1 1.1 christos ; config options 2 1.1 christos server: 3 1.1 christos target-fetch-policy: "0 0 0 0 0" 4 1.1.1.2 christos qname-minimisation: "no" 5 1.1 christos 6 1.1 christos private-address: 10.0.0.0/8 7 1.1 christos private-address: 172.16.0.0/12 8 1.1 christos private-address: 192.168.0.0/16 9 1.1 christos private-address: 169.254.0.0/16 10 1.1 christos private-address: fd00::/8 11 1.1 christos private-address: fe80::/10 12 1.1 christos 13 1.1 christos private-domain: "example.net" 14 1.1 christos 15 1.1 christos stub-zone: 16 1.1 christos name: "." 17 1.1 christos stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 18 1.1 christos 19 1.1 christos CONFIG_END 20 1.1 christos 21 1.1 christos SCENARIO_BEGIN Test iterator scrubber with private addresses. 22 1.1 christos 23 1.1 christos ; K.ROOT-SERVERS.NET. 24 1.1 christos RANGE_BEGIN 0 100 25 1.1 christos ADDRESS 193.0.14.129 26 1.1 christos ENTRY_BEGIN 27 1.1 christos MATCH opcode qtype qname 28 1.1 christos ADJUST copy_id 29 1.1 christos REPLY QR NOERROR 30 1.1 christos SECTION QUESTION 31 1.1 christos . IN NS 32 1.1 christos SECTION ANSWER 33 1.1 christos . IN NS K.ROOT-SERVERS.NET. 34 1.1 christos SECTION ADDITIONAL 35 1.1 christos K.ROOT-SERVERS.NET. IN A 193.0.14.129 36 1.1 christos ENTRY_END 37 1.1 christos 38 1.1 christos ENTRY_BEGIN 39 1.1 christos MATCH opcode subdomain 40 1.1 christos ADJUST copy_id copy_query 41 1.1 christos REPLY QR NOERROR 42 1.1 christos SECTION QUESTION 43 1.1 christos com. IN A 44 1.1 christos SECTION AUTHORITY 45 1.1 christos com. IN NS a.gtld-servers.net. 46 1.1 christos SECTION ADDITIONAL 47 1.1 christos a.gtld-servers.net. IN A 192.5.6.30 48 1.1 christos ENTRY_END 49 1.1 christos 50 1.1 christos ; root server authoritative for example.net too. 51 1.1 christos ENTRY_BEGIN 52 1.1 christos MATCH opcode qtype qname 53 1.1 christos ADJUST copy_id 54 1.1 christos REPLY QR NOERROR 55 1.1 christos SECTION QUESTION 56 1.1 christos mail.example.net. IN A 57 1.1 christos SECTION ANSWER 58 1.1 christos mail.example.net. IN A 10.20.30.40 59 1.1 christos ENTRY_END 60 1.1 christos RANGE_END 61 1.1 christos 62 1.1 christos ; a.gtld-servers.net. 63 1.1 christos RANGE_BEGIN 0 100 64 1.1 christos ADDRESS 192.5.6.30 65 1.1 christos ENTRY_BEGIN 66 1.1 christos MATCH opcode qtype qname 67 1.1 christos ADJUST copy_id 68 1.1 christos REPLY QR NOERROR 69 1.1 christos SECTION QUESTION 70 1.1 christos com. IN NS 71 1.1 christos SECTION ANSWER 72 1.1 christos com. IN NS a.gtld-servers.net. 73 1.1 christos SECTION ADDITIONAL 74 1.1 christos a.gtld-servers.net. IN A 192.5.6.30 75 1.1 christos ENTRY_END 76 1.1 christos 77 1.1 christos ENTRY_BEGIN 78 1.1 christos MATCH opcode subdomain 79 1.1 christos ADJUST copy_id copy_query 80 1.1 christos REPLY QR NOERROR 81 1.1 christos SECTION QUESTION 82 1.1 christos example.com. IN A 83 1.1 christos SECTION AUTHORITY 84 1.1 christos example.com. IN NS ns.example.com. 85 1.1 christos SECTION ADDITIONAL 86 1.1 christos ns.example.com. IN A 1.2.3.4 87 1.1 christos ENTRY_END 88 1.1 christos RANGE_END 89 1.1 christos 90 1.1 christos ; ns.example.com. 91 1.1 christos RANGE_BEGIN 0 100 92 1.1 christos ADDRESS 1.2.3.4 93 1.1 christos ENTRY_BEGIN 94 1.1 christos MATCH opcode qtype qname 95 1.1 christos ADJUST copy_id 96 1.1 christos REPLY QR NOERROR 97 1.1 christos SECTION QUESTION 98 1.1 christos example.com. IN NS 99 1.1 christos SECTION ANSWER 100 1.1 christos example.com. IN NS ns.example.com. 101 1.1 christos SECTION ADDITIONAL 102 1.1 christos ns.example.com. IN A 1.2.3.4 103 1.1 christos ENTRY_END 104 1.1 christos 105 1.1 christos ENTRY_BEGIN 106 1.1 christos MATCH opcode qtype qname 107 1.1 christos ADJUST copy_id 108 1.1 christos REPLY QR NOERROR 109 1.1 christos SECTION QUESTION 110 1.1 christos ns.example.com. IN A 111 1.1 christos SECTION ANSWER 112 1.1 christos ns.example.com. IN A 1.2.3.4 113 1.1 christos SECTION AUTHORITY 114 1.1 christos example.com. IN NS ns.example.com. 115 1.1 christos ENTRY_END 116 1.1 christos 117 1.1 christos ENTRY_BEGIN 118 1.1 christos MATCH opcode qtype qname 119 1.1 christos ADJUST copy_id 120 1.1 christos REPLY QR NOERROR 121 1.1 christos SECTION QUESTION 122 1.1 christos ns.example.com. IN AAAA 123 1.1 christos SECTION ANSWER 124 1.1 christos ENTRY_END 125 1.1 christos 126 1.1 christos ENTRY_BEGIN 127 1.1 christos MATCH opcode qtype qname 128 1.1 christos ADJUST copy_id 129 1.1 christos REPLY QR NOERROR 130 1.1 christos SECTION QUESTION 131 1.1 christos www.example.com. IN A 132 1.1 christos SECTION ANSWER 133 1.1 christos www.example.com. IN A 192.20.30.40 134 1.1 christos SECTION AUTHORITY 135 1.1 christos example.com. IN NS ns.example.com. 136 1.1 christos SECTION ADDITIONAL 137 1.1 christos ns.example.com. IN A 1.2.3.4 138 1.1 christos ENTRY_END 139 1.1 christos 140 1.1 christos ENTRY_BEGIN 141 1.1 christos MATCH opcode qtype qname 142 1.1 christos ADJUST copy_id 143 1.1 christos REPLY QR NOERROR 144 1.1 christos SECTION QUESTION 145 1.1 christos mail.example.com. IN AAAA 146 1.1 christos SECTION ANSWER 147 1.1 christos mail.example.com. IN AAAA fe80::15 148 1.1 christos SECTION AUTHORITY 149 1.1 christos example.com. IN NS ns.example.com. 150 1.1 christos SECTION ADDITIONAL 151 1.1 christos ns.example.com. IN A 1.2.3.4 152 1.1 christos ENTRY_END 153 1.1 christos 154 1.1 christos ENTRY_BEGIN 155 1.1 christos MATCH opcode qtype qname 156 1.1 christos ADJUST copy_id 157 1.1 christos REPLY QR NOERROR 158 1.1 christos SECTION QUESTION 159 1.1 christos foo.example.com. IN A 160 1.1 christos SECTION ANSWER 161 1.1 christos foo.example.com. IN A 10.20.30.40 162 1.1 christos SECTION AUTHORITY 163 1.1 christos example.com. IN NS ns.example.com. 164 1.1 christos SECTION ADDITIONAL 165 1.1 christos ns.example.com. IN A 1.2.3.4 166 1.1 christos ENTRY_END 167 1.1 christos 168 1.1 christos ENTRY_BEGIN 169 1.1 christos MATCH opcode qtype qname 170 1.1 christos ADJUST copy_id 171 1.1 christos REPLY QR NOERROR 172 1.1 christos SECTION QUESTION 173 1.1 christos toss.example.com. IN A 174 1.1 christos SECTION ANSWER 175 1.1 christos toss.example.com. IN A 10.20.30.40 176 1.1 christos toss.example.com. IN A 1.2.3.4 177 1.1 christos toss.example.com. IN A 10.20.30.41 178 1.1 christos SECTION AUTHORITY 179 1.1 christos example.com. IN NS ns.example.com. 180 1.1 christos SECTION ADDITIONAL 181 1.1 christos ns.example.com. IN A 1.2.3.4 182 1.1 christos ENTRY_END 183 1.1 christos RANGE_END 184 1.1 christos 185 1.1 christos ; public address is not scrubbed 186 1.1 christos STEP 1 QUERY 187 1.1 christos ENTRY_BEGIN 188 1.1 christos REPLY RD 189 1.1 christos SECTION QUESTION 190 1.1 christos www.example.com. IN A 191 1.1 christos ENTRY_END 192 1.1 christos 193 1.1 christos ; recursion happens here. 194 1.1 christos STEP 2 CHECK_ANSWER 195 1.1 christos ENTRY_BEGIN 196 1.1 christos MATCH all 197 1.1 christos REPLY QR RD RA NOERROR 198 1.1 christos SECTION QUESTION 199 1.1 christos www.example.com. IN A 200 1.1 christos SECTION ANSWER 201 1.1 christos www.example.com. IN A 192.20.30.40 202 1.1 christos SECTION AUTHORITY 203 1.1 christos example.com. IN NS ns.example.com. 204 1.1 christos SECTION ADDITIONAL 205 1.1 christos ns.example.com. IN A 1.2.3.4 206 1.1 christos ENTRY_END 207 1.1 christos 208 1.1 christos ; IPv4 address is scrubbed 209 1.1 christos STEP 3 QUERY 210 1.1 christos ENTRY_BEGIN 211 1.1 christos REPLY RD 212 1.1 christos SECTION QUESTION 213 1.1 christos foo.example.com. IN A 214 1.1 christos ENTRY_END 215 1.1 christos 216 1.1 christos ; recursion happens here. 217 1.1 christos STEP 10 CHECK_ANSWER 218 1.1 christos ENTRY_BEGIN 219 1.1 christos MATCH all 220 1.1 christos REPLY QR RD RA SERVFAIL 221 1.1 christos SECTION QUESTION 222 1.1 christos foo.example.com. IN A 223 1.1 christos SECTION ANSWER 224 1.1 christos ; scrubbed away 225 1.1 christos ;foo.example.com. IN A 10.20.30.40 226 1.1 christos ENTRY_END 227 1.1 christos 228 1.1 christos ; IPv6 address is scrubbed 229 1.1 christos STEP 20 QUERY 230 1.1 christos ENTRY_BEGIN 231 1.1 christos REPLY RD 232 1.1 christos SECTION QUESTION 233 1.1 christos mail.example.com. IN AAAA 234 1.1 christos ENTRY_END 235 1.1 christos 236 1.1 christos STEP 30 CHECK_ANSWER 237 1.1 christos ENTRY_BEGIN 238 1.1 christos MATCH all 239 1.1 christos REPLY QR RD RA SERVFAIL 240 1.1 christos SECTION QUESTION 241 1.1 christos mail.example.com. IN AAAA 242 1.1 christos SECTION ANSWER 243 1.1 christos ENTRY_END 244 1.1 christos 245 1.1 christos ; allowed domain is not scrubbed. 246 1.1 christos STEP 40 QUERY 247 1.1 christos ENTRY_BEGIN 248 1.1 christos REPLY RD 249 1.1 christos SECTION QUESTION 250 1.1 christos mail.example.net. IN A 251 1.1 christos ENTRY_END 252 1.1 christos 253 1.1 christos STEP 50 CHECK_ANSWER 254 1.1 christos ENTRY_BEGIN 255 1.1 christos MATCH all 256 1.1 christos REPLY QR RD RA NOERROR 257 1.1 christos SECTION QUESTION 258 1.1 christos mail.example.net. IN A 259 1.1 christos SECTION ANSWER 260 1.1 christos mail.example.net. IN A 10.20.30.40 261 1.1 christos ENTRY_END 262 1.1 christos 263 1.1 christos ; rest of RRset intact, only 10/8 tossed away. 264 1.1 christos STEP 60 QUERY 265 1.1 christos ENTRY_BEGIN 266 1.1 christos REPLY RD 267 1.1 christos SECTION QUESTION 268 1.1 christos toss.example.com. IN A 269 1.1 christos ENTRY_END 270 1.1 christos 271 1.1 christos STEP 70 CHECK_ANSWER 272 1.1 christos ENTRY_BEGIN 273 1.1 christos MATCH all 274 1.1 christos REPLY QR RD RA NOERROR 275 1.1 christos SECTION QUESTION 276 1.1 christos toss.example.com. IN A 277 1.1 christos SECTION ANSWER 278 1.1 christos ; toss.example.com. IN A 10.20.30.40 279 1.1 christos toss.example.com. IN A 1.2.3.4 280 1.1 christos SECTION AUTHORITY 281 1.1 christos example.com. IN NS ns.example.com. 282 1.1 christos SECTION ADDITIONAL 283 1.1 christos ns.example.com. IN A 1.2.3.4 284 1.1 christos ENTRY_END 285 1.1 christos 286 1.1 christos SCENARIO_END 287