1 1.1 christos ; config options 2 1.1 christos server: 3 1.1 christos module-config: "respip validator iterator" 4 1.1 christos target-fetch-policy: "0 0 0 0 0" 5 1.1 christos qname-minimisation: no 6 1.1 christos 7 1.1 christos rpz: 8 1.1 christos name: "rpz.example.com." 9 1.1 christos zonefile: 10 1.1 christos TEMPFILE_NAME rpz.example.com 11 1.1 christos TEMPFILE_CONTENTS rpz.example.com 12 1.1 christos $ORIGIN example.com. 13 1.1 christos rpz 3600 IN SOA ns1.rpz.example.com. hostmaster.rpz.example.com. ( 14 1.1 christos 1379078166 28800 7200 604800 7200 ) 15 1.1 christos 3600 IN NS ns1.rpz.example.com. 16 1.1 christos 3600 IN NS ns2.rpz.example.com. 17 1.1 christos $ORIGIN rpz.example.com. 18 1.1 christos a CNAME . 19 1.1 christos a CNAME *. ; duplicate CNAME here on purpose 20 1.1 christos *.a TXT "wildcard local data" 21 1.1 christos * CNAME . 22 1.1 christos b.a CNAME *. 23 1.1 christos c.a CNAME rpz-passthru. 24 1.1 christos TEMPFILE_END 25 1.1 christos 26 1.1 christos rpz: 27 1.1 christos name: "rpz2.example.com." 28 1.1 christos zonefile: 29 1.1 christos TEMPFILE_NAME rpz2.example.com 30 1.1 christos TEMPFILE_CONTENTS rpz2.example.com 31 1.1 christos $ORIGIN example.com. 32 1.1 christos rpz2 3600 IN SOA ns1.rpz.example.com. hostmaster.rpz.example.com. ( 33 1.1 christos 1379078166 28800 7200 604800 7200 ) 34 1.1 christos 3600 IN NS ns1.rpz.example.com. 35 1.1 christos 3600 IN NS ns2.rpz.example.com. 36 1.1 christos $ORIGIN rpz2.example.com. 37 1.1 christos a TXT "local data 2nd zone" 38 1.1 christos d TXT "local data 2nd zone" 39 1.1 christos e CNAME *.a.example. 40 1.1 christos *.e CNAME *.b.example. 41 1.1 christos drop CNAME rpz-drop. 42 1.1 christos TEMPFILE_END 43 1.1 christos 44 1.1 christos stub-zone: 45 1.1 christos name: "a." 46 1.1 christos stub-addr: 10.20.30.40 47 1.1 christos stub-zone: 48 1.1 christos name: "example." 49 1.1 christos stub-addr: 10.20.30.50 50 1.1 christos CONFIG_END 51 1.1 christos 52 1.1 christos SCENARIO_BEGIN Test RPZ QNAME trigger for root wildcard. 53 1.1 christos 54 1.1 christos ; a. 55 1.1 christos RANGE_BEGIN 0 100 56 1.1 christos ADDRESS 10.20.30.40 57 1.1 christos ENTRY_BEGIN 58 1.1 christos MATCH opcode qtype qname 59 1.1 christos ADJUST copy_id 60 1.1 christos REPLY QR NOERROR 61 1.1 christos SECTION QUESTION 62 1.1 christos a. IN NS 63 1.1 christos SECTION ANSWER 64 1.1 christos a. IN NS ns.a. 65 1.1 christos SECTION ADDITIONAL 66 1.1 christos ns.a IN A 10.20.30.40 67 1.1 christos ENTRY_END 68 1.1 christos 69 1.1 christos ENTRY_BEGIN 70 1.1 christos MATCH opcode qtype qname 71 1.1 christos ADJUST copy_id 72 1.1 christos REPLY QR NOERROR 73 1.1 christos SECTION QUESTION 74 1.1 christos c.a. IN TXT 75 1.1 christos SECTION ANSWER 76 1.1 christos c.a. IN TXT "answer from upstream ns" 77 1.1 christos ENTRY_END 78 1.1 christos 79 1.1 christos ENTRY_BEGIN 80 1.1 christos MATCH opcode qtype qname 81 1.1 christos ADJUST copy_id 82 1.1 christos REPLY QR NOERROR 83 1.1 christos SECTION QUESTION 84 1.1 christos x.b.a. IN TXT 85 1.1 christos SECTION ANSWER 86 1.1 christos x.b.a. IN TXT "answer from upstream ns" 87 1.1 christos ENTRY_END 88 1.1 christos 89 1.1 christos RANGE_END 90 1.1 christos 91 1.1 christos ; example. 92 1.1 christos RANGE_BEGIN 0 100 93 1.1 christos ADDRESS 10.20.30.50 94 1.1 christos ENTRY_BEGIN 95 1.1 christos MATCH opcode qtype qname 96 1.1 christos ADJUST copy_id 97 1.1 christos REPLY QR NOERROR 98 1.1 christos SECTION QUESTION 99 1.1 christos example. IN NS 100 1.1 christos SECTION ANSWER 101 1.1 christos example. IN NS ns.example. 102 1.1 christos SECTION ADDITIONAL 103 1.1 christos ns.example IN A 10.20.30.50 104 1.1 christos ENTRY_END 105 1.1 christos 106 1.1 christos ENTRY_BEGIN 107 1.1 christos MATCH opcode qtype qname 108 1.1 christos ADJUST copy_id 109 1.1 christos REPLY QR NOERROR 110 1.1 christos SECTION QUESTION 111 1.1 christos e.a.example. IN TXT 112 1.1 christos SECTION ANSWER 113 1.1 christos e.a.example. IN TXT "e.a.example. answer from upstream ns" 114 1.1 christos ENTRY_END 115 1.1 christos 116 1.1 christos ENTRY_BEGIN 117 1.1 christos MATCH opcode qtype qname 118 1.1 christos ADJUST copy_id 119 1.1 christos REPLY QR NOERROR 120 1.1 christos SECTION QUESTION 121 1.1 christos something.e.b.example. IN TXT 122 1.1 christos SECTION ANSWER 123 1.1 christos something.e.b.example. IN TXT "*.b.example. answer from upstream ns" 124 1.1 christos ENTRY_END 125 1.1 christos 126 1.1 christos RANGE_END 127 1.1 christos 128 1.1 christos STEP 10 QUERY 129 1.1 christos ENTRY_BEGIN 130 1.1 christos REPLY RD 131 1.1 christos SECTION QUESTION 132 1.1 christos x. IN TXT 133 1.1 christos ENTRY_END 134 1.1 christos 135 1.1 christos ; wildcard deny all 136 1.1 christos STEP 20 CHECK_ANSWER 137 1.1 christos ENTRY_BEGIN 138 1.1 christos MATCH all 139 1.1 christos REPLY QR RD RA AA NXDOMAIN 140 1.1 christos SECTION QUESTION 141 1.1 christos x. IN TXT 142 1.1 christos SECTION ANSWER 143 1.1 christos ENTRY_END 144 1.1 christos 145 1.1 christos STEP 30 QUERY 146 1.1 christos ENTRY_BEGIN 147 1.1 christos REPLY RD 148 1.1 christos SECTION QUESTION 149 1.1 christos y.tld. IN TXT 150 1.1 christos ENTRY_END 151 1.1 christos 152 1.1 christos ; wildcard deny all 153 1.1 christos STEP 40 CHECK_ANSWER 154 1.1 christos ENTRY_BEGIN 155 1.1 christos MATCH all 156 1.1 christos REPLY QR RD RA AA NXDOMAIN 157 1.1 christos SECTION QUESTION 158 1.1 christos y.tld. IN TXT 159 1.1 christos SECTION ANSWER 160 1.1 christos ENTRY_END 161 1.1 christos 162 1.1 christos SCENARIO_END 163