1 ; config options 2 server: 3 module-config: "respip validator iterator" 4 target-fetch-policy: "0 0 0 0 0" 5 qname-minimisation: no 6 rrset-roundrobin: no 7 access-control: 192.0.0.0/8 allow 8 9 rpz: 10 name: "rpz.example.com" 11 rpz-log: yes 12 rpz-log-name: "rpz.example.com" 13 zonefile: 14 TEMPFILE_NAME rpz.example.com 15 TEMPFILE_CONTENTS rpz.example.com 16 rpz.example.com. 3600 IN SOA ns.rpz.example.com. hostmaster.rpz.example.com. 1 3600 900 86400 3600 17 rpz.example.com. 3600 IN NS ns.rpz.example.net. 18 a.foo.rpz.example.com. 120 IN A 10.99.99.99 19 TEMPFILE_END 20 21 stub-zone: 22 name: "." 23 stub-addr: 10.20.30.40 24 25 CONFIG_END 26 27 SCENARIO_BEGIN Test RPZ with cached CNAME to A record 28 29 RANGE_BEGIN 0 100 30 ADDRESS 10.20.30.40 31 32 ENTRY_BEGIN 33 MATCH opcode qname qtype 34 ADJUST copy_id 35 REPLY QR NOERROR AA 36 SECTION QUESTION 37 . IN NS 38 SECTION ANSWER 39 . IN NS ns. 40 SECTION ADDITIONAL 41 ns. IN NS 10.20.30.40 42 ENTRY_END 43 44 ENTRY_BEGIN 45 MATCH opcode qname qtype 46 ADJUST copy_id 47 REPLY QR NOERROR AA 48 SECTION QUESTION 49 b.foo. IN A 50 SECTION ANSWER 51 b.foo. 30 CNAME a.foo. 52 a.foo. 30 A 1.2.3.4 53 ENTRY_END 54 55 ENTRY_BEGIN 56 MATCH opcode qname qtype 57 ADJUST copy_id 58 REPLY QR NOERROR AA 59 SECTION QUESTION 60 a.foo. IN A 61 SECTION ANSWER 62 a.foo. A 1.2.3.4 63 ENTRY_END 64 65 RANGE_END 66 67 STEP 10 QUERY 68 ENTRY_BEGIN 69 REPLY RD 70 SECTION QUESTION 71 a.foo. IN A 72 ENTRY_END 73 74 STEP 20 CHECK_ANSWER 75 ENTRY_BEGIN 76 MATCH all 77 REPLY QR RD RA AA NOERROR 78 SECTION QUESTION 79 a.foo. IN A 80 SECTION ANSWER 81 a.foo. 120 A 10.99.99.99 82 ENTRY_END 83 84 STEP 30 QUERY 85 ENTRY_BEGIN 86 REPLY RD 87 SECTION QUESTION 88 b.foo. IN A 89 ENTRY_END 90 91 STEP 40 CHECK_ANSWER 92 ENTRY_BEGIN 93 MATCH all 94 REPLY QR RD RA AA NOERROR 95 SECTION QUESTION 96 b.foo. IN A 97 SECTION ANSWER 98 b.foo. 30 CNAME a.foo. 99 a.foo. 120 A 10.99.99.99 100 ENTRY_END 101 102 STEP 50 TIME_PASSES ELAPSE 3 103 104 STEP 60 QUERY 105 ENTRY_BEGIN 106 REPLY RD 107 SECTION QUESTION 108 b.foo. IN A 109 ENTRY_END 110 111 STEP 70 CHECK_ANSWER 112 ENTRY_BEGIN 113 MATCH all 114 REPLY QR RD RA AA NOERROR 115 SECTION QUESTION 116 b.foo. IN A 117 SECTION ANSWER 118 b.foo. 30 CNAME a.foo. 119 a.foo. 120 A 10.99.99.99 120 ENTRY_END 121 122 SCENARIO_END 123
Indexes created Mon Jun 01 00:24:59 UTC 2026