1 ; This is a comment. 2 ; config options go here. 3 server: 4 minimal-responses: no 5 iter-scrub-promiscuous: no 6 forward-zone: name: "." forward-addr: 216.0.0.1 7 CONFIG_END 8 9 SCENARIO_BEGIN Untrusted rrset not used for update 10 11 STEP 1 QUERY 12 ENTRY_BEGIN 13 REPLY RD 14 SECTION QUESTION 15 www.example.com. IN A 16 ENTRY_END 17 ; the query is sent to the forwarder - no cache yet. 18 STEP 2 CHECK_OUT_QUERY 19 ENTRY_BEGIN 20 MATCH qname qtype opcode 21 SECTION QUESTION 22 www.example.com. IN A 23 ENTRY_END 24 STEP 3 REPLY 25 ENTRY_BEGIN 26 MATCH opcode qtype qname 27 ADJUST copy_id 28 ; authoritative answer 29 REPLY QR AA RD RA NOERROR 30 SECTION QUESTION 31 www.example.com. IN A 32 SECTION ANSWER 33 www.example.com. IN A 10.20.30.40 34 SECTION AUTHORITY 35 example.com. IN NS ns.example.com. 36 SECTION ADDITIONAL 37 ns.example.com. IN A 10.20.30.50 38 ENTRY_END 39 STEP 4 CHECK_ANSWER 40 ENTRY_BEGIN 41 MATCH all 42 REPLY QR RD RA 43 SECTION QUESTION 44 www.example.com. IN A 45 SECTION ANSWER 46 www.example.com. IN A 10.20.30.40 47 SECTION AUTHORITY 48 example.com. IN NS ns.example.com. 49 SECTION ADDITIONAL 50 ns.example.com. IN A 10.20.30.50 51 ENTRY_END 52 53 ; another query passes along 54 STEP 6 QUERY 55 ENTRY_BEGIN 56 REPLY RD 57 SECTION QUESTION 58 bla.example.com. IN A 59 ENTRY_END 60 STEP 7 CHECK_OUT_QUERY 61 ENTRY_BEGIN 62 MATCH qname qtype opcode 63 SECTION QUESTION 64 bla.example.com. IN A 65 ENTRY_END 66 STEP 8 REPLY 67 ; This answer has updated information on ns2.example.com. 68 ; But it is nerfed into the additional. Must be ignored per rfc2181. 69 ENTRY_BEGIN 70 MATCH opcode qtype qname 71 ADJUST copy_id 72 ; authoritative answer 73 REPLY QR AA RD RA NOERROR 74 SECTION QUESTION 75 bla.example.com. IN A 76 SECTION ANSWER 77 bla.example.com. IN A 10.20.30.140 78 SECTION AUTHORITY 79 SECTION ADDITIONAL 80 example.com. IN NS ns.eeeek.com. 81 example.com. IN NS ns2.eeeek.com. 82 ns.eeeek.com. IN A 55.44.33.22 83 ns2.eeeek.com. IN A 55.44.33.24 84 ENTRY_END 85 STEP 9 CHECK_ANSWER 86 ENTRY_BEGIN 87 MATCH all 88 REPLY QR RD RA 89 SECTION QUESTION 90 bla.example.com. IN A 91 SECTION ANSWER 92 bla.example.com. IN A 10.20.30.140 93 SECTION AUTHORITY 94 SECTION ADDITIONAL 95 ENTRY_END 96 97 98 ; original www.example.com query 99 STEP 10 QUERY 100 ENTRY_BEGIN 101 REPLY RD 102 SECTION QUESTION 103 www.example.com. IN A 104 ENTRY_END 105 ; immediate answer without an OUT_QUERY happening (checked on exit) 106 ; also, the answer does not have AA set 107 ; NS rrset has not been updated from the additional seen before. 108 STEP 11 CHECK_ANSWER 109 ENTRY_BEGIN 110 MATCH all 111 REPLY QR RD RA 112 SECTION QUESTION 113 www.example.com. IN A 114 SECTION ANSWER 115 www.example.com. IN A 10.20.30.40 116 SECTION AUTHORITY 117 example.com. IN NS ns.example.com. 118 SECTION ADDITIONAL 119 ns.example.com. IN A 10.20.30.50 120 ENTRY_END 121 122 SCENARIO_END 123
Indexes created Mon Jun 01 00:24:59 UTC 2026