1 ; config options 2 ; The island of trust is at example.com 3 server: 4 qname-minimisation: no 5 local-zone: "example1.com." block_a 6 local-zone: "example2.com." block_aaaa 7 local-zone: "example3.com." block_a_wdata 8 local-data: "b.example3.com. A 1.2.3.5" 9 local-data: "b.example3.com. AAAA 1:2:3::5" 10 local-zone: "example4.com." block_aaaa_wdata 11 local-data: "b.example4.com. A 1.2.3.5" 12 local-data: "b.example4.com. AAAA 1:2:3::5" 13 14 stub-zone: 15 name: "." 16 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 17 CONFIG_END 18 19 SCENARIO_BEGIN test local data with block_a and block_aaaa 20 21 ; K.ROOT-SERVERS.NET. 22 RANGE_BEGIN 0 400 23 ADDRESS 193.0.14.129 24 ENTRY_BEGIN 25 MATCH opcode qtype qname 26 ADJUST copy_id 27 REPLY QR NOERROR 28 SECTION QUESTION 29 . IN NS 30 SECTION ANSWER 31 . IN NS K.ROOT-SERVERS.NET. 32 SECTION ADDITIONAL 33 K.ROOT-SERVERS.NET. IN A 193.0.14.129 34 ENTRY_END 35 36 ENTRY_BEGIN 37 MATCH opcode qtype qname 38 ADJUST copy_id 39 REPLY QR AA NOERROR 40 SECTION QUESTION 41 a.example1.com. IN A 42 SECTION ANSWER 43 a.example1.com. IN A 1.2.3.4 44 ENTRY_END 45 46 ENTRY_BEGIN 47 MATCH opcode qtype qname 48 ADJUST copy_id 49 REPLY QR AA NOERROR 50 SECTION QUESTION 51 a.example1.com. IN AAAA 52 SECTION ANSWER 53 a.example1.com. IN AAAA 1:2:3::4 54 ENTRY_END 55 56 ENTRY_BEGIN 57 MATCH opcode qtype qname 58 ADJUST copy_id 59 REPLY QR AA NOERROR 60 SECTION QUESTION 61 a.example2.com. IN A 62 SECTION ANSWER 63 a.example2.com. IN A 1.2.3.4 64 ENTRY_END 65 66 ENTRY_BEGIN 67 MATCH opcode qtype qname 68 ADJUST copy_id 69 REPLY QR AA NOERROR 70 SECTION QUESTION 71 a.example2.com. IN AAAA 72 SECTION ANSWER 73 a.example2.com. IN AAAA 1:2:3::4 74 ENTRY_END 75 76 ENTRY_BEGIN 77 MATCH opcode qtype qname 78 ADJUST copy_id 79 REPLY QR AA NOERROR 80 SECTION QUESTION 81 a.example3.com. IN A 82 SECTION ANSWER 83 a.example3.com. IN A 1.2.3.4 84 ENTRY_END 85 86 ENTRY_BEGIN 87 MATCH opcode qtype qname 88 ADJUST copy_id 89 REPLY QR AA NOERROR 90 SECTION QUESTION 91 a.example3.com. IN AAAA 92 SECTION ANSWER 93 a.example3.com. IN AAAA 1:2:3::4 94 ENTRY_END 95 96 ENTRY_BEGIN 97 MATCH opcode qtype qname 98 ADJUST copy_id 99 REPLY QR AA NOERROR 100 SECTION QUESTION 101 a.example4.com. IN A 102 SECTION ANSWER 103 a.example4.com. IN A 1.2.3.4 104 ENTRY_END 105 106 ENTRY_BEGIN 107 MATCH opcode qtype qname 108 ADJUST copy_id 109 REPLY QR AA NOERROR 110 SECTION QUESTION 111 a.example4.com. IN AAAA 112 SECTION ANSWER 113 a.example4.com. IN AAAA 1:2:3::4 114 ENTRY_END 115 RANGE_END 116 117 ; block_a for example1.com 118 STEP 1 QUERY 119 ENTRY_BEGIN 120 REPLY RD DO 121 SECTION QUESTION 122 a.example1.com. IN A 123 ENTRY_END 124 125 ; block_a blocks A 126 STEP 10 CHECK_ANSWER 127 ENTRY_BEGIN 128 MATCH all 129 REPLY QR AA RD RA DO NOERROR 130 SECTION QUESTION 131 a.example1.com. IN A 132 SECTION ANSWER 133 SECTION AUTHORITY 134 ENTRY_END 135 136 STEP 20 QUERY 137 ENTRY_BEGIN 138 REPLY RD DO 139 SECTION QUESTION 140 a.example1.com. IN AAAA 141 ENTRY_END 142 143 ; block_a allows AAAA from upstream 144 STEP 30 CHECK_ANSWER 145 ENTRY_BEGIN 146 MATCH all 147 REPLY QR RD RA DO NOERROR 148 SECTION QUESTION 149 a.example1.com. IN AAAA 150 SECTION ANSWER 151 a.example1.com. IN AAAA 1:2:3::4 152 ENTRY_END 153 154 ; block_aaaa for example2.com 155 STEP 40 QUERY 156 ENTRY_BEGIN 157 REPLY RD DO 158 SECTION QUESTION 159 a.example2.com. IN A 160 ENTRY_END 161 162 ; block_aaaa allows A from upstream 163 STEP 50 CHECK_ANSWER 164 ENTRY_BEGIN 165 MATCH all 166 REPLY QR RD RA DO NOERROR 167 SECTION QUESTION 168 a.example2.com. IN A 169 SECTION ANSWER 170 a.example2.com. IN A 1.2.3.4 171 ENTRY_END 172 173 STEP 60 QUERY 174 ENTRY_BEGIN 175 REPLY RD DO 176 SECTION QUESTION 177 a.example2.com. IN AAAA 178 ENTRY_END 179 180 ; block_aaaa blocks AAAA 181 STEP 70 CHECK_ANSWER 182 ENTRY_BEGIN 183 MATCH all 184 REPLY QR AA RD RA DO NOERROR 185 SECTION QUESTION 186 a.example2.com. IN AAAA 187 SECTION ANSWER 188 ENTRY_END 189 190 ; block_a_wdata for example3.com 191 STEP 80 QUERY 192 ENTRY_BEGIN 193 REPLY RD DO 194 SECTION QUESTION 195 a.example3.com. IN A 196 ENTRY_END 197 198 ; block_a_wdata blocks A 199 STEP 90 CHECK_ANSWER 200 ENTRY_BEGIN 201 MATCH all 202 REPLY QR AA RD RA DO NOERROR 203 SECTION QUESTION 204 a.example3.com. IN A 205 SECTION ANSWER 206 ENTRY_END 207 208 STEP 100 QUERY 209 ENTRY_BEGIN 210 REPLY RD DO 211 SECTION QUESTION 212 a.example3.com. IN AAAA 213 ENTRY_END 214 215 ; block_a_wdata allows AAAA from upstream 216 STEP 110 CHECK_ANSWER 217 ENTRY_BEGIN 218 MATCH all 219 REPLY QR RD RA DO NOERROR 220 SECTION QUESTION 221 a.example3.com. IN AAAA 222 SECTION ANSWER 223 a.example3.com. IN AAAA 1:2:3::4 224 ENTRY_END 225 226 STEP 120 QUERY 227 ENTRY_BEGIN 228 REPLY RD DO 229 SECTION QUESTION 230 b.example3.com. IN A 231 ENTRY_END 232 233 ; block_a_wdata allows local-data A 234 STEP 130 CHECK_ANSWER 235 ENTRY_BEGIN 236 MATCH all 237 REPLY QR AA RD RA DO NOERROR 238 SECTION QUESTION 239 b.example3.com. IN A 240 SECTION ANSWER 241 b.example3.com. A 1.2.3.5 242 ENTRY_END 243 244 STEP 140 QUERY 245 ENTRY_BEGIN 246 REPLY RD DO 247 SECTION QUESTION 248 b.example3.com. IN AAAA 249 ENTRY_END 250 251 ; block_a_wdata allows local-data AAAA 252 STEP 150 CHECK_ANSWER 253 ENTRY_BEGIN 254 MATCH all 255 REPLY QR AA RD RA DO NOERROR 256 SECTION QUESTION 257 b.example3.com. IN AAAA 258 SECTION ANSWER 259 b.example3.com. AAAA 1:2:3::5 260 ENTRY_END 261 262 ; block_aaaa_wdata for example4.com 263 STEP 160 QUERY 264 ENTRY_BEGIN 265 REPLY RD DO 266 SECTION QUESTION 267 a.example4.com. IN A 268 ENTRY_END 269 270 ; block_aaaa_wdata allows A from upstream 271 STEP 170 CHECK_ANSWER 272 ENTRY_BEGIN 273 MATCH all 274 REPLY QR RD RA DO NOERROR 275 SECTION QUESTION 276 a.example4.com. IN A 277 SECTION ANSWER 278 a.example4.com. IN A 1.2.3.4 279 ENTRY_END 280 281 STEP 180 QUERY 282 ENTRY_BEGIN 283 REPLY RD DO 284 SECTION QUESTION 285 a.example4.com. IN AAAA 286 ENTRY_END 287 288 ; block_aaaa_wdata blocks AAAA 289 STEP 190 CHECK_ANSWER 290 ENTRY_BEGIN 291 MATCH all 292 REPLY QR AA RD RA DO NOERROR 293 SECTION QUESTION 294 a.example4.com. IN AAAA 295 SECTION ANSWER 296 ENTRY_END 297 298 STEP 200 QUERY 299 ENTRY_BEGIN 300 REPLY RD DO 301 SECTION QUESTION 302 b.example4.com. IN A 303 ENTRY_END 304 305 ; block_aaaa_wdata allows local-data A 306 STEP 210 CHECK_ANSWER 307 ENTRY_BEGIN 308 MATCH all 309 REPLY QR AA RD RA DO NOERROR 310 SECTION QUESTION 311 b.example4.com. IN A 312 SECTION ANSWER 313 b.example4.com. A 1.2.3.5 314 ENTRY_END 315 316 STEP 220 QUERY 317 ENTRY_BEGIN 318 REPLY RD DO 319 SECTION QUESTION 320 b.example4.com. IN AAAA 321 ENTRY_END 322 323 ; block_aaaa_wdata allows local-data AAAA 324 STEP 230 CHECK_ANSWER 325 ENTRY_BEGIN 326 MATCH all 327 REPLY QR AA RD RA DO NOERROR 328 SECTION QUESTION 329 b.example4.com. IN AAAA 330 SECTION ANSWER 331 b.example4.com. AAAA 1:2:3::5 332 ENTRY_END 333 334 SCENARIO_END 335