Home | History | Annotate | Line # | Download | only in testdata 
      1 ; config options
      2 server:
      3 	target-fetch-policy: "0 0 0 0 0"
      4 	qname-minimisation: "no"
      5 	harden-below-nxdomain: yes
      6 	trust-anchor: ". IN DNSKEY 257 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3"
      7 	val-override-date: "20070916134226"
      8 	fake-sha1: yes
      9 	trust-anchor-signaling: no
     10 	aggressive-nsec: no
     11 	domain-insecure: "under.example.local"
     12 
     13 stub-zone:
     14 	name: "."
     15 	stub-addr: 193.0.14.129 	# K.ROOT-SERVERS.NET.
     16 stub-zone:
     17 	name: "under.example.local"
     18 	stub-addr: 1.2.3.4
     19 CONFIG_END
     20 
     21 SCENARIO_BEGIN Test stop cache on nxdomain, with stub under intermediate label
     22 
     23 ; K.ROOT-SERVERS.NET.
     24 RANGE_BEGIN 0 100
     25 	ADDRESS 193.0.14.129 
     26 ENTRY_BEGIN
     27 MATCH opcode qtype qname
     28 ADJUST copy_id
     29 REPLY QR NOERROR
     30 SECTION QUESTION
     31 . IN NS
     32 SECTION ANSWER
     33 . IN NS	K.ROOT-SERVERS.NET.
     34 SECTION ADDITIONAL
     35 K.ROOT-SERVERS.NET.	IN	A	193.0.14.129
     36 ENTRY_END
     37 
     38 ENTRY_BEGIN
     39 MATCH opcode qtype qname
     40 ADJUST copy_id
     41 REPLY QR NOERROR
     42 SECTION QUESTION
     43 . IN DNSKEY
     44 SECTION ANSWER
     45 .	3600	IN	DNSKEY	257 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30900 (ksk), size = 512b}
     46 .	3600	IN	RRSIG	DNSKEY 5 0 3600 20070926134150 20070829134150 30900 . BlVcSh8xSgm7ne+XVCJwNHQKjk5kTJgG4Fa3sOSfp3YUjb2YclmVWyIw7XEHl0/C6CN5gdy18idnM6vT6Hy42A== ;{id = 30900}
     47 ENTRY_END
     48 
     49 ENTRY_BEGIN
     50 MATCH opcode qtype qname
     51 ADJUST copy_id
     52 REPLY QR AA NXDOMAIN
     53 SECTION QUESTION
     54 example.local. IN A
     55 SECTION AUTHORITY
     56 .	86400	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2010111601 1800 900 604800 86400
     57 .	86400	IN	RRSIG	SOA 5 0 86400 20070926134150 20070829134150 30900 . bOYbFZZp7vWWC2oxV+kph+YXjoQj2f6QJktlgmzRI7oReFX9jy/LibTPQi/sW0SGHpLaj3G5p4IfIlBibne4DA== ;{id = 30900}
     58 .	86400	IN	NSEC	ac. NS SOA RRSIG NSEC DNSKEY 
     59 .	86400	IN	RRSIG	NSEC 5 0 86400 20070926134150 20070829134150 30900 . U+/m5+FmczzkosEx1aTP7MK/F3PpcKWct8CzM1jhjwNe2RlnW7qFe0IH8SLzD/elvxDTQMpJSMlKOhUUdapB8g== ;{id = 30900}
     60 lk.	86400	IN	NSEC	lr. NS DS RRSIG NSEC 
     61 lk.	86400	IN	RRSIG	NSEC 5 1 86400 20070926134150 20070829134150 30900 . j6Pw5Eu9vGHDJcckTSWa8YD1b7FV7c/Z8aVkLfJCH+iPcaa40/LSp784+t2PnAAXL8fgriNL6jF/ve1rti3ANQ== ;{id = 30900}
     62 ENTRY_END
     63 RANGE_END
     64 
     65 ; under.example.local
     66 RANGE_BEGIN 0 100
     67 	ADDRESS 1.2.3.4
     68 ENTRY_BEGIN
     69 MATCH opcode qtype qname
     70 ADJUST copy_id
     71 REPLY QR AA NOERROR
     72 SECTION QUESTION
     73 www.under.example.local. IN A
     74 SECTION ANSWER
     75 www.under.example.local. IN A 10.20.30.40
     76 ENTRY_END
     77 RANGE_END
     78 
     79 STEP 1 QUERY
     80 ENTRY_BEGIN
     81 REPLY RD
     82 SECTION QUESTION
     83 example.local. IN A
     84 ENTRY_END
     85 
     86 ; recursion happens here.
     87 STEP 10 CHECK_ANSWER
     88 ENTRY_BEGIN
     89 MATCH all
     90 REPLY QR RD RA NXDOMAIN
     91 SECTION QUESTION
     92 example.local. IN A
     93 SECTION AUTHORITY
     94 .	86400	IN	SOA	a.root-servers.net. nstld.verisign-grs.com. 2010111601 1800 900 604800 86400
     95 ENTRY_END
     96 
     97 STEP 20 QUERY
     98 ENTRY_BEGIN
     99 REPLY RD
    100 SECTION QUESTION
    101 www.under.example.local. IN A
    102 ENTRY_END
    103 
    104 ; this query does not get sent to K-ROOT.
    105 STEP 30 CHECK_ANSWER
    106 ENTRY_BEGIN
    107 MATCH all
    108 REPLY QR RD RA NOERROR
    109 SECTION QUESTION
    110 www.under.example.local. IN A
    111 SECTION ANSWER
    112 www.under.example.local. IN A 10.20.30.40
    113 ENTRY_END
    114 
    115 SCENARIO_END
    116