config: "validator iterator" 5 trust-anchor-signaling: no 6 target-fetch-policy: "0 0 0 0 0" 7 verbosity: 4 8 qname-minimisation: no 9 minimal-responses: no 10 rrset-roundrobin: no 11 trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 12 val-override-date: "20201020135527" 13 ede: no # It is not needed for dns-error-reporting; only for clients to receive EDEs 14 dns-error-reporting: yes 15 do-ip6: no 16 local-zone: test. nodefault 17 log-servfail: yes 18 19 stub-zone: 20 name: test 21 stub-addr: 1.2.3.5 22 stub-zone: 23 name: an.agent 24 stub-addr: 0.0.0.2 25 CONFIG_END 26 27 SCENARIO_BEGIN Test DNS Error Reporting with agent domain len malformed. 28 29 ; ns.test 30 RANGE_BEGIN 0 100 31 ADDRESS 1.2.3.5 32 ENTRY_BEGIN 33 MATCH opcode qtype qname 34 ADJUST copy_id 35 REPLY QR AA NOERROR 36 SECTION QUESTION 37 test. IN NS 38 SECTION ANSWER 39 test. IN NS ns.test 40 test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 41 SECTION ADDITIONAL 42 ns.test. IN A 1.2.3.5 43 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 44 ENTRY_END 45 46 ENTRY_BEGIN 47 MATCH opcode qtype qname 48 ADJUST copy_id 49 REPLY QR AA NOERROR 50 SECTION QUESTION 51 ns.test. IN A 52 SECTION ANSWER 53 ns.test. IN A 1.2.3.5 54 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 55 ENTRY_END 56 57 ENTRY_BEGIN 58 MATCH opcode qtype qname 59 ADJUST copy_id 60 REPLY QR AA NOERROR 61 SECTION QUESTION 62 ns.test. IN AAAA 63 SECTION AUTHORITY 64 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 65 test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 66 ns.test. 3600 IN NSEC nz.test. A RRSIG 67 ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 68 ENTRY_END 69 70 ENTRY_BEGIN 71 MATCH opcode qtype qname 72 ADJUST copy_id 73 REPLY QR AA NOERROR 74 SECTION QUESTION 75 test. IN DNSKEY 76 SECTION ANSWER 77 test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 78 test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 79 SECTION ADDITIONAL 80 ENTRY_END 81 82 ENTRY_BEGIN 83 MATCH opcode qname qtype 84 ADJUST copy_id 85 REPLY QR AA NOERROR 86 SECTION QUESTION 87 example.test. IN DS 88 SECTION ANSWER 89 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 90 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 91 ENTRY_END 92 93 ENTRY_BEGIN 94 MATCH opcode subdomain 95 ADJUST copy_id copy_query 96 REPLY QR NOERROR 97 SECTION QUESTION 98 example.test. IN NS 99 SECTION AUTHORITY 100 example.test. IN NS ns.example.test. 101 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 102 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 103 SECTION ADDITIONAL 104 ns.example.test. IN A 1.2.3.4 105 ENTRY_END 106 RANGE_END 107 108 ; ns.example.test. 109 RANGE_BEGIN 0 100 110 ADDRESS 1.2.3.4 111 ENTRY_BEGIN 112 MATCH opcode qtype qname 113 ADJUST copy_id 114 REPLY QR NOERROR 115 SECTION QUESTION 116 example.test. IN NS 117 SECTION ANSWER 118 example.test. IN NS ns.example.test. 119 example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 120 SECTION ADDITIONAL 121 ns.example.test. IN A 1.2.3.4 122 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 123 ENTRY_END 124 125 ENTRY_BEGIN 126 MATCH opcode qtype qname 127 ADJUST copy_id 128 REPLY QR AA NOERROR 129 SECTION QUESTION 130 ns.example.test. IN A 131 SECTION ANSWER 132 ns.example.test. IN A 1.2.3.4 133 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 134 ENTRY_END 135 136 ENTRY_BEGIN 137 MATCH opcode qtype qname 138 ADJUST copy_id 139 REPLY QR AA NOERROR 140 SECTION QUESTION 141 ns.example.test. IN AAAA 142 SECTION AUTHORITY 143 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 144 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 145 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 146 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 147 ENTRY_END 148 149 ; response to DNSKEY priming query 150 ENTRY_BEGIN 151 MATCH opcode qtype qname 152 ADJUST copy_id 153 REPLY QR NOERROR 154 SECTION QUESTION 155 example.test. IN DNSKEY 156 SECTION ANSWER 157 example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 158 example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 159 ENTRY_END 160 161 ; response to query of interest 162 ENTRY_BEGIN 163 MATCH opcode qtype qname 164 ADJUST copy_id 165 REPLY QR AA NOERROR 166 SECTION QUESTION 167 www.example.test. IN A 168 SECTION ANSWER 169 www.example.test. 3600 IN A 10.20.30.40 170 ; valid signature 171 ;www.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. OQEgDcpez8Bvdwd+hxA3v63FWJhutWkv9w+k+8RLcWv34WPhebsf7CBV74ggY2c+HafvYiuIFfhdF5CX28YQjxqWVzFgE6bEA6spPc6qdHiQaY/096/4SLCDcL+2EtOqcR/uZGj5uNhhaCJ9UjscBKfEZmHUOAMXKmjsvl0I/+I= 172 ; invalid: expired signature 173 www.example.test. 3600 IN RRSIG A 8 3 3600 20200816135527 20200719135527 55567 example.test. DNM4PJALboBNDe5pJ2NScYqYYmmpq8E0NogjbDNithIcQ7HtzkssLIR46DiPb/B7QIhBRpfQ6sUwMb4l+NDhm82DxaecEwnAV6Y0zYK6dZ5jI7e8rDI2hkW/LO75qSZ8Y1I9pgX5uyeBCon42IVjc3vyYbRbFNv1xgJs5rk308U= 174 SECTION ADDITIONAL 175 HEX_EDNSDATA_BEGIN 176 ; This dns error reporting option is malformed, with garbage at end. 177 00 12 ; opt-code (Report-Channel) 178 00 28 ; opt-len 10 + 30 179 02 61 6E 05 61 67 65 6E 74 00 ; an.agent. 180 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ; 30 0xFF tail 181 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 182 HEX_EDNSDATA_END 183 ENTRY_END 184 RANGE_END 185 186 ; an.agent 187 RANGE_BEGIN 10 20 188 ADDRESS 0.0.0.2 189 ENTRY_BEGIN 190 MATCH opcode qtype qname 191 ADJUST copy_id 192 REPLY QR NOERROR 193 SECTION QUESTION 194 _er.1.www.example.test.7._er.an.agent. IN TXT 195 SECTION ANSWER 196 _er.1.www.example.test.7._er.an.agent. IN TXT "OK" 197 ENTRY_END 198 RANGE_END 199 200 ; Query again 201 STEP 10 QUERY 202 ENTRY_BEGIN 203 REPLY RD 204 SECTION QUESTION 205 www.example.test. IN A 206 ENTRY_END 207 208 ; Check that validation failed 209 ; (a DNS Error Report query should have been generated) 210 STEP 11 CHECK_ANSWER 211 ENTRY_BEGIN 212 MATCH all 213 REPLY QR RD RA SERVFAIL 214 SECTION QUESTION 215 www.example.test. IN A 216 ENTRY_END 217 218 ; answer the reporting agent reply. 219 STEP 20 TRAFFIC 220 221 SCENARIO_END 222
Indexes created Mon Oct 26 00:26:21 UTC 2026