1 ; config options 2 ; The island of trust is at test. 3 server: 4 trust-anchor: "test. DS 1444 8 2 8a87d067fd09a5965244fe2e317dd26d182c468e0a7f26ecc4c7b479bf89db9b" 5 val-override-date: "20201020135527" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: "no" 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 minimal-responses: no 11 iter-scrub-promiscuous: no 12 aggressive-nsec: yes 13 local-zone: test. nodefault 14 log-servfail: yes 15 module-config: "respip validator iterator" 16 response-ip: 192.0.2.0/24 redirect 17 response-ip-data: 192.0.2.0/24 "A 10.10.10.10" 18 19 stub-zone: 20 name: "." 21 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 22 CONFIG_END 23 24 SCENARIO_BEGIN Test respip with rewrite of a bogus reply 25 26 ; K.ROOT-SERVERS.NET. 27 RANGE_BEGIN 0 100 28 ADDRESS 193.0.14.129 29 ENTRY_BEGIN 30 MATCH opcode qtype qname 31 ADJUST copy_id 32 REPLY QR NOERROR 33 SECTION QUESTION 34 . IN NS 35 SECTION ANSWER 36 . IN NS K.ROOT-SERVERS.NET. 37 SECTION ADDITIONAL 38 K.ROOT-SERVERS.NET. IN A 193.0.14.129 39 ENTRY_END 40 41 ENTRY_BEGIN 42 MATCH opcode subdomain 43 ADJUST copy_id copy_query 44 REPLY QR NOERROR 45 SECTION QUESTION 46 test. IN NS 47 SECTION AUTHORITY 48 test. IN NS ns.test. 49 SECTION ADDITIONAL 50 ns.test. IN A 1.2.3.5 51 ENTRY_END 52 RANGE_END 53 54 ; ns.test 55 RANGE_BEGIN 0 100 56 ADDRESS 1.2.3.5 57 ENTRY_BEGIN 58 MATCH opcode qtype qname 59 ADJUST copy_id 60 REPLY QR AA NOERROR 61 SECTION QUESTION 62 test. IN NS 63 SECTION ANSWER 64 test. IN NS ns.test 65 test. 3600 IN RRSIG NS 8 1 3600 20201116135527 20201019135527 1444 test. RGCxIO32TbbLTk6xZmTr+fjYPH50hntBxeOQ2DIj2pDsmjALcHYtVkOfpfk2EhOhHZd+9PLuoJPbJh6a9NqLSFeBvr0XZoCZoQ2g0tCHUNHcH5EVjA2TuYBQem6DVYnPLJ3914aRx0uA1j42b8dC2xsam/XkOo7U+dLbUW2Os1s= 66 SECTION ADDITIONAL 67 ns.test. IN A 1.2.3.5 68 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 69 ENTRY_END 70 71 ENTRY_BEGIN 72 MATCH opcode qtype qname 73 ADJUST copy_id 74 REPLY QR AA NOERROR 75 SECTION QUESTION 76 ns.test. IN A 77 SECTION ANSWER 78 ns.test. IN A 1.2.3.5 79 ns.test. 3600 IN RRSIG A 8 2 3600 20201116135527 20201019135527 1444 test. GskCc4/k6GjH9V9Jz2V5L2XLiizbOeWkB0feSbf+aN859S3vxVvtuqkvIgwY4LafUO1QAn/pUcv9zA7rcFO++rlg+8t6gvZTo9p3v0bfeIv2uJDsfSBD5jDh0WXlxjekfnrKrQp7zE+GiA93tWwKUWKPvxXDgP+n886e6WcbHJw= 80 ENTRY_END 81 82 ENTRY_BEGIN 83 MATCH opcode qtype qname 84 ADJUST copy_id 85 REPLY QR AA NOERROR 86 SECTION QUESTION 87 ns.test. IN AAAA 88 SECTION AUTHORITY 89 test. 3600 IN SOA ns.test. host.test. 20201 3600 1800 604800 3600 90 test. 3600 IN RRSIG SOA 8 1 3600 20201116135527 20201019135527 1444 test. IZJIDmEgf0W7A5G7hvvZ2hUqJ9Trbv1/i7ySapDmPbYV9lVCmHHobySxO01yDhI2/Pvpsvxqrm1Tiv3BxH8uzZ4keKgiQjBsSy4htAsFct9I4E7ly2glPj/Fm3oun3PsjJDv5QYhx0KS7w4IQKU7Nc9pfJc92uoUI5bdoC1pRGw= 91 ns.test. 3600 IN NSEC nz.test. A RRSIG 92 ns.test. 3600 IN RRSIG NSEC 8 2 3600 20201116135527 20201019135527 1444 test. PElArVB3KPg8KHAP7lzcNbhFuXNxTsHNTn1dZVncB5qmWRdIaeKpaXDjpH0JSXMaelGFS+/QhuQ6Hmw9+4VyZFRqMzGhw4agUR/2bxABHcDIG4ZpUwyeSP61ATTfHUkQVxaH2wjCWI/tfmesdP2xVE4GXyUvCIBxU914MkZbULU= 93 ENTRY_END 94 95 ENTRY_BEGIN 96 MATCH opcode qtype qname 97 ADJUST copy_id 98 REPLY QR AA NOERROR 99 SECTION QUESTION 100 test. IN DNSKEY 101 SECTION ANSWER 102 test. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 103 test. 3600 IN RRSIG DNSKEY 8 1 3600 20201116135527 20201019135527 1444 test. UmRMS4iG9NBBHZYOtpwFFcJgbEb5SfHSgHd9XRe/8pTWM31WSDayn5ViPOBMqI1T5TXg2amc13dDI574xIM2oKMus3b5cBW72jJLW13jprBtslO6P8BMWb4HNnvLrJtQjwf3ErRirtTxinLmywQtmyr1cdthyG3Gp4N7i90fHSc= 104 SECTION ADDITIONAL 105 ENTRY_END 106 107 ENTRY_BEGIN 108 MATCH opcode qname qtype 109 ADJUST copy_id 110 REPLY QR AA NOERROR 111 SECTION QUESTION 112 example.test. IN DS 113 SECTION ANSWER 114 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 115 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 116 ENTRY_END 117 118 ENTRY_BEGIN 119 MATCH opcode subdomain 120 ADJUST copy_id copy_query 121 REPLY QR NOERROR 122 SECTION QUESTION 123 example.test. IN NS 124 SECTION AUTHORITY 125 example.test. IN NS ns.example.test. 126 example.test. 3600 IN DS 55567 8 2 a2d578906330a10a57d40462257b6ce038bad3f7bf4a45c46c46086e20a94b39 127 example.test. 3600 IN RRSIG DS 8 2 3600 20201116135527 20201019135527 1444 test. P7+FTYW2qHuJ4I1YbuvseEz5X1lOYAraGEHB3C5y0OOCQFmhmSiFRdquNi2NlpcS6FXLdsE0EU+Bo1+0atTG4EkMWXbpF21lrtbB51BdsnlX4Mzc/o375fvjiOMwmF6wPCUaOUN62jrVrhsE/hedaVyDphDToqL17ETohwgUO2I= 128 SECTION ADDITIONAL 129 ns.example.test. IN A 1.2.3.4 130 ENTRY_END 131 RANGE_END 132 133 ; ns.example.test. 134 RANGE_BEGIN 0 100 135 ADDRESS 1.2.3.4 136 ENTRY_BEGIN 137 MATCH opcode qtype qname 138 ADJUST copy_id 139 REPLY QR NOERROR 140 SECTION QUESTION 141 example.test. IN NS 142 SECTION ANSWER 143 example.test. IN NS ns.example.test. 144 example.test. 3600 IN RRSIG NS 8 2 3600 20201116135527 20201019135527 55567 example.test. l1JT0wMlK0YI7/CWHzexf/k0iafUhCgN+BdgjBXIRXmSQNf4HDTiAkbcWL2/15qtnp12nQy9JeiTdSQ3vtPoHAJX4C5uTWaze4ms+Wrrf+n92sLCjacP9x50uuicH3URT6cKb1QCAPwlvlWxIlZjAMYFScSns7+C441NMJT8aE4= 145 SECTION ADDITIONAL 146 ns.example.test. IN A 1.2.3.4 147 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 148 ENTRY_END 149 150 ENTRY_BEGIN 151 MATCH opcode qtype qname 152 ADJUST copy_id 153 REPLY QR AA NOERROR 154 SECTION QUESTION 155 ns.example.test. IN A 156 SECTION ANSWER 157 ns.example.test. IN A 1.2.3.4 158 ns.example.test. 3600 IN RRSIG A 8 3 3600 20201116135527 20201019135527 55567 example.test. 2PWaVaccZFQgfPKXNsdEGYUVaashCAj1ZhBo9XRt5eQKUFvZcauBjMnXIuxZFyWeootn1fZGw6GuPI5W48Y0FDx38H6adprkFgQikso2Y64jDdDMWznSo38Z/XqP+U0+kq4vmwonvmEMpm7hKnNEXvhqGKyGzyBwb+CZVJ2L8Eo= 159 ENTRY_END 160 161 ENTRY_BEGIN 162 MATCH opcode qtype qname 163 ADJUST copy_id 164 REPLY QR AA NOERROR 165 SECTION QUESTION 166 ns.example.test. IN AAAA 167 SECTION AUTHORITY 168 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 169 example.test. 3600 IN RRSIG SOA 8 2 3600 20201116135527 20201019135527 55567 example.test. 2UUkScBAN37fJpSrelhE8DotKvmOzj3q9wicaanCIaCv95DE4nQnePih5B+ek3FIRjB/Uv2+z4Ro5Uxy94XAnlK0rCkDLSa0U9U7KP0ytc88sevO0x1SCPAMoZoJO6JqHkv42pdh54WSz+Zb/D8npY0j/tksHe/uX+VQnMymgb8= 170 ns.example.test. 3600 IN NSEC nz.example.test. A RRSIG 171 example.test. 3600 IN SOA ns.example.test. host.example.test. 20301 3600 1800 604800 3600 172 ENTRY_END 173 174 ; response to DNSKEY priming query 175 ENTRY_BEGIN 176 MATCH opcode qtype qname 177 ADJUST copy_id 178 REPLY QR NOERROR 179 SECTION QUESTION 180 example.test. IN DNSKEY 181 SECTION ANSWER 182 example.test. 3600 IN DNSKEY 257 3 8 AwEAAdug/L739i0mgN2nuK/bhxu3wFn5Ud9nK2+XUmZQlPUEZUC5YZvm1rfMmEWTGBn87fFxEu/kjFZHJ55JLzqsbbpVHLbmKCTT2gYR2FV2WDKROGKuYbVkJIXdKAjJ0ONuK507NinYvlWXIoxHn22KAWOd9wKgSTNHBlmGkX+ts3hh ;{id = 55567 (ksk), size = 1024b} 183 example.test. 3600 IN RRSIG DNSKEY 8 2 3600 20201116135527 20201019135527 55567 example.test. IbWMC6quOuZFNPAVxQLqCJ9nLhindBo826rnLcg5yMgs9dGUSPOCXAfHTmbgJAUNs9HTFfrJWNvasnETs0UOpmEuifGwWdH1OlME7Gny4RL2QmITUFeMW81Jz1tiVQxFXl6yxT0jxOxvz+bqMHlrz+8IeWQXcO+GZTPu8ueq30g= 184 ENTRY_END 185 186 ; response to query of interest 187 ENTRY_BEGIN 188 MATCH opcode qtype qname 189 ADJUST copy_id 190 REPLY QR AA NOERROR 191 SECTION QUESTION 192 www.example.test. IN A 193 SECTION ANSWER 194 ; this is expired 195 www.example.test. 3600 IN A 192.0.2.1 196 www.example.test. 3600 IN RRSIG A 8 3 3600 20181116135527 20181019135527 55567 example.test. GIyjRM2i5plokjqjH7DRCaEi3AnP8+Wf02fOW6vrDSThr/yvvFXYKLhYwfddPNZRehANOmLQxuXyk6pEHh26Mi7T2Gh7n0SNkQ79e3Ba4Zu6Pih0nRBuEDvlSXjcFzvY9jx+7zZolg3KW8eC/Fn7moxAuDT/+1ZgZdhMOQ802+Q= 197 ENTRY_END 198 RANGE_END 199 200 STEP 1 QUERY 201 ENTRY_BEGIN 202 REPLY RD DO 203 SECTION QUESTION 204 www.example.test. IN A 205 ENTRY_END 206 207 STEP 10 CHECK_ANSWER 208 ENTRY_BEGIN 209 MATCH all 210 REPLY QR RD RA DO SERVFAIL 211 SECTION QUESTION 212 www.example.test. IN A 213 SECTION ANSWER 214 ENTRY_END 215 216 SCENARIO_END 217