Home | History | Annotate | Line # | Download | only in testdata
      1 ; config options
      2 server:
      3 	module-config: "respip validator iterator"
      4 	target-fetch-policy: "0 0 0 0 0"
      5 	qname-minimisation: no
      6 	access-control: 192.0.0.0/8 allow
      7 
      8 rpz:
      9 	name: "rpz.example.com."
     10 	rpz-log: yes
     11 	rpz-log-name: "rpz.example.com"
     12 	zonefile:
     13 TEMPFILE_NAME rpz.example.com
     14 TEMPFILE_CONTENTS rpz.example.com
     15 $ORIGIN example.com.
     16 rpz	3600	IN	SOA	ns1.rpz.example.com. hostmaster.rpz.example.com. (
     17 		1379078166 28800 7200 604800 7200 )
     18 	3600	IN	NS	ns1.rpz.example.com.
     19 	3600	IN	NS	ns2.rpz.example.com.
     20 $ORIGIN rpz.example.com.
     21 www.gotham.a A 1.2.3.61
     22 www.gotham2.a CNAME g2.target.a.
     23 g2.target.a A 1.2.3.62
     24 www.gotham3.a CNAME g3.target.a.
     25 g3.target.a CNAME g3b.target.a.
     26 g3b.target.a A 1.2.3.63
     27 www.gotham4.a CNAME g4.target.a.
     28 g4.target.a CNAME g4b.target.a.
     29 g4b.target.a CNAME g4c.target.a.
     30 g4c.target.a A 1.2.3.64
     31 w2.gotham5.a A 1.2.3.65
     32 w2.gotham6.a CNAME g6.target.a.
     33 g6.target.a A 1.2.3.66
     34 w2.gotham7.a CNAME g7.target.a.
     35 g7.target.a CNAME g7b.target.a.
     36 g7b.target.a A 1.2.3.66
     37 ; ns1.gotham8.a
     38 32.48.30.20.10.rpz-nsip A 1.2.3.68
     39 ; ns1.gotham9.a
     40 32.49.30.20.10.rpz-nsip CNAME g9.target.a.
     41 g9.target.a A 1.2.3.69
     42 ; ns1.gotham10.a
     43 32.50.30.20.10.rpz-nsip CNAME g10.target.a.
     44 g10.target.a CNAME g10b.target.a.
     45 g10b.target.a A 1.2.3.70
     46 www.gotham11.a CNAME g11.target.a.
     47 www.gotham12.a CNAME g12.target.a.
     48 g12.target.a CNAME g12b.target.a.
     49 www.gotham13.a CNAME g13.target.a.
     50 g13.target.a CNAME g13b.target.a.
     51 g13b.target.a CNAME g13c.target.a.
     52 w2.gotham14.a CNAME g14.target.a.
     53 w2.gotham15.a CNAME g15.target.a.
     54 g15.target.a CNAME g15b.target.a.
     55 ; ns1.gotham16.a
     56 32.56.30.20.10.rpz-nsip CNAME g16.target.a.
     57 ; ns1.gotham17.a
     58 32.57.30.20.10.rpz-nsip CNAME g17.target.a.
     59 g17.target.a CNAME g17b.target.a.
     60 TEMPFILE_END
     61 
     62 stub-zone:
     63 	name: "a."
     64 	stub-addr: 10.20.30.40
     65 CONFIG_END
     66 
     67 SCENARIO_BEGIN Test RPZ handling of CNAMEs.
     68 
     69 ; a.
     70 RANGE_BEGIN 0 1000
     71 	ADDRESS 10.20.30.40
     72 ENTRY_BEGIN
     73 MATCH opcode subdomain
     74 ADJUST copy_id copy_query
     75 REPLY QR NOERROR
     76 SECTION QUESTION
     77 gotham5.a. IN NS
     78 SECTION AUTHORITY
     79 gotham5.a. NS ns1.gotham5.a.
     80 SECTION ADDITIONAL
     81 ns1.gotham5.a. A 10.20.30.45
     82 ENTRY_END
     83 
     84 ENTRY_BEGIN
     85 MATCH opcode subdomain
     86 ADJUST copy_id copy_query
     87 REPLY QR NOERROR
     88 SECTION QUESTION
     89 gotham6.a. IN NS
     90 SECTION AUTHORITY
     91 gotham6.a. NS ns1.gotham6.a.
     92 SECTION ADDITIONAL
     93 ns1.gotham6.a. A 10.20.30.46
     94 ENTRY_END
     95 
     96 ENTRY_BEGIN
     97 MATCH opcode subdomain
     98 ADJUST copy_id copy_query
     99 REPLY QR NOERROR
    100 SECTION QUESTION
    101 gotham7.a. IN NS
    102 SECTION AUTHORITY
    103 gotham7.a. NS ns1.gotham7.a.
    104 SECTION ADDITIONAL
    105 ns1.gotham7.a. A 10.20.30.47
    106 ENTRY_END
    107 
    108 ENTRY_BEGIN
    109 MATCH opcode subdomain
    110 ADJUST copy_id copy_query
    111 REPLY QR NOERROR
    112 SECTION QUESTION
    113 gotham8.a. IN NS
    114 SECTION AUTHORITY
    115 gotham8.a. NS ns1.gotham8.a.
    116 SECTION ADDITIONAL
    117 ns1.gotham8.a. A 10.20.30.48
    118 ENTRY_END
    119 
    120 ENTRY_BEGIN
    121 MATCH opcode subdomain
    122 ADJUST copy_id copy_query
    123 REPLY QR NOERROR
    124 SECTION QUESTION
    125 gotham9.a. IN NS
    126 SECTION AUTHORITY
    127 gotham9.a. NS ns1.gotham9.a.
    128 SECTION ADDITIONAL
    129 ns1.gotham9.a. A 10.20.30.49
    130 ENTRY_END
    131 
    132 ENTRY_BEGIN
    133 MATCH opcode subdomain
    134 ADJUST copy_id copy_query
    135 REPLY QR NOERROR
    136 SECTION QUESTION
    137 gotham10.a. IN NS
    138 SECTION AUTHORITY
    139 gotham10.a. NS ns1.gotham10.a.
    140 SECTION ADDITIONAL
    141 ns1.gotham10.a. A 10.20.30.50
    142 ENTRY_END
    143 
    144 ENTRY_BEGIN
    145 MATCH opcode subdomain
    146 ADJUST copy_id copy_query
    147 REPLY QR NOERROR
    148 SECTION QUESTION
    149 gotham14.a. IN NS
    150 SECTION AUTHORITY
    151 gotham14.a. NS ns1.gotham14.a.
    152 SECTION ADDITIONAL
    153 ns1.gotham14.a. A 10.20.30.54
    154 ENTRY_END
    155 
    156 ENTRY_BEGIN
    157 MATCH opcode subdomain
    158 ADJUST copy_id copy_query
    159 REPLY QR NOERROR
    160 SECTION QUESTION
    161 gotham15.a. IN NS
    162 SECTION AUTHORITY
    163 gotham15.a. NS ns1.gotham15.a.
    164 SECTION ADDITIONAL
    165 ns1.gotham15.a. A 10.20.30.55
    166 ENTRY_END
    167 
    168 ENTRY_BEGIN
    169 MATCH opcode subdomain
    170 ADJUST copy_id copy_query
    171 REPLY QR NOERROR
    172 SECTION QUESTION
    173 gotham16.a. IN NS
    174 SECTION AUTHORITY
    175 gotham16.a. NS ns1.gotham16.a.
    176 SECTION ADDITIONAL
    177 ns1.gotham16.a. A 10.20.30.56
    178 ENTRY_END
    179 
    180 ENTRY_BEGIN
    181 MATCH opcode subdomain
    182 ADJUST copy_id copy_query
    183 REPLY QR NOERROR
    184 SECTION QUESTION
    185 gotham17.a. IN NS
    186 SECTION AUTHORITY
    187 gotham17.a. NS ns1.gotham17.a.
    188 SECTION ADDITIONAL
    189 ns1.gotham17.a. A 10.20.30.57
    190 ENTRY_END
    191 
    192 ENTRY_BEGIN
    193 MATCH opcode qtype qname
    194 ADJUST copy_id
    195 REPLY QR NOERROR
    196 SECTION QUESTION
    197 target.a. IN A
    198 SECTION ANSWER
    199 target.a. IN A 1.2.3.6
    200 ENTRY_END
    201 
    202 ENTRY_BEGIN
    203 MATCH opcode qtype qname
    204 ADJUST copy_id
    205 REPLY QR AA NOERROR
    206 SECTION QUESTION
    207 g11.target.a. IN A
    208 SECTION ANSWER
    209 g11.target.a. IN A 1.2.3.11
    210 ENTRY_END
    211 
    212 ENTRY_BEGIN
    213 MATCH opcode qtype qname
    214 ADJUST copy_id
    215 REPLY QR AA NOERROR
    216 SECTION QUESTION
    217 g12b.target.a. IN A
    218 SECTION ANSWER
    219 g12b.target.a. A 1.2.3.12
    220 ENTRY_END
    221 
    222 ENTRY_BEGIN
    223 MATCH opcode qtype qname
    224 ADJUST copy_id
    225 REPLY QR AA NOERROR
    226 SECTION QUESTION
    227 g13c.target.a. IN A
    228 SECTION ANSWER
    229 g13c.target.a. A 1.2.3.13
    230 ENTRY_END
    231 
    232 ENTRY_BEGIN
    233 MATCH opcode qtype qname
    234 ADJUST copy_id
    235 REPLY QR AA NOERROR
    236 SECTION QUESTION
    237 g14.target.a. IN A
    238 SECTION ANSWER
    239 g14.target.a. A 1.2.3.14
    240 ENTRY_END
    241 
    242 ENTRY_BEGIN
    243 MATCH opcode qtype qname
    244 ADJUST copy_id
    245 REPLY QR AA NOERROR
    246 SECTION QUESTION
    247 g15b.target.a. IN A
    248 SECTION ANSWER
    249 g15b.target.a. A 1.2.3.15
    250 ENTRY_END
    251 
    252 ENTRY_BEGIN
    253 MATCH opcode qtype qname
    254 ADJUST copy_id
    255 REPLY QR AA NOERROR
    256 SECTION QUESTION
    257 g16.target.a. IN A
    258 SECTION ANSWER
    259 g16.target.a. A 1.2.3.16
    260 ENTRY_END
    261 
    262 ENTRY_BEGIN
    263 MATCH opcode qtype qname
    264 ADJUST copy_id
    265 REPLY QR AA NOERROR
    266 SECTION QUESTION
    267 g17b.target.a. IN A
    268 SECTION ANSWER
    269 g17b.target.a. A 1.2.3.17
    270 ENTRY_END
    271 RANGE_END
    272 
    273 ; gotham5.a.
    274 RANGE_BEGIN 0 1000
    275 	ADDRESS 10.20.30.45
    276 ENTRY_BEGIN
    277 MATCH opcode qtype qname
    278 ADJUST copy_id
    279 REPLY QR AA NOERROR
    280 SECTION QUESTION
    281 www.gotham5.a. IN A
    282 SECTION ANSWER
    283 www.gotham5.a. CNAME w2.gotham5.a.
    284 ENTRY_END
    285 RANGE_END
    286 
    287 ; gotham6.a.
    288 RANGE_BEGIN 0 1000
    289 	ADDRESS 10.20.30.46
    290 ENTRY_BEGIN
    291 MATCH opcode qtype qname
    292 ADJUST copy_id
    293 REPLY QR NOERROR
    294 SECTION QUESTION
    295 www.gotham6.a. IN A
    296 SECTION ANSWER
    297 www.gotham6.a. CNAME w2.gotham6.a.
    298 ENTRY_END
    299 RANGE_END
    300 
    301 ; gotham7.a.
    302 RANGE_BEGIN 0 1000
    303 	ADDRESS 10.20.30.47
    304 ENTRY_BEGIN
    305 MATCH opcode qtype qname
    306 ADJUST copy_id
    307 REPLY QR AA NOERROR
    308 SECTION QUESTION
    309 www.gotham7.a. IN A
    310 SECTION ANSWER
    311 www.gotham7.a. CNAME w2.gotham7.a.
    312 ENTRY_END
    313 RANGE_END
    314 
    315 ; gotham14.a.
    316 RANGE_BEGIN 0 1000
    317 	ADDRESS 10.20.30.54
    318 ENTRY_BEGIN
    319 MATCH opcode qtype qname
    320 ADJUST copy_id
    321 REPLY QR AA NOERROR
    322 SECTION QUESTION
    323 www.gotham14.a. IN A
    324 SECTION ANSWER
    325 www.gotham14.a. CNAME w2.gotham14.a.
    326 ENTRY_END
    327 RANGE_END
    328 
    329 ; gotham15.a.
    330 RANGE_BEGIN 0 1000
    331 	ADDRESS 10.20.30.55
    332 ENTRY_BEGIN
    333 MATCH opcode qtype qname
    334 ADJUST copy_id
    335 REPLY QR AA NOERROR
    336 SECTION QUESTION
    337 www.gotham15.a. IN A
    338 SECTION ANSWER
    339 www.gotham15.a. CNAME w2.gotham15.a.
    340 ENTRY_END
    341 RANGE_END
    342 
    343 ; Test with zero rpz CNAMEs, rpz answer.
    344 STEP 10 QUERY
    345 ENTRY_BEGIN
    346 REPLY RD
    347 SECTION QUESTION
    348 www.gotham.a.	IN	A
    349 ENTRY_END
    350 
    351 STEP 11 CHECK_ANSWER
    352 ENTRY_BEGIN
    353 MATCH all
    354 REPLY QR RD RA AA NOERROR
    355 SECTION QUESTION
    356 www.gotham.a.	IN	A
    357 SECTION ANSWER
    358 www.gotham.a. A 1.2.3.61
    359 ENTRY_END
    360 
    361 ; Test with one rpz CNAME, rpz answer.
    362 STEP 20 QUERY
    363 ENTRY_BEGIN
    364 REPLY RD
    365 SECTION QUESTION
    366 www.gotham2.a.	IN	A
    367 ENTRY_END
    368 
    369 STEP 21 CHECK_ANSWER
    370 ENTRY_BEGIN
    371 MATCH all
    372 REPLY QR RD RA AA NOERROR
    373 SECTION QUESTION
    374 www.gotham2.a.	IN	A
    375 SECTION ANSWER
    376 www.gotham2.a. CNAME g2.target.a.
    377 g2.target.a. A 1.2.3.62
    378 ENTRY_END
    379 
    380 ; Test with two rpz CNAMEs, rpz answer.
    381 STEP 30 QUERY
    382 ENTRY_BEGIN
    383 REPLY RD
    384 SECTION QUESTION
    385 www.gotham3.a.	IN	A
    386 ENTRY_END
    387 
    388 STEP 31 CHECK_ANSWER
    389 ENTRY_BEGIN
    390 MATCH all
    391 REPLY QR RD RA AA NOERROR
    392 SECTION QUESTION
    393 www.gotham3.a.	IN	A
    394 SECTION ANSWER
    395 www.gotham3.a. CNAME g3.target.a.
    396 g3.target.a. CNAME g3b.target.a.
    397 g3b.target.a. A 1.2.3.63
    398 ENTRY_END
    399 
    400 ; Test with three rpz CNAMEs, rpz answer.
    401 STEP 40 QUERY
    402 ENTRY_BEGIN
    403 REPLY RD
    404 SECTION QUESTION
    405 www.gotham4.a.	IN	A
    406 ENTRY_END
    407 
    408 STEP 41 CHECK_ANSWER
    409 ENTRY_BEGIN
    410 MATCH all
    411 REPLY QR RD RA AA NOERROR
    412 SECTION QUESTION
    413 www.gotham4.a.	IN	A
    414 SECTION ANSWER
    415 www.gotham4.a. CNAME g4.target.a.
    416 g4.target.a. CNAME g4b.target.a.
    417 g4b.target.a. CNAME g4c.target.a.
    418 g4c.target.a. A 1.2.3.64
    419 ENTRY_END
    420 
    421 ; Test with a CNAME from upstream, zero rpz CNAMEs, rpz answer.
    422 STEP 50 QUERY
    423 ENTRY_BEGIN
    424 REPLY RD
    425 SECTION QUESTION
    426 www.gotham5.a.	IN	A
    427 ENTRY_END
    428 
    429 STEP 51 CHECK_ANSWER
    430 ENTRY_BEGIN
    431 MATCH all
    432 REPLY QR RD RA AA NOERROR
    433 SECTION QUESTION
    434 www.gotham5.a.	IN	A
    435 SECTION ANSWER
    436 www.gotham5.a. CNAME w2.gotham5.a.
    437 w2.gotham5.a. A 1.2.3.65
    438 ENTRY_END
    439 
    440 ; Test with a CNAME from upstream, one rpz CNAME, rpz answer.
    441 STEP 60 QUERY
    442 ENTRY_BEGIN
    443 REPLY RD
    444 SECTION QUESTION
    445 www.gotham6.a.	IN	A
    446 ENTRY_END
    447 
    448 STEP 61 CHECK_ANSWER
    449 ENTRY_BEGIN
    450 MATCH all
    451 REPLY QR RD RA AA NOERROR
    452 SECTION QUESTION
    453 www.gotham6.a.	IN	A
    454 SECTION ANSWER
    455 www.gotham6.a. CNAME w2.gotham6.a.
    456 w2.gotham6.a. CNAME g6.target.a.
    457 g6.target.a. A 1.2.3.66
    458 ENTRY_END
    459 
    460 ; Test with a CNAME from upstream, two rpz CNAMEs, rpz answer.
    461 STEP 70 QUERY
    462 ENTRY_BEGIN
    463 REPLY RD
    464 SECTION QUESTION
    465 www.gotham7.a.	IN	A
    466 ENTRY_END
    467 
    468 STEP 71 CHECK_ANSWER
    469 ENTRY_BEGIN
    470 MATCH all
    471 REPLY QR RD RA AA NOERROR
    472 SECTION QUESTION
    473 www.gotham7.a.	IN	A
    474 SECTION ANSWER
    475 www.gotham7.a. CNAME w2.gotham7.a.
    476 w2.gotham7.a. CNAME g7.target.a.
    477 g7.target.a. CNAME g7b.target.a.
    478 g7b.target.a. A 1.2.3.66
    479 ENTRY_END
    480 
    481 ; Test with a CNAME from cache, zero rpz CNAMEs, rpz answer.
    482 STEP 80 QUERY
    483 ENTRY_BEGIN
    484 REPLY RD
    485 SECTION QUESTION
    486 www.gotham5.a.	IN	A
    487 ENTRY_END
    488 
    489 STEP 81 CHECK_ANSWER
    490 ENTRY_BEGIN
    491 MATCH all
    492 REPLY QR RD RA AA NOERROR
    493 SECTION QUESTION
    494 www.gotham5.a.	IN	A
    495 SECTION ANSWER
    496 www.gotham5.a. CNAME w2.gotham5.a.
    497 w2.gotham5.a. A 1.2.3.65
    498 ENTRY_END
    499 
    500 ; Test with a CNAME from cache, one rpz CNAME, rpz answer.
    501 STEP 90 QUERY
    502 ENTRY_BEGIN
    503 REPLY RD
    504 SECTION QUESTION
    505 www.gotham6.a.	IN	A
    506 ENTRY_END
    507 
    508 STEP 91 CHECK_ANSWER
    509 ENTRY_BEGIN
    510 MATCH all
    511 REPLY QR RD RA AA NOERROR
    512 SECTION QUESTION
    513 www.gotham6.a.	IN	A
    514 SECTION ANSWER
    515 www.gotham6.a. CNAME w2.gotham6.a.
    516 w2.gotham6.a. CNAME g6.target.a.
    517 g6.target.a. A 1.2.3.66
    518 ENTRY_END
    519 
    520 ; Test with a CNAME from cache, two rpz CNAMEs, rpz answer.
    521 STEP 100 QUERY
    522 ENTRY_BEGIN
    523 REPLY RD
    524 SECTION QUESTION
    525 www.gotham7.a.	IN	A
    526 ENTRY_END
    527 
    528 STEP 101 CHECK_ANSWER
    529 ENTRY_BEGIN
    530 MATCH all
    531 REPLY QR RD RA AA NOERROR
    532 SECTION QUESTION
    533 www.gotham7.a.	IN	A
    534 SECTION ANSWER
    535 www.gotham7.a. CNAME w2.gotham7.a.
    536 w2.gotham7.a. CNAME g7.target.a.
    537 g7.target.a. CNAME g7b.target.a.
    538 g7b.target.a. A 1.2.3.66
    539 ENTRY_END
    540 
    541 ; Test with lookup from nameserver, zero rpz CNAMEs, rpz nsip answer.
    542 STEP 110 QUERY
    543 ENTRY_BEGIN
    544 REPLY RD
    545 SECTION QUESTION
    546 www.gotham8.a.	IN	A
    547 ENTRY_END
    548 
    549 STEP 111 CHECK_ANSWER
    550 ENTRY_BEGIN
    551 MATCH all
    552 REPLY QR RD RA AA NOERROR
    553 SECTION QUESTION
    554 www.gotham8.a.	IN	A
    555 SECTION ANSWER
    556 www.gotham8.a. A 1.2.3.68
    557 ENTRY_END
    558 
    559 ; Test with lookup from nameserver, one rpz CNAME, rpz nsip answer.
    560 STEP 120 QUERY
    561 ENTRY_BEGIN
    562 REPLY RD
    563 SECTION QUESTION
    564 www.gotham9.a.	IN	A
    565 ENTRY_END
    566 
    567 STEP 121 CHECK_ANSWER
    568 ENTRY_BEGIN
    569 MATCH all
    570 REPLY QR RD RA AA NOERROR
    571 SECTION QUESTION
    572 www.gotham9.a.	IN	A
    573 SECTION ANSWER
    574 www.gotham9.a. CNAME g9.target.a.
    575 g9.target.a. A 1.2.3.69
    576 ENTRY_END
    577 
    578 ; Test with lookup from nameserver, two rpz CNAMEs, rpz nsip answer.
    579 STEP 130 QUERY
    580 ENTRY_BEGIN
    581 REPLY RD
    582 SECTION QUESTION
    583 www.gotham10.a.	IN	A
    584 ENTRY_END
    585 
    586 STEP 131 CHECK_ANSWER
    587 ENTRY_BEGIN
    588 MATCH all
    589 REPLY QR RD RA AA NOERROR
    590 SECTION QUESTION
    591 www.gotham10.a.	IN	A
    592 SECTION ANSWER
    593 www.gotham10.a. CNAME g10.target.a.
    594 g10.target.a. CNAME g10b.target.a.
    595 g10b.target.a. A 1.2.3.70
    596 ENTRY_END
    597 
    598 ; Test with one rpz CNAME, upstream answer.
    599 STEP 140 QUERY
    600 ENTRY_BEGIN
    601 REPLY RD
    602 SECTION QUESTION
    603 www.gotham11.a.	IN	A
    604 ENTRY_END
    605 
    606 STEP 141 CHECK_ANSWER
    607 ENTRY_BEGIN
    608 MATCH all
    609 REPLY QR RD RA AA NOERROR
    610 SECTION QUESTION
    611 www.gotham11.a.	IN	A
    612 SECTION ANSWER
    613 www.gotham11.a. CNAME g11.target.a.
    614 g11.target.a. A 1.2.3.11
    615 ENTRY_END
    616 
    617 ; Test with two rpz CNAMEs, upstream answer.
    618 STEP 150 QUERY
    619 ENTRY_BEGIN
    620 REPLY RD
    621 SECTION QUESTION
    622 www.gotham12.a.	IN	A
    623 ENTRY_END
    624 
    625 STEP 151 CHECK_ANSWER
    626 ENTRY_BEGIN
    627 MATCH all
    628 REPLY QR RD RA AA NOERROR
    629 SECTION QUESTION
    630 www.gotham12.a.	IN	A
    631 SECTION ANSWER
    632 www.gotham12.a. CNAME g12.target.a.
    633 g12.target.a. CNAME g12b.target.a.
    634 g12b.target.a. A 1.2.3.12
    635 ENTRY_END
    636 
    637 ; Test with three rpz CNAMEs, upstream answer.
    638 STEP 160 QUERY
    639 ENTRY_BEGIN
    640 REPLY RD
    641 SECTION QUESTION
    642 www.gotham13.a.	IN	A
    643 ENTRY_END
    644 
    645 STEP 161 CHECK_ANSWER
    646 ENTRY_BEGIN
    647 MATCH all
    648 REPLY QR RD RA AA NOERROR
    649 SECTION QUESTION
    650 www.gotham13.a.	IN	A
    651 SECTION ANSWER
    652 www.gotham13.a. CNAME g13.target.a.
    653 g13.target.a. CNAME g13b.target.a.
    654 g13b.target.a. CNAME g13c.target.a.
    655 g13c.target.a. A 1.2.3.13
    656 ENTRY_END
    657 
    658 ; Test with a CNAME from upstream, one rpz CNAME, upstream answer.
    659 STEP 170 QUERY
    660 ENTRY_BEGIN
    661 REPLY RD
    662 SECTION QUESTION
    663 www.gotham14.a.	IN	A
    664 ENTRY_END
    665 
    666 STEP 171 CHECK_ANSWER
    667 ENTRY_BEGIN
    668 MATCH all
    669 REPLY QR RD RA NOERROR
    670 SECTION QUESTION
    671 www.gotham14.a.	IN	A
    672 SECTION ANSWER
    673 www.gotham14.a. CNAME w2.gotham14.a.
    674 w2.gotham14.a. CNAME g14.target.a.
    675 g14.target.a. A 1.2.3.14
    676 ENTRY_END
    677 
    678 ; Test with a CNAME from upstream, two rpz CNAMEs, upstream answer.
    679 STEP 180 QUERY
    680 ENTRY_BEGIN
    681 REPLY RD
    682 SECTION QUESTION
    683 www.gotham15.a.	IN	A
    684 ENTRY_END
    685 
    686 STEP 181 CHECK_ANSWER
    687 ENTRY_BEGIN
    688 MATCH all
    689 REPLY QR RD RA NOERROR
    690 SECTION QUESTION
    691 www.gotham15.a.	IN	A
    692 SECTION ANSWER
    693 www.gotham15.a. CNAME w2.gotham15.a.
    694 w2.gotham15.a. CNAME g15.target.a.
    695 g15.target.a. CNAME g15b.target.a.
    696 g15b.target.a. A 1.2.3.15
    697 ENTRY_END
    698 
    699 ; Test with a CNAME from cache, one rpz CNAME, upstream answer.
    700 STEP 190 QUERY
    701 ENTRY_BEGIN
    702 REPLY RD
    703 SECTION QUESTION
    704 www.gotham14.a.	IN	A
    705 ENTRY_END
    706 
    707 STEP 191 CHECK_ANSWER
    708 ENTRY_BEGIN
    709 MATCH all
    710 REPLY QR RD RA NOERROR
    711 SECTION QUESTION
    712 www.gotham14.a.	IN	A
    713 SECTION ANSWER
    714 www.gotham14.a. CNAME w2.gotham14.a.
    715 w2.gotham14.a. CNAME g14.target.a.
    716 g14.target.a. A 1.2.3.14
    717 ENTRY_END
    718 
    719 ; Test with a CNAME from cache, two rpz CNAMEs, upstream answer.
    720 STEP 200 QUERY
    721 ENTRY_BEGIN
    722 REPLY RD
    723 SECTION QUESTION
    724 www.gotham15.a.	IN	A
    725 ENTRY_END
    726 
    727 STEP 201 CHECK_ANSWER
    728 ENTRY_BEGIN
    729 MATCH all
    730 REPLY QR RD RA NOERROR
    731 SECTION QUESTION
    732 www.gotham15.a.	IN	A
    733 SECTION ANSWER
    734 www.gotham15.a. CNAME w2.gotham15.a.
    735 w2.gotham15.a. CNAME g15.target.a.
    736 g15.target.a. CNAME g15b.target.a.
    737 g15b.target.a. A 1.2.3.15
    738 ENTRY_END
    739 
    740 ; Test with lookup from nameserver, one rpz nsip CNAME, upstream answer.
    741 STEP 210 QUERY
    742 ENTRY_BEGIN
    743 REPLY RD
    744 SECTION QUESTION
    745 www.gotham16.a.	IN	A
    746 ENTRY_END
    747 
    748 STEP 211 CHECK_ANSWER
    749 ENTRY_BEGIN
    750 MATCH all
    751 REPLY QR RD RA NOERROR
    752 SECTION QUESTION
    753 www.gotham16.a.	IN	A
    754 SECTION ANSWER
    755 www.gotham16.a. CNAME g16.target.a.
    756 g16.target.a. A 1.2.3.16
    757 ENTRY_END
    758 
    759 ; Test with lookup from nameserver, two rpz nsip CNAMEs, upstream answer.
    760 STEP 220 QUERY
    761 ENTRY_BEGIN
    762 REPLY RD
    763 SECTION QUESTION
    764 www.gotham17.a.	IN	A
    765 ENTRY_END
    766 
    767 STEP 221 CHECK_ANSWER
    768 ENTRY_BEGIN
    769 MATCH all
    770 REPLY QR RD RA NOERROR
    771 SECTION QUESTION
    772 www.gotham17.a.	IN	A
    773 SECTION ANSWER
    774 www.gotham17.a. CNAME g17.target.a.
    775 g17.target.a. CNAME g17b.target.a.
    776 g17b.target.a. A 1.2.3.17
    777 ENTRY_END
    778 
    779 SCENARIO_END
    780