1 ; config options 2 server: 3 harden-referral-path: no 4 target-fetch-policy: "0 0 0 0 0" 5 qname-minimisation: "no" 6 minimal-responses: no 7 iter-scrub-promiscuous: no 8 9 stub-zone: 10 name: "." 11 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 12 CONFIG_END 13 14 SCENARIO_BEGIN Test scrub of CNAME in answer section 15 16 STEP 10 QUERY 17 ENTRY_BEGIN 18 REPLY RD 19 SECTION QUESTION 20 www.example.com. IN A 21 ENTRY_END 22 23 ; root prime is sent 24 STEP 20 CHECK_OUT_QUERY 25 ENTRY_BEGIN 26 MATCH qname qtype opcode 27 SECTION QUESTION 28 . IN NS 29 ENTRY_END 30 STEP 30 REPLY 31 ENTRY_BEGIN 32 MATCH opcode qtype qname 33 ADJUST copy_id 34 REPLY QR AA NOERROR 35 SECTION QUESTION 36 . IN NS 37 SECTION ANSWER 38 . IN NS K.ROOT-SERVERS.NET. 39 SECTION ADDITIONAL 40 K.ROOT-SERVERS.NET. IN A 193.0.14.129 41 ENTRY_END 42 43 ; query sent to root server 44 STEP 40 CHECK_OUT_QUERY 45 ENTRY_BEGIN 46 MATCH qname qtype opcode 47 SECTION QUESTION 48 www.example.com. IN A 49 ENTRY_END 50 STEP 50 REPLY 51 ENTRY_BEGIN 52 MATCH opcode qtype qname 53 ADJUST copy_id 54 REPLY QR NOERROR 55 SECTION QUESTION 56 www.example.com. IN A 57 SECTION AUTHORITY 58 com. IN NS a.gtld-servers.net. 59 SECTION ADDITIONAL 60 a.gtld-servers.net. IN A 192.5.6.30 61 ENTRY_END 62 63 ; query sent to .com server 64 STEP 60 CHECK_OUT_QUERY 65 ENTRY_BEGIN 66 MATCH qname qtype opcode 67 SECTION QUESTION 68 www.example.com. IN A 69 ENTRY_END 70 71 ; STEP 62 CHECK_OUT_QUERY 72 ; ENTRY_BEGIN 73 ; MATCH qname qtype opcode 74 ; SECTION QUESTION 75 ; com. IN NS 76 ; ENTRY_END 77 ; STEP 63 REPLY 78 ; ENTRY_BEGIN 79 ; MATCH opcode qtype qname 80 ; ADJUST copy_id 81 ; REPLY QR NOERROR 82 ; SECTION QUESTION 83 ; com. IN NS 84 ; SECTION ANSWER 85 ; com. IN NS a.gtld-servers.net. 86 ; SECTION ADDITIONAL 87 ; a.gtld-servers.net. IN A 192.5.6.30 88 ; ENTRY_END 89 90 STEP 70 REPLY 91 ENTRY_BEGIN 92 MATCH opcode qtype qname 93 ADJUST copy_id 94 REPLY QR NOERROR 95 SECTION QUESTION 96 www.example.com. IN A 97 SECTION AUTHORITY 98 example.com. IN NS ns1.example.com. 99 SECTION ADDITIONAL 100 ns1.example.com. IN A 168.192.2.2 101 ENTRY_END 102 103 ; this query reply has to be scrubbed 104 STEP 80 CHECK_OUT_QUERY 105 ENTRY_BEGIN 106 MATCH qname qtype opcode 107 SECTION QUESTION 108 www.example.com. IN A 109 ENTRY_END 110 111 ; STEP 82 CHECK_OUT_QUERY 112 ; ENTRY_BEGIN 113 ; MATCH qname qtype opcode 114 ; SECTION QUESTION 115 ; example.com. IN NS 116 ; ENTRY_END 117 ; STEP 83 REPLY 118 ; ENTRY_BEGIN 119 ; MATCH opcode qtype qname 120 ; ADJUST copy_id 121 ; REPLY QR NOERROR 122 ; SECTION QUESTION 123 ; example.com. IN NS 124 ; SECTION ANSWER 125 ; example.com. IN NS ns1.example.com. 126 ; SECTION ADDITIONAL 127 ; ns1.example.com. IN A 168.192.2.2 128 ; ENTRY_END 129 130 STEP 90 REPLY 131 ENTRY_BEGIN 132 MATCH opcode qtype qname 133 ADJUST copy_id 134 REPLY QR AA NOERROR 135 SECTION QUESTION 136 www.example.com. IN A 137 SECTION ANSWER 138 www.example.com. IN CNAME next.example.com. 139 next.example.com. IN A 10.20.30.0 140 SECTION AUTHORITY 141 example.com. IN NS ns1.example.com. 142 SECTION ADDITIONAL 143 ns1.example.com. IN A 168.192.2.2 144 ENTRY_END 145 146 ; iterator should try again and ask the other nameserver. 147 STEP 100 CHECK_OUT_QUERY 148 ENTRY_BEGIN 149 MATCH qname qtype opcode 150 SECTION QUESTION 151 next.example.com. IN A 152 ENTRY_END 153 STEP 110 REPLY 154 ENTRY_BEGIN 155 MATCH opcode qtype qname 156 ADJUST copy_id 157 REPLY QR AA NOERROR 158 SECTION QUESTION 159 next.example.com. IN A 160 SECTION ANSWER 161 next.example.com. IN A 10.20.30.40 162 SECTION AUTHORITY 163 example.com. IN NS ns1.example.com. 164 SECTION ADDITIONAL 165 ns1.example.com. IN A 168.192.2.2 166 ENTRY_END 167 168 ; is the final answer correct? 169 STEP 200 CHECK_ANSWER 170 ENTRY_BEGIN 171 MATCH all 172 REPLY QR RD RA 173 SECTION QUESTION 174 www.example.com. IN A 175 SECTION ANSWER 176 www.example.com. IN CNAME next.example.com. 177 next.example.com. IN A 10.20.30.40 178 SECTION AUTHORITY 179 example.com. IN NS ns1.example.com. 180 SECTION ADDITIONAL 181 ns1.example.com. IN A 168.192.2.2 182 ENTRY_END 183 184 SCENARIO_END 185