1 ; config options 2 server: 3 module-config: "respip validator iterator" 4 target-fetch-policy: "0 0 0 0 0" 5 qname-minimisation: no 6 access-control: 192.0.0.0/8 allow 7 8 rpz: 9 name: "rpz.example.com." 10 rpz-log: yes 11 rpz-log-name: "rpz.example.com" 12 zonefile: 13 TEMPFILE_NAME rpz.example.com 14 TEMPFILE_CONTENTS rpz.example.com 15 $ORIGIN example.com. 16 rpz 3600 IN SOA ns1.rpz.example.com. hostmaster.rpz.example.com. ( 17 1379078166 28800 7200 604800 7200 ) 18 3600 IN NS ns1.rpz.example.com. 19 3600 IN NS ns2.rpz.example.com. 20 $ORIGIN rpz.example.com. 21 www.gotham.a A 1.2.3.61 22 www.gotham2.a CNAME g2.target.a. 23 g2.target.a A 1.2.3.62 24 www.gotham3.a CNAME g3.target.a. 25 g3.target.a CNAME g3b.target.a. 26 g3b.target.a A 1.2.3.63 27 www.gotham4.a CNAME g4.target.a. 28 g4.target.a CNAME g4b.target.a. 29 g4b.target.a CNAME g4c.target.a. 30 g4c.target.a A 1.2.3.64 31 w2.gotham5.a A 1.2.3.65 32 w2.gotham6.a CNAME g6.target.a. 33 g6.target.a A 1.2.3.66 34 w2.gotham7.a CNAME g7.target.a. 35 g7.target.a CNAME g7b.target.a. 36 g7b.target.a A 1.2.3.66 37 ; ns1.gotham8.a 38 32.48.30.20.10.rpz-nsip A 1.2.3.68 39 ; ns1.gotham9.a 40 32.49.30.20.10.rpz-nsip CNAME g9.target.a. 41 g9.target.a A 1.2.3.69 42 ; ns1.gotham10.a 43 32.50.30.20.10.rpz-nsip CNAME g10.target.a. 44 g10.target.a CNAME g10b.target.a. 45 g10b.target.a A 1.2.3.70 46 www.gotham11.a CNAME g11.target.a. 47 www.gotham12.a CNAME g12.target.a. 48 g12.target.a CNAME g12b.target.a. 49 www.gotham13.a CNAME g13.target.a. 50 g13.target.a CNAME g13b.target.a. 51 g13b.target.a CNAME g13c.target.a. 52 w2.gotham14.a CNAME g14.target.a. 53 w2.gotham15.a CNAME g15.target.a. 54 g15.target.a CNAME g15b.target.a. 55 ; ns1.gotham16.a 56 32.56.30.20.10.rpz-nsip CNAME g16.target.a. 57 ; ns1.gotham17.a 58 32.57.30.20.10.rpz-nsip CNAME g17.target.a. 59 g17.target.a CNAME g17b.target.a. 60 TEMPFILE_END 61 62 stub-zone: 63 name: "a." 64 stub-addr: 10.20.30.40 65 CONFIG_END 66 67 SCENARIO_BEGIN Test RPZ handling of CNAMEs. 68 69 ; a. 70 RANGE_BEGIN 0 1000 71 ADDRESS 10.20.30.40 72 ENTRY_BEGIN 73 MATCH opcode subdomain 74 ADJUST copy_id copy_query 75 REPLY QR NOERROR 76 SECTION QUESTION 77 gotham5.a. IN NS 78 SECTION AUTHORITY 79 gotham5.a. NS ns1.gotham5.a. 80 SECTION ADDITIONAL 81 ns1.gotham5.a. A 10.20.30.45 82 ENTRY_END 83 84 ENTRY_BEGIN 85 MATCH opcode subdomain 86 ADJUST copy_id copy_query 87 REPLY QR NOERROR 88 SECTION QUESTION 89 gotham6.a. IN NS 90 SECTION AUTHORITY 91 gotham6.a. NS ns1.gotham6.a. 92 SECTION ADDITIONAL 93 ns1.gotham6.a. A 10.20.30.46 94 ENTRY_END 95 96 ENTRY_BEGIN 97 MATCH opcode subdomain 98 ADJUST copy_id copy_query 99 REPLY QR NOERROR 100 SECTION QUESTION 101 gotham7.a. IN NS 102 SECTION AUTHORITY 103 gotham7.a. NS ns1.gotham7.a. 104 SECTION ADDITIONAL 105 ns1.gotham7.a. A 10.20.30.47 106 ENTRY_END 107 108 ENTRY_BEGIN 109 MATCH opcode subdomain 110 ADJUST copy_id copy_query 111 REPLY QR NOERROR 112 SECTION QUESTION 113 gotham8.a. IN NS 114 SECTION AUTHORITY 115 gotham8.a. NS ns1.gotham8.a. 116 SECTION ADDITIONAL 117 ns1.gotham8.a. A 10.20.30.48 118 ENTRY_END 119 120 ENTRY_BEGIN 121 MATCH opcode subdomain 122 ADJUST copy_id copy_query 123 REPLY QR NOERROR 124 SECTION QUESTION 125 gotham9.a. IN NS 126 SECTION AUTHORITY 127 gotham9.a. NS ns1.gotham9.a. 128 SECTION ADDITIONAL 129 ns1.gotham9.a. A 10.20.30.49 130 ENTRY_END 131 132 ENTRY_BEGIN 133 MATCH opcode subdomain 134 ADJUST copy_id copy_query 135 REPLY QR NOERROR 136 SECTION QUESTION 137 gotham10.a. IN NS 138 SECTION AUTHORITY 139 gotham10.a. NS ns1.gotham10.a. 140 SECTION ADDITIONAL 141 ns1.gotham10.a. A 10.20.30.50 142 ENTRY_END 143 144 ENTRY_BEGIN 145 MATCH opcode subdomain 146 ADJUST copy_id copy_query 147 REPLY QR NOERROR 148 SECTION QUESTION 149 gotham14.a. IN NS 150 SECTION AUTHORITY 151 gotham14.a. NS ns1.gotham14.a. 152 SECTION ADDITIONAL 153 ns1.gotham14.a. A 10.20.30.54 154 ENTRY_END 155 156 ENTRY_BEGIN 157 MATCH opcode subdomain 158 ADJUST copy_id copy_query 159 REPLY QR NOERROR 160 SECTION QUESTION 161 gotham15.a. IN NS 162 SECTION AUTHORITY 163 gotham15.a. NS ns1.gotham15.a. 164 SECTION ADDITIONAL 165 ns1.gotham15.a. A 10.20.30.55 166 ENTRY_END 167 168 ENTRY_BEGIN 169 MATCH opcode subdomain 170 ADJUST copy_id copy_query 171 REPLY QR NOERROR 172 SECTION QUESTION 173 gotham16.a. IN NS 174 SECTION AUTHORITY 175 gotham16.a. NS ns1.gotham16.a. 176 SECTION ADDITIONAL 177 ns1.gotham16.a. A 10.20.30.56 178 ENTRY_END 179 180 ENTRY_BEGIN 181 MATCH opcode subdomain 182 ADJUST copy_id copy_query 183 REPLY QR NOERROR 184 SECTION QUESTION 185 gotham17.a. IN NS 186 SECTION AUTHORITY 187 gotham17.a. NS ns1.gotham17.a. 188 SECTION ADDITIONAL 189 ns1.gotham17.a. A 10.20.30.57 190 ENTRY_END 191 192 ENTRY_BEGIN 193 MATCH opcode qtype qname 194 ADJUST copy_id 195 REPLY QR NOERROR 196 SECTION QUESTION 197 target.a. IN A 198 SECTION ANSWER 199 target.a. IN A 1.2.3.6 200 ENTRY_END 201 202 ENTRY_BEGIN 203 MATCH opcode qtype qname 204 ADJUST copy_id 205 REPLY QR AA NOERROR 206 SECTION QUESTION 207 g11.target.a. IN A 208 SECTION ANSWER 209 g11.target.a. IN A 1.2.3.11 210 ENTRY_END 211 212 ENTRY_BEGIN 213 MATCH opcode qtype qname 214 ADJUST copy_id 215 REPLY QR AA NOERROR 216 SECTION QUESTION 217 g12b.target.a. IN A 218 SECTION ANSWER 219 g12b.target.a. A 1.2.3.12 220 ENTRY_END 221 222 ENTRY_BEGIN 223 MATCH opcode qtype qname 224 ADJUST copy_id 225 REPLY QR AA NOERROR 226 SECTION QUESTION 227 g13c.target.a. IN A 228 SECTION ANSWER 229 g13c.target.a. A 1.2.3.13 230 ENTRY_END 231 232 ENTRY_BEGIN 233 MATCH opcode qtype qname 234 ADJUST copy_id 235 REPLY QR AA NOERROR 236 SECTION QUESTION 237 g14.target.a. IN A 238 SECTION ANSWER 239 g14.target.a. A 1.2.3.14 240 ENTRY_END 241 242 ENTRY_BEGIN 243 MATCH opcode qtype qname 244 ADJUST copy_id 245 REPLY QR AA NOERROR 246 SECTION QUESTION 247 g15b.target.a. IN A 248 SECTION ANSWER 249 g15b.target.a. A 1.2.3.15 250 ENTRY_END 251 252 ENTRY_BEGIN 253 MATCH opcode qtype qname 254 ADJUST copy_id 255 REPLY QR AA NOERROR 256 SECTION QUESTION 257 g16.target.a. IN A 258 SECTION ANSWER 259 g16.target.a. A 1.2.3.16 260 ENTRY_END 261 262 ENTRY_BEGIN 263 MATCH opcode qtype qname 264 ADJUST copy_id 265 REPLY QR AA NOERROR 266 SECTION QUESTION 267 g17b.target.a. IN A 268 SECTION ANSWER 269 g17b.target.a. A 1.2.3.17 270 ENTRY_END 271 RANGE_END 272 273 ; gotham5.a. 274 RANGE_BEGIN 0 1000 275 ADDRESS 10.20.30.45 276 ENTRY_BEGIN 277 MATCH opcode qtype qname 278 ADJUST copy_id 279 REPLY QR AA NOERROR 280 SECTION QUESTION 281 www.gotham5.a. IN A 282 SECTION ANSWER 283 www.gotham5.a. CNAME w2.gotham5.a. 284 ENTRY_END 285 RANGE_END 286 287 ; gotham6.a. 288 RANGE_BEGIN 0 1000 289 ADDRESS 10.20.30.46 290 ENTRY_BEGIN 291 MATCH opcode qtype qname 292 ADJUST copy_id 293 REPLY QR NOERROR 294 SECTION QUESTION 295 www.gotham6.a. IN A 296 SECTION ANSWER 297 www.gotham6.a. CNAME w2.gotham6.a. 298 ENTRY_END 299 RANGE_END 300 301 ; gotham7.a. 302 RANGE_BEGIN 0 1000 303 ADDRESS 10.20.30.47 304 ENTRY_BEGIN 305 MATCH opcode qtype qname 306 ADJUST copy_id 307 REPLY QR AA NOERROR 308 SECTION QUESTION 309 www.gotham7.a. IN A 310 SECTION ANSWER 311 www.gotham7.a. CNAME w2.gotham7.a. 312 ENTRY_END 313 RANGE_END 314 315 ; gotham14.a. 316 RANGE_BEGIN 0 1000 317 ADDRESS 10.20.30.54 318 ENTRY_BEGIN 319 MATCH opcode qtype qname 320 ADJUST copy_id 321 REPLY QR AA NOERROR 322 SECTION QUESTION 323 www.gotham14.a. IN A 324 SECTION ANSWER 325 www.gotham14.a. CNAME w2.gotham14.a. 326 ENTRY_END 327 RANGE_END 328 329 ; gotham15.a. 330 RANGE_BEGIN 0 1000 331 ADDRESS 10.20.30.55 332 ENTRY_BEGIN 333 MATCH opcode qtype qname 334 ADJUST copy_id 335 REPLY QR AA NOERROR 336 SECTION QUESTION 337 www.gotham15.a. IN A 338 SECTION ANSWER 339 www.gotham15.a. CNAME w2.gotham15.a. 340 ENTRY_END 341 RANGE_END 342 343 ; Test with zero rpz CNAMEs, rpz answer. 344 STEP 10 QUERY 345 ENTRY_BEGIN 346 REPLY RD 347 SECTION QUESTION 348 www.gotham.a. IN A 349 ENTRY_END 350 351 STEP 11 CHECK_ANSWER 352 ENTRY_BEGIN 353 MATCH all 354 REPLY QR RD RA AA NOERROR 355 SECTION QUESTION 356 www.gotham.a. IN A 357 SECTION ANSWER 358 www.gotham.a. A 1.2.3.61 359 ENTRY_END 360 361 ; Test with one rpz CNAME, rpz answer. 362 STEP 20 QUERY 363 ENTRY_BEGIN 364 REPLY RD 365 SECTION QUESTION 366 www.gotham2.a. IN A 367 ENTRY_END 368 369 STEP 21 CHECK_ANSWER 370 ENTRY_BEGIN 371 MATCH all 372 REPLY QR RD RA AA NOERROR 373 SECTION QUESTION 374 www.gotham2.a. IN A 375 SECTION ANSWER 376 www.gotham2.a. CNAME g2.target.a. 377 g2.target.a. A 1.2.3.62 378 ENTRY_END 379 380 ; Test with two rpz CNAMEs, rpz answer. 381 STEP 30 QUERY 382 ENTRY_BEGIN 383 REPLY RD 384 SECTION QUESTION 385 www.gotham3.a. IN A 386 ENTRY_END 387 388 STEP 31 CHECK_ANSWER 389 ENTRY_BEGIN 390 MATCH all 391 REPLY QR RD RA AA NOERROR 392 SECTION QUESTION 393 www.gotham3.a. IN A 394 SECTION ANSWER 395 www.gotham3.a. CNAME g3.target.a. 396 g3.target.a. CNAME g3b.target.a. 397 g3b.target.a. A 1.2.3.63 398 ENTRY_END 399 400 ; Test with three rpz CNAMEs, rpz answer. 401 STEP 40 QUERY 402 ENTRY_BEGIN 403 REPLY RD 404 SECTION QUESTION 405 www.gotham4.a. IN A 406 ENTRY_END 407 408 STEP 41 CHECK_ANSWER 409 ENTRY_BEGIN 410 MATCH all 411 REPLY QR RD RA AA NOERROR 412 SECTION QUESTION 413 www.gotham4.a. IN A 414 SECTION ANSWER 415 www.gotham4.a. CNAME g4.target.a. 416 g4.target.a. CNAME g4b.target.a. 417 g4b.target.a. CNAME g4c.target.a. 418 g4c.target.a. A 1.2.3.64 419 ENTRY_END 420 421 ; Test with a CNAME from upstream, zero rpz CNAMEs, rpz answer. 422 STEP 50 QUERY 423 ENTRY_BEGIN 424 REPLY RD 425 SECTION QUESTION 426 www.gotham5.a. IN A 427 ENTRY_END 428 429 STEP 51 CHECK_ANSWER 430 ENTRY_BEGIN 431 MATCH all 432 REPLY QR RD RA AA NOERROR 433 SECTION QUESTION 434 www.gotham5.a. IN A 435 SECTION ANSWER 436 www.gotham5.a. CNAME w2.gotham5.a. 437 w2.gotham5.a. A 1.2.3.65 438 ENTRY_END 439 440 ; Test with a CNAME from upstream, one rpz CNAME, rpz answer. 441 STEP 60 QUERY 442 ENTRY_BEGIN 443 REPLY RD 444 SECTION QUESTION 445 www.gotham6.a. IN A 446 ENTRY_END 447 448 STEP 61 CHECK_ANSWER 449 ENTRY_BEGIN 450 MATCH all 451 REPLY QR RD RA AA NOERROR 452 SECTION QUESTION 453 www.gotham6.a. IN A 454 SECTION ANSWER 455 www.gotham6.a. CNAME w2.gotham6.a. 456 w2.gotham6.a. CNAME g6.target.a. 457 g6.target.a. A 1.2.3.66 458 ENTRY_END 459 460 ; Test with a CNAME from upstream, two rpz CNAMEs, rpz answer. 461 STEP 70 QUERY 462 ENTRY_BEGIN 463 REPLY RD 464 SECTION QUESTION 465 www.gotham7.a. IN A 466 ENTRY_END 467 468 STEP 71 CHECK_ANSWER 469 ENTRY_BEGIN 470 MATCH all 471 REPLY QR RD RA AA NOERROR 472 SECTION QUESTION 473 www.gotham7.a. IN A 474 SECTION ANSWER 475 www.gotham7.a. CNAME w2.gotham7.a. 476 w2.gotham7.a. CNAME g7.target.a. 477 g7.target.a. CNAME g7b.target.a. 478 g7b.target.a. A 1.2.3.66 479 ENTRY_END 480 481 ; Test with a CNAME from cache, zero rpz CNAMEs, rpz answer. 482 STEP 80 QUERY 483 ENTRY_BEGIN 484 REPLY RD 485 SECTION QUESTION 486 www.gotham5.a. IN A 487 ENTRY_END 488 489 STEP 81 CHECK_ANSWER 490 ENTRY_BEGIN 491 MATCH all 492 REPLY QR RD RA AA NOERROR 493 SECTION QUESTION 494 www.gotham5.a. IN A 495 SECTION ANSWER 496 www.gotham5.a. CNAME w2.gotham5.a. 497 w2.gotham5.a. A 1.2.3.65 498 ENTRY_END 499 500 ; Test with a CNAME from cache, one rpz CNAME, rpz answer. 501 STEP 90 QUERY 502 ENTRY_BEGIN 503 REPLY RD 504 SECTION QUESTION 505 www.gotham6.a. IN A 506 ENTRY_END 507 508 STEP 91 CHECK_ANSWER 509 ENTRY_BEGIN 510 MATCH all 511 REPLY QR RD RA AA NOERROR 512 SECTION QUESTION 513 www.gotham6.a. IN A 514 SECTION ANSWER 515 www.gotham6.a. CNAME w2.gotham6.a. 516 w2.gotham6.a. CNAME g6.target.a. 517 g6.target.a. A 1.2.3.66 518 ENTRY_END 519 520 ; Test with a CNAME from cache, two rpz CNAMEs, rpz answer. 521 STEP 100 QUERY 522 ENTRY_BEGIN 523 REPLY RD 524 SECTION QUESTION 525 www.gotham7.a. IN A 526 ENTRY_END 527 528 STEP 101 CHECK_ANSWER 529 ENTRY_BEGIN 530 MATCH all 531 REPLY QR RD RA AA NOERROR 532 SECTION QUESTION 533 www.gotham7.a. IN A 534 SECTION ANSWER 535 www.gotham7.a. CNAME w2.gotham7.a. 536 w2.gotham7.a. CNAME g7.target.a. 537 g7.target.a. CNAME g7b.target.a. 538 g7b.target.a. A 1.2.3.66 539 ENTRY_END 540 541 ; Test with lookup from nameserver, zero rpz CNAMEs, rpz nsip answer. 542 STEP 110 QUERY 543 ENTRY_BEGIN 544 REPLY RD 545 SECTION QUESTION 546 www.gotham8.a. IN A 547 ENTRY_END 548 549 STEP 111 CHECK_ANSWER 550 ENTRY_BEGIN 551 MATCH all 552 REPLY QR RD RA AA NOERROR 553 SECTION QUESTION 554 www.gotham8.a. IN A 555 SECTION ANSWER 556 www.gotham8.a. A 1.2.3.68 557 ENTRY_END 558 559 ; Test with lookup from nameserver, one rpz CNAME, rpz nsip answer. 560 STEP 120 QUERY 561 ENTRY_BEGIN 562 REPLY RD 563 SECTION QUESTION 564 www.gotham9.a. IN A 565 ENTRY_END 566 567 STEP 121 CHECK_ANSWER 568 ENTRY_BEGIN 569 MATCH all 570 REPLY QR RD RA AA NOERROR 571 SECTION QUESTION 572 www.gotham9.a. IN A 573 SECTION ANSWER 574 www.gotham9.a. CNAME g9.target.a. 575 g9.target.a. A 1.2.3.69 576 ENTRY_END 577 578 ; Test with lookup from nameserver, two rpz CNAMEs, rpz nsip answer. 579 STEP 130 QUERY 580 ENTRY_BEGIN 581 REPLY RD 582 SECTION QUESTION 583 www.gotham10.a. IN A 584 ENTRY_END 585 586 STEP 131 CHECK_ANSWER 587 ENTRY_BEGIN 588 MATCH all 589 REPLY QR RD RA AA NOERROR 590 SECTION QUESTION 591 www.gotham10.a. IN A 592 SECTION ANSWER 593 www.gotham10.a. CNAME g10.target.a. 594 g10.target.a. CNAME g10b.target.a. 595 g10b.target.a. A 1.2.3.70 596 ENTRY_END 597 598 ; Test with one rpz CNAME, upstream answer. 599 STEP 140 QUERY 600 ENTRY_BEGIN 601 REPLY RD 602 SECTION QUESTION 603 www.gotham11.a. IN A 604 ENTRY_END 605 606 STEP 141 CHECK_ANSWER 607 ENTRY_BEGIN 608 MATCH all 609 REPLY QR RD RA AA NOERROR 610 SECTION QUESTION 611 www.gotham11.a. IN A 612 SECTION ANSWER 613 www.gotham11.a. CNAME g11.target.a. 614 g11.target.a. A 1.2.3.11 615 ENTRY_END 616 617 ; Test with two rpz CNAMEs, upstream answer. 618 STEP 150 QUERY 619 ENTRY_BEGIN 620 REPLY RD 621 SECTION QUESTION 622 www.gotham12.a. IN A 623 ENTRY_END 624 625 STEP 151 CHECK_ANSWER 626 ENTRY_BEGIN 627 MATCH all 628 REPLY QR RD RA AA NOERROR 629 SECTION QUESTION 630 www.gotham12.a. IN A 631 SECTION ANSWER 632 www.gotham12.a. CNAME g12.target.a. 633 g12.target.a. CNAME g12b.target.a. 634 g12b.target.a. A 1.2.3.12 635 ENTRY_END 636 637 ; Test with three rpz CNAMEs, upstream answer. 638 STEP 160 QUERY 639 ENTRY_BEGIN 640 REPLY RD 641 SECTION QUESTION 642 www.gotham13.a. IN A 643 ENTRY_END 644 645 STEP 161 CHECK_ANSWER 646 ENTRY_BEGIN 647 MATCH all 648 REPLY QR RD RA AA NOERROR 649 SECTION QUESTION 650 www.gotham13.a. IN A 651 SECTION ANSWER 652 www.gotham13.a. CNAME g13.target.a. 653 g13.target.a. CNAME g13b.target.a. 654 g13b.target.a. CNAME g13c.target.a. 655 g13c.target.a. A 1.2.3.13 656 ENTRY_END 657 658 ; Test with a CNAME from upstream, one rpz CNAME, upstream answer. 659 STEP 170 QUERY 660 ENTRY_BEGIN 661 REPLY RD 662 SECTION QUESTION 663 www.gotham14.a. IN A 664 ENTRY_END 665 666 STEP 171 CHECK_ANSWER 667 ENTRY_BEGIN 668 MATCH all 669 REPLY QR RD RA NOERROR 670 SECTION QUESTION 671 www.gotham14.a. IN A 672 SECTION ANSWER 673 www.gotham14.a. CNAME w2.gotham14.a. 674 w2.gotham14.a. CNAME g14.target.a. 675 g14.target.a. A 1.2.3.14 676 ENTRY_END 677 678 ; Test with a CNAME from upstream, two rpz CNAMEs, upstream answer. 679 STEP 180 QUERY 680 ENTRY_BEGIN 681 REPLY RD 682 SECTION QUESTION 683 www.gotham15.a. IN A 684 ENTRY_END 685 686 STEP 181 CHECK_ANSWER 687 ENTRY_BEGIN 688 MATCH all 689 REPLY QR RD RA NOERROR 690 SECTION QUESTION 691 www.gotham15.a. IN A 692 SECTION ANSWER 693 www.gotham15.a. CNAME w2.gotham15.a. 694 w2.gotham15.a. CNAME g15.target.a. 695 g15.target.a. CNAME g15b.target.a. 696 g15b.target.a. A 1.2.3.15 697 ENTRY_END 698 699 ; Test with a CNAME from cache, one rpz CNAME, upstream answer. 700 STEP 190 QUERY 701 ENTRY_BEGIN 702 REPLY RD 703 SECTION QUESTION 704 www.gotham14.a. IN A 705 ENTRY_END 706 707 STEP 191 CHECK_ANSWER 708 ENTRY_BEGIN 709 MATCH all 710 REPLY QR RD RA NOERROR 711 SECTION QUESTION 712 www.gotham14.a. IN A 713 SECTION ANSWER 714 www.gotham14.a. CNAME w2.gotham14.a. 715 w2.gotham14.a. CNAME g14.target.a. 716 g14.target.a. A 1.2.3.14 717 ENTRY_END 718 719 ; Test with a CNAME from cache, two rpz CNAMEs, upstream answer. 720 STEP 200 QUERY 721 ENTRY_BEGIN 722 REPLY RD 723 SECTION QUESTION 724 www.gotham15.a. IN A 725 ENTRY_END 726 727 STEP 201 CHECK_ANSWER 728 ENTRY_BEGIN 729 MATCH all 730 REPLY QR RD RA NOERROR 731 SECTION QUESTION 732 www.gotham15.a. IN A 733 SECTION ANSWER 734 www.gotham15.a. CNAME w2.gotham15.a. 735 w2.gotham15.a. CNAME g15.target.a. 736 g15.target.a. CNAME g15b.target.a. 737 g15b.target.a. A 1.2.3.15 738 ENTRY_END 739 740 ; Test with lookup from nameserver, one rpz nsip CNAME, upstream answer. 741 STEP 210 QUERY 742 ENTRY_BEGIN 743 REPLY RD 744 SECTION QUESTION 745 www.gotham16.a. IN A 746 ENTRY_END 747 748 STEP 211 CHECK_ANSWER 749 ENTRY_BEGIN 750 MATCH all 751 REPLY QR RD RA NOERROR 752 SECTION QUESTION 753 www.gotham16.a. IN A 754 SECTION ANSWER 755 www.gotham16.a. CNAME g16.target.a. 756 g16.target.a. A 1.2.3.16 757 ENTRY_END 758 759 ; Test with lookup from nameserver, two rpz nsip CNAMEs, upstream answer. 760 STEP 220 QUERY 761 ENTRY_BEGIN 762 REPLY RD 763 SECTION QUESTION 764 www.gotham17.a. IN A 765 ENTRY_END 766 767 STEP 221 CHECK_ANSWER 768 ENTRY_BEGIN 769 MATCH all 770 REPLY QR RD RA NOERROR 771 SECTION QUESTION 772 www.gotham17.a. IN A 773 SECTION ANSWER 774 www.gotham17.a. CNAME g17.target.a. 775 g17.target.a. CNAME g17b.target.a. 776 g17b.target.a. A 1.2.3.17 777 ENTRY_END 778 779 SCENARIO_END 780