1 ; config options 2 ; The island of trust is at test. 3 server: 4 trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 5 val-override-date: "20201020135527" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: "no" 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 minimal-responses: no 11 iter-scrub-promiscuous: no 12 aggressive-nsec: yes 13 local-zone: test. nodefault 14 log-servfail: yes 15 16 stub-zone: 17 name: "." 18 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 19 CONFIG_END 20 21 SCENARIO_BEGIN Test overreaching NSEC with aggressive cache 22 23 ; K.ROOT-SERVERS.NET. 24 RANGE_BEGIN 0 100 25 ADDRESS 193.0.14.129 26 ENTRY_BEGIN 27 MATCH opcode qtype qname 28 ADJUST copy_id 29 REPLY QR NOERROR 30 SECTION QUESTION 31 . IN NS 32 SECTION ANSWER 33 . IN NS K.ROOT-SERVERS.NET. 34 SECTION ADDITIONAL 35 K.ROOT-SERVERS.NET. IN A 193.0.14.129 36 ENTRY_END 37 38 ENTRY_BEGIN 39 MATCH opcode subdomain 40 ADJUST copy_id copy_query 41 REPLY QR NOERROR 42 SECTION QUESTION 43 test. IN NS 44 SECTION AUTHORITY 45 test. IN NS ns.test. 46 SECTION ADDITIONAL 47 ns.test. IN A 1.2.3.5 48 ENTRY_END 49 RANGE_END 50 51 ; ns.test 52 RANGE_BEGIN 0 100 53 ADDRESS 1.2.3.5 54 ENTRY_BEGIN 55 MATCH opcode qtype qname 56 ADJUST copy_id 57 REPLY QR AA NOERROR 58 SECTION QUESTION 59 test. IN NS 60 SECTION ANSWER 61 test. IN NS ns.test 62 test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 63 SECTION ADDITIONAL 64 ns.test. IN A 1.2.3.5 65 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 66 ENTRY_END 67 68 ENTRY_BEGIN 69 MATCH opcode qtype qname 70 ADJUST copy_id 71 REPLY QR AA NOERROR 72 SECTION QUESTION 73 ns.test. IN A 74 SECTION ANSWER 75 ns.test. IN A 1.2.3.5 76 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 77 ENTRY_END 78 79 ENTRY_BEGIN 80 MATCH opcode qtype qname 81 ADJUST copy_id 82 REPLY QR AA NOERROR 83 SECTION QUESTION 84 ns.test. IN AAAA 85 SECTION AUTHORITY 86 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 87 test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 88 ns.test. 3600 IN NSEC nz.test. A RRSIG 89 ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 90 ENTRY_END 91 92 ENTRY_BEGIN 93 MATCH opcode qtype qname 94 ADJUST copy_id 95 REPLY QR AA NOERROR 96 SECTION QUESTION 97 test. IN DNSKEY 98 SECTION ANSWER 99 test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 100 test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 101 SECTION ADDITIONAL 102 ENTRY_END 103 104 ENTRY_BEGIN 105 MATCH opcode qname qtype 106 ADJUST copy_id 107 REPLY QR AA NOERROR 108 SECTION QUESTION 109 example.test. IN DS 110 SECTION ANSWER 111 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 112 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 113 ENTRY_END 114 115 ENTRY_BEGIN 116 MATCH opcode subdomain 117 ADJUST copy_id copy_query 118 REPLY QR NOERROR 119 SECTION QUESTION 120 example.test. IN NS 121 SECTION AUTHORITY 122 example.test. IN NS ns.example.test. 123 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 124 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 125 SECTION ADDITIONAL 126 ns.example.test. IN A 1.2.3.4 127 ENTRY_END 128 RANGE_END 129 130 ; ns.example.test. 131 RANGE_BEGIN 0 100 132 ADDRESS 1.2.3.4 133 ENTRY_BEGIN 134 MATCH opcode qtype qname 135 ADJUST copy_id 136 REPLY QR NOERROR 137 SECTION QUESTION 138 example.test. IN NS 139 SECTION ANSWER 140 example.test. IN NS ns.example.test. 141 example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 142 SECTION ADDITIONAL 143 ns.example.test. IN A 1.2.3.4 144 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 145 ENTRY_END 146 147 ENTRY_BEGIN 148 MATCH opcode qtype qname 149 ADJUST copy_id 150 REPLY QR AA NOERROR 151 SECTION QUESTION 152 ns.example.test. IN A 153 SECTION ANSWER 154 ns.example.test. IN A 1.2.3.4 155 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 156 ENTRY_END 157 158 ENTRY_BEGIN 159 MATCH opcode qtype qname 160 ADJUST copy_id 161 REPLY QR AA NOERROR 162 SECTION QUESTION 163 ns.example.test. IN AAAA 164 SECTION AUTHORITY 165 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 166 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 167 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 168 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 169 ENTRY_END 170 171 ; response to DNSKEY priming query 172 ENTRY_BEGIN 173 MATCH opcode qtype qname 174 ADJUST copy_id 175 REPLY QR NOERROR 176 SECTION QUESTION 177 example.test. IN DNSKEY 178 SECTION ANSWER 179 example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 180 example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 181 ENTRY_END 182 183 ; response to query of interest 184 ENTRY_BEGIN 185 MATCH opcode qtype qname 186 ADJUST copy_id 187 REPLY QR AA NOERROR 188 SECTION QUESTION 189 example.test. IN NSEC 190 SECTION ANSWER 191 ; normal record has next owner in example.test. 192 ; example.test. IN NSEC b.example.test. SOA DNSKEY NS RRSIG NSEC 193 example.test. IN NSEC b.foo.test. NS SOA RRSIG NSEC DNSKEY 194 example.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 55567 example.test. xxepzzIxsJURk4/eZrwcDm5jhQNHtf1OmnPuu3T/w8y5NWwzlgn/hL17xoI71dIgTJg2GAq97wxEUhp951jtGMCeLH2Dz5lDZXxQI4wf2Wl43u2mTBQFRagDwfAauFc6Z4FYI/biDZyYcylZ3A5Q6j6ifFnsgMTL+cP0UIEZBTQ= 195 ENTRY_END 196 RANGE_END 197 198 ; CD=1 query for type NSEC 199 STEP 1 QUERY 200 ENTRY_BEGIN 201 REPLY RD CD DO 202 SECTION QUESTION 203 example.test. IN NSEC 204 ENTRY_END 205 206 STEP 10 CHECK_ANSWER 207 ENTRY_BEGIN 208 MATCH all 209 REPLY QR RD CD RA DO NOERROR 210 SECTION QUESTION 211 example.test. IN NSEC 212 SECTION ANSWER 213 ; The overreaching NSEC is removed by the scrubber. 214 ENTRY_END 215 216 SCENARIO_END 217
Indexes created Mon Oct 26 00:26:21 UTC 2026