Home | History | Annotate | Line # | Download | only in testdata
      1 ; config options
      2 ; The island of trust is at test.
      3 server:
      4 	trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b"
      5 	val-override-date: "20201020135527"
      6 	target-fetch-policy: "0 0 0 0 0"
      7 	qname-minimisation: "no"
      8 	fake-sha1: yes
      9 	trust-anchor-signaling: no
     10 	minimal-responses: no
     11 	iter-scrub-promiscuous: no
     12 	aggressive-nsec: yes
     13 	local-zone: test. nodefault
     14 	log-servfail: yes
     15 	module-config: "respip validator iterator"
     16 	response-ip: 192.0.2.0/24 redirect
     17 	response-ip-data: 192.0.2.0/24 "A 10.10.10.10"
     18 
     19 stub-zone:
     20 	name: "."
     21 	stub-addr: 193.0.14.129 	# K.ROOT-SERVERS.NET.
     22 CONFIG_END
     23 
     24 SCENARIO_BEGIN Test respip with rewrite of a bogus reply
     25 
     26 ; K.ROOT-SERVERS.NET.
     27 RANGE_BEGIN 0 100
     28 	ADDRESS 193.0.14.129 
     29 ENTRY_BEGIN
     30 MATCH opcode qtype qname
     31 ADJUST copy_id
     32 REPLY QR NOERROR
     33 SECTION QUESTION
     34 . IN NS
     35 SECTION ANSWER
     36 . IN NS	K.ROOT-SERVERS.NET.
     37 SECTION ADDITIONAL
     38 K.ROOT-SERVERS.NET.	IN	A	193.0.14.129
     39 ENTRY_END
     40 
     41 ENTRY_BEGIN
     42 MATCH opcode subdomain
     43 ADJUST copy_id copy_query
     44 REPLY QR NOERROR
     45 SECTION QUESTION
     46 test. IN NS
     47 SECTION AUTHORITY
     48 test.	IN NS	ns.test.
     49 SECTION ADDITIONAL
     50 ns.test. IN A 1.2.3.5
     51 ENTRY_END
     52 RANGE_END
     53 
     54 ; ns.test
     55 RANGE_BEGIN 0 100
     56 	ADDRESS 1.2.3.5
     57 ENTRY_BEGIN
     58 MATCH opcode qtype qname
     59 ADJUST copy_id
     60 REPLY QR AA NOERROR
     61 SECTION QUESTION
     62 test. IN NS
     63 SECTION ANSWER
     64 test.    IN NS   ns.test
     65 test.	3600	IN	RRSIG	NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s=
     66 SECTION ADDITIONAL
     67 ns.test. IN A 1.2.3.5
     68 ns.test.	3600	IN	RRSIG	A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw=
     69 ENTRY_END
     70 
     71 ENTRY_BEGIN
     72 MATCH opcode qtype qname
     73 ADJUST copy_id
     74 REPLY QR AA NOERROR
     75 SECTION QUESTION
     76 ns.test. IN A
     77 SECTION ANSWER
     78 ns.test. IN A 1.2.3.5
     79 ns.test.	3600	IN	RRSIG	A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw=
     80 ENTRY_END
     81 
     82 ENTRY_BEGIN
     83 MATCH opcode qtype qname
     84 ADJUST copy_id
     85 REPLY QR AA NOERROR
     86 SECTION QUESTION
     87 ns.test. IN AAAA
     88 SECTION AUTHORITY
     89 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600
     90 test.	3600	IN	RRSIG	SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw=
     91 ns.test. 3600 IN NSEC nz.test. A RRSIG
     92 ns.test.	3600	IN	RRSIG	NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU=
     93 ENTRY_END
     94 
     95 ENTRY_BEGIN
     96 MATCH opcode qtype qname
     97 ADJUST copy_id
     98 REPLY QR AA NOERROR
     99 SECTION QUESTION
    100 test. IN DNSKEY
    101 SECTION ANSWER
    102 test.    3600    IN      DNSKEY  257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b}
    103 test.	3600	IN	RRSIG	DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc=
    104 SECTION ADDITIONAL
    105 ENTRY_END
    106 
    107 ENTRY_BEGIN
    108 MATCH opcode qname qtype
    109 ADJUST copy_id
    110 REPLY QR AA NOERROR
    111 SECTION QUESTION
    112 example.test. IN DS
    113 SECTION ANSWER
    114 example.test.	3600	IN	DS	55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39
    115 example.test.	3600	IN	RRSIG	DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I=
    116 ENTRY_END
    117 
    118 ENTRY_BEGIN
    119 MATCH opcode subdomain
    120 ADJUST copy_id copy_query
    121 REPLY QR NOERROR
    122 SECTION QUESTION
    123 example.test. IN NS
    124 SECTION AUTHORITY
    125 example.test.    IN NS   ns.example.test.
    126 example.test.	3600	IN	DS	55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39
    127 example.test.	3600	IN	RRSIG	DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I=
    128 SECTION ADDITIONAL
    129 ns.example.test. IN A 1.2.3.4
    130 ENTRY_END
    131 RANGE_END
    132 
    133 ; ns.example.test.
    134 RANGE_BEGIN 0 100
    135 	ADDRESS 1.2.3.4
    136 ENTRY_BEGIN
    137 MATCH opcode qtype qname
    138 ADJUST copy_id
    139 REPLY QR NOERROR
    140 SECTION QUESTION
    141 example.test. IN NS
    142 SECTION ANSWER
    143 example.test.    IN NS   ns.example.test.
    144 example.test.	3600	IN	RRSIG	NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4=
    145 SECTION ADDITIONAL
    146 ns.example.test.         IN      A       1.2.3.4
    147 ns.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo=
    148 ENTRY_END
    149 
    150 ENTRY_BEGIN
    151 MATCH opcode qtype qname
    152 ADJUST copy_id
    153 REPLY QR AA NOERROR
    154 SECTION QUESTION
    155 ns.example.test. IN A
    156 SECTION ANSWER
    157 ns.example.test.         IN      A       1.2.3.4
    158 ns.example.test.	3600	IN	RRSIG	A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo=
    159 ENTRY_END
    160 
    161 ENTRY_BEGIN
    162 MATCH opcode qtype qname
    163 ADJUST copy_id
    164 REPLY QR AA NOERROR
    165 SECTION QUESTION
    166 ns.example.test. IN AAAA
    167 SECTION AUTHORITY
    168 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    169 example.test.	3600	IN	RRSIG	SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8=
    170 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG
    171 example.test.	3600	IN	SOA	ns.example.test. host.example.test. 20301 3600 1800 604800 3600
    172 ENTRY_END
    173 
    174 ; response to DNSKEY priming query
    175 ENTRY_BEGIN
    176 MATCH opcode qtype qname
    177 ADJUST copy_id
    178 REPLY QR NOERROR
    179 SECTION QUESTION
    180 example.test. IN DNSKEY
    181 SECTION ANSWER
    182 example.test.	3600	IN	DNSKEY	257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b}
    183 example.test.	3600	IN	RRSIG	DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g=
    184 ENTRY_END
    185 
    186 ; response to query of interest
    187 ENTRY_BEGIN
    188 MATCH opcode qtype qname
    189 ADJUST copy_id
    190 REPLY QR AA NOERROR
    191 SECTION QUESTION
    192 www.example.test. IN A
    193 SECTION ANSWER
    194 ; this is expired
    195 www.example.test.	3600	IN	A	192.0.2.1
    196 www.example.test.	3600	IN	RRSIG	A 8 3 3600 20181116135527 20181019135527 55567 example.test. GIyjRM2i5plokjqjH7DRCaEi3AnP8+Wf02fOW6vrDSThr/yvvFXYKLhYwfddPNZRehANOmLQxuXyk6pEHh26Mi7T2Gh7n0SNkQ79e3Ba4Zu6Pih0nRBuEDvlSXjcFzvY9jx+7zZolg3KW8eC/Fn7moxAuDT/+1ZgZdhMOQ802+Q=
    197 ENTRY_END
    198 RANGE_END
    199 
    200 STEP 1 QUERY
    201 ENTRY_BEGIN
    202 REPLY RD DO
    203 SECTION QUESTION
    204 www.example.test. IN A
    205 ENTRY_END
    206 
    207 STEP 10 CHECK_ANSWER
    208 ENTRY_BEGIN
    209 MATCH all
    210 REPLY QR RD RA DO SERVFAIL
    211 SECTION QUESTION
    212 www.example.test. IN A
    213 SECTION ANSWER
    214 ENTRY_END
    215 
    216 SCENARIO_END
    217