1 1.1 christos ; config options 2 1.1 christos ; The island of trust is at testzone.nlnetlabs.nl 3 1.1 christos server: 4 1.1 christos trust-anchor: "testzone.nlnetlabs.nl. IN DS 2926 8 2 6f8512d1e82eecbd684fc4a76f39f8c5b411af385494873bdead663ddb78a88b" 5 1.1 christos val-override-date: "20180213111425" 6 1.1 christos target-fetch-policy: "0 0 0 0 0" 7 1.1 christos qname-minimisation: "no" 8 1.1 christos trust-anchor-signaling: no 9 1.1 christos aggressive-nsec: yes 10 1.1 christos domain-insecure: "ant.testzone.nlnetlabs.nl" 11 1.1 christos 12 1.1 christos stub-zone: 13 1.1 christos name: "testzone.nlnetlabs.nl" 14 1.1 christos stub-addr: 185.49.140.60 15 1.1 christos stub-zone: 16 1.1 christos name: "ant.testzone.nlnetlabs.nl" 17 1.1 christos stub-addr: 185.49.140.61 18 1.1 christos CONFIG_END 19 1.1 christos 20 1.1 christos SCENARIO_BEGIN Test to not do aggressive NSEC for domains under NTA 21 1.1 christos 22 1.1 christos ; testzone.nlnetlabs.nl nameserver 23 1.1 christos RANGE_BEGIN 0 100 24 1.1 christos ADDRESS 185.49.140.60 25 1.1 christos 26 1.1 christos ; response to DNSKEY priming query 27 1.1 christos ENTRY_BEGIN 28 1.1 christos MATCH opcode qtype qname 29 1.1 christos ADJUST copy_id 30 1.1 christos REPLY QR NOERROR 31 1.1 christos SECTION QUESTION 32 1.1 christos testzone.nlnetlabs.nl. IN DNSKEY 33 1.1 christos SECTION ANSWER 34 1.1 christos testzone.nlnetlabs.nl. 3600 IN DNSKEY 256 3 8 AwEAAbrNEg01ByEpUUiip+GNAkNVjUfeX7sl9kPUssR3JQvhCJWVs7aBY0Ae1cNtQWgzCmidGorlXvEY2nNBiMM4l7IXqopJsgyj+Cb3nQPVLi/7yVwUb+AIwSJw1gRFElMYonsMOL9qUrJi8BBCnCR0EqkL+X4slmtkXSJbzQAwvHI7 35 1.1 christos testzone.nlnetlabs.nl. 3600 IN DNSKEY 257 3 8 AwEAAbn0eGV0wqMBQNSVTY//BoiOD7bexC7FcVv0fH9bwjKOA8I+ob377E14vZN2xRLC2b1GG5iBckjeI+N2dB9eC2KRnScU3Gbmtw75BBYfm/y4Hu72zEjEZ0ZGv6gjSZRv/1o87ODAwQaxN8/dQD+5U/5xu12XM39bCJZx2GWTbf5L 36 1.1 christos testzone.nlnetlabs.nl. 3600 IN RRSIG DNSKEY 8 3 3600 20180313101254 20180213101254 2926 testzone.nlnetlabs.nl. gSLZb/dSKutRlAKSo8ZCC1R+SkvABMYBRQsms77WPfYCDbt5GbXeuGqwGdadjEN8gGSU+qrYNxBZRhlYY6d2vtl+DGh67qwteHSwOCw0VvU64eVh38maJA1U673U4JtlBALzBOA/UHmXPlCgPPoW3BG0U3T2Qir/mqOmegmpBcw= 37 1.1 christos SECTION AUTHORITY 38 1.1 christos testzone.nlnetlabs.nl. 3600 IN NS ns.nlnetlabs.nl. 39 1.1 christos testzone.nlnetlabs.nl. 3600 IN RRSIG NS 8 3 3600 20180313102201 20180213102201 44940 testzone.nlnetlabs.nl. Ox0iKc+z3i1qR1wMr8TBPYzuYO5UTaLrBsDagJAd25fvCkGN+h3HPmWlCIW0cBHsS+IaHXr1JhWutjSCc4UBcY+sT7Y7Fw3V1qdZW2KzbSgWUyPkTXoYcIIVLacSUTXEyltW6jj61WEI/RaUGUCJortvwH5iv1Hzee343isxObI= 40 1.1 christos SECTION ADDITIONAL 41 1.1 christos ENTRY_END 42 1.1 christos 43 1.1 christos ; response for antelope.testzone.nlnetlabs.nl. 44 1.1 christos ENTRY_BEGIN 45 1.1 christos MATCH opcode qtype qname 46 1.1 christos ADJUST copy_id 47 1.1 christos REPLY QR NXDOMAIN 48 1.1 christos SECTION QUESTION 49 1.1 christos antelope.testzone.nlnetlabs.nl. IN TXT 50 1.1 christos SECTION ANSWER 51 1.1 christos SECTION AUTHORITY 52 1.1 christos testzone.nlnetlabs.nl. 3600 IN NSEC alligator.testzone.nlnetlabs.nl. NS SOA RRSIG NSEC DNSKEY 53 1.1 christos testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 3 3600 20180313102201 20180213102201 44940 testzone.nlnetlabs.nl. gTKn6U1nal9oA79IRxLa/7zexl6A0yJZzeEGBbZ5rh5feyAr2X4LTR9bPCgcHeMVggf4FP+kD1L/sxzj/YLwB1ZKGKlwnzsHtPFTlmvDClaqQ76DRZq5Vejr2ZfnclBUb2vtxaXywTRW8oueaaq9flcShEQ/cQ+KRU8sc344qd0= 54 1.1 christos alligator.testzone.nlnetlabs.nl. 3600 IN NSEC cheetah.testzone.nlnetlabs.nl. TXT RRSIG NSEC 55 1.1 christos alligator.testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 4 3600 20180313102201 20180213102201 44940 testzone.nlnetlabs.nl. QAgQ0AsMoYG02+VPfoOctSPlTHdQOkQt5fFkSkzIbVhUzNOqa+dB/Qkc81AwFeJosA+PvYjt6utcVkIWmK2Djy9eXC49gILtVF79vUe4G7ZrybO5NXjqNa5ANoUGM+yew4wkjeNOMVAsvs+1kvFY7S8RAa/0AIYlZHQ8vNBPNaI= 56 1.1 christos testzone.nlnetlabs.nl. 3600 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 57 1.1 christos testzone.nlnetlabs.nl. 3600 IN RRSIG SOA 8 3 3600 20180313102201 20180213102201 44940 testzone.nlnetlabs.nl. GhmXNFQktZIgaBpGKwj9Q2mfq5+jcbRPK+PPgtRVicUPZga/d/iGEL8PV/8DzGwkaZbM14pamSUMgdJibW4zNhLz/ukjPilbjoj6giH1jtbdZLAQ6iK9pZ/4jKUEq4txviTczZNnDeolgPEEl4xo4NclQmi7zj1XBlQRbjvG0/0= 58 1.1 christos SECTION ADDITIONAL 59 1.1 christos ENTRY_END 60 1.1 christos 61 1.1 christos RANGE_END 62 1.1 christos 63 1.1 christos ; ant.testzone.nlnetlabs.nl nameserver 64 1.1 christos RANGE_BEGIN 0 100 65 1.1 christos ADDRESS 185.49.140.61 66 1.1 christos 67 1.1 christos ENTRY_BEGIN 68 1.1 christos MATCH opcode qtype qname 69 1.1 christos ADJUST copy_id 70 1.1 christos REPLY QR NOERROR 71 1.1 christos SECTION QUESTION 72 1.1 christos ant.testzone.nlnetlabs.nl. IN TXT 73 1.1 christos SECTION ANSWER 74 1.1 christos ant.testzone.nlnetlabs.nl. 10 IN TXT "domain under NTA" 75 1.1 christos ENTRY_END 76 1.1 christos RANGE_END 77 1.1 christos 78 1.1 christos STEP 1 QUERY 79 1.1 christos ENTRY_BEGIN 80 1.1 christos REPLY RD DO 81 1.1 christos SECTION QUESTION 82 1.1 christos antelope.testzone.nlnetlabs.nl. IN TXT 83 1.1 christos ENTRY_END 84 1.1 christos 85 1.1 christos ; recursion happens here. 86 1.1 christos STEP 10 CHECK_ANSWER 87 1.1 christos ENTRY_BEGIN 88 1.1 christos MATCH all 89 1.1 christos REPLY QR RD RA DO AD NXDOMAIN 90 1.1 christos SECTION QUESTION 91 1.1 christos antelope.testzone.nlnetlabs.nl. IN TXT 92 1.1 christos SECTION ANSWER 93 1.1 christos SECTION AUTHORITY 94 1.1 christos testzone.nlnetlabs.nl. 3600 IN NSEC alligator.testzone.nlnetlabs.nl. NS SOA RRSIG NSEC DNSKEY 95 1.1 christos testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 3 3600 20180313102201 20180213102201 44940 testzone.nlnetlabs.nl. gTKn6U1nal9oA79IRxLa/7zexl6A0yJZzeEGBbZ5rh5feyAr2X4LTR9bPCgcHeMVggf4FP+kD1L/sxzj/YLwB1ZKGKlwnzsHtPFTlmvDClaqQ76DRZq5Vejr2ZfnclBUb2vtxaXywTRW8oueaaq9flcShEQ/cQ+KRU8sc344qd0= 96 1.1 christos alligator.testzone.nlnetlabs.nl. 3600 IN NSEC cheetah.testzone.nlnetlabs.nl. TXT RRSIG NSEC 97 1.1 christos alligator.testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 4 3600 20180313102201 20180213102201 44940 testzone.nlnetlabs.nl. QAgQ0AsMoYG02+VPfoOctSPlTHdQOkQt5fFkSkzIbVhUzNOqa+dB/Qkc81AwFeJosA+PvYjt6utcVkIWmK2Djy9eXC49gILtVF79vUe4G7ZrybO5NXjqNa5ANoUGM+yew4wkjeNOMVAsvs+1kvFY7S8RAa/0AIYlZHQ8vNBPNaI= 98 1.1 christos testzone.nlnetlabs.nl. 3600 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 99 1.1 christos testzone.nlnetlabs.nl. 3600 IN RRSIG SOA 8 3 3600 20180313102201 20180213102201 44940 testzone.nlnetlabs.nl. GhmXNFQktZIgaBpGKwj9Q2mfq5+jcbRPK+PPgtRVicUPZga/d/iGEL8PV/8DzGwkaZbM14pamSUMgdJibW4zNhLz/ukjPilbjoj6giH1jtbdZLAQ6iK9pZ/4jKUEq4txviTczZNnDeolgPEEl4xo4NclQmi7zj1XBlQRbjvG0/0= 100 1.1 christos SECTION ADDITIONAL 101 1.1 christos ENTRY_END 102 1.1 christos 103 1.1 christos ; query for ant.testzone.nlnetlabs.nl, which is below an NTA 104 1.1 christos STEP 20 QUERY 105 1.1 christos ENTRY_BEGIN 106 1.1 christos REPLY RD DO 107 1.1 christos SECTION QUESTION 108 1.1 christos ant.testzone.nlnetlabs.nl. IN TXT 109 1.1 christos ENTRY_END 110 1.1 christos 111 1.1 christos STEP 30 CHECK_ANSWER 112 1.1 christos ENTRY_BEGIN 113 1.1 christos MATCH all 114 1.1 christos REPLY QR RD RA DO NOERROR 115 1.1 christos SECTION QUESTION 116 1.1 christos ant.testzone.nlnetlabs.nl. IN TXT 117 1.1 christos SECTION ANSWER 118 1.1 christos ant.testzone.nlnetlabs.nl. 10 IN TXT "domain under NTA" 119 1.1 christos ENTRY_END 120 1.1 christos 121 1.1 christos SCENARIO_END 122