rrset_untrusted.rpl revision 1.1.1.2
1 ; This is a comment. 2 ; config options go here. 3 server: 4 minimal-responses: no 5 forward-zone: name: "." forward-addr: 216.0.0.1 6 CONFIG_END 7 8 SCENARIO_BEGIN Untrusted rrset not used for update 9 10 STEP 1 QUERY 11 ENTRY_BEGIN 12 REPLY RD 13 SECTION QUESTION 14 www.example.com. IN A 15 ENTRY_END 16 ; the query is sent to the forwarder - no cache yet. 17 STEP 2 CHECK_OUT_QUERY 18 ENTRY_BEGIN 19 MATCH qname qtype opcode 20 SECTION QUESTION 21 www.example.com. IN A 22 ENTRY_END 23 STEP 3 REPLY 24 ENTRY_BEGIN 25 MATCH opcode qtype qname 26 ADJUST copy_id 27 ; authoritative answer 28 REPLY QR AA RD RA NOERROR 29 SECTION QUESTION 30 www.example.com. IN A 31 SECTION ANSWER 32 www.example.com. IN A 10.20.30.40 33 SECTION AUTHORITY 34 example.com. IN NS ns.example.com. 35 SECTION ADDITIONAL 36 ns.example.com. IN A 10.20.30.50 37 ENTRY_END 38 STEP 4 CHECK_ANSWER 39 ENTRY_BEGIN 40 MATCH all 41 REPLY QR RD RA 42 SECTION QUESTION 43 www.example.com. IN A 44 SECTION ANSWER 45 www.example.com. IN A 10.20.30.40 46 SECTION AUTHORITY 47 example.com. IN NS ns.example.com. 48 SECTION ADDITIONAL 49 ns.example.com. IN A 10.20.30.50 50 ENTRY_END 51 52 ; another query passes along 53 STEP 6 QUERY 54 ENTRY_BEGIN 55 REPLY RD 56 SECTION QUESTION 57 bla.example.com. IN A 58 ENTRY_END 59 STEP 7 CHECK_OUT_QUERY 60 ENTRY_BEGIN 61 MATCH qname qtype opcode 62 SECTION QUESTION 63 bla.example.com. IN A 64 ENTRY_END 65 STEP 8 REPLY 66 ; This answer has updated information on ns2.example.com. 67 ; But it is nerfed into the additional. Must be ignored per rfc2181. 68 ENTRY_BEGIN 69 MATCH opcode qtype qname 70 ADJUST copy_id 71 ; authoritative answer 72 REPLY QR AA RD RA NOERROR 73 SECTION QUESTION 74 bla.example.com. IN A 75 SECTION ANSWER 76 bla.example.com. IN A 10.20.30.140 77 SECTION AUTHORITY 78 SECTION ADDITIONAL 79 example.com. IN NS ns.eeeek.com. 80 example.com. IN NS ns2.eeeek.com. 81 ns.eeeek.com. IN A 55.44.33.22 82 ns2.eeeek.com. IN A 55.44.33.24 83 ENTRY_END 84 STEP 9 CHECK_ANSWER 85 ENTRY_BEGIN 86 MATCH all 87 REPLY QR RD RA 88 SECTION QUESTION 89 bla.example.com. IN A 90 SECTION ANSWER 91 bla.example.com. IN A 10.20.30.140 92 SECTION AUTHORITY 93 SECTION ADDITIONAL 94 ENTRY_END 95 96 97 ; original www.example.com query 98 STEP 10 QUERY 99 ENTRY_BEGIN 100 REPLY RD 101 SECTION QUESTION 102 www.example.com. IN A 103 ENTRY_END 104 ; immediate answer without an OUT_QUERY happening (checked on exit) 105 ; also, the answer does not have AA set 106 ; NS rrset has not been updated from the additional seen before. 107 STEP 11 CHECK_ANSWER 108 ENTRY_BEGIN 109 MATCH all 110 REPLY QR RD RA 111 SECTION QUESTION 112 www.example.com. IN A 113 SECTION ANSWER 114 www.example.com. IN A 10.20.30.40 115 SECTION AUTHORITY 116 example.com. IN NS ns.example.com. 117 SECTION ADDITIONAL 118 ns.example.com. IN A 10.20.30.50 119 ENTRY_END 120 121 SCENARIO_END 122
Indexes created Tue Jun 02 00:25:15 UTC 2026