1 ; config options 2 ; The island of trust is at testzone.nlnetlabs.nl 3 server: 4 trust-anchor: "testzone.nlnetlabs.nl. 3600 IN DS 1444 8 2 07633464c1c7b93abd6fc24c73f904a40f0f304b279a80667d7e33908eed43be" 5 val-override-date: "20180213111425" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: "no" 8 trust-anchor-signaling: no 9 aggressive-nsec: yes 10 prefetch: yes 11 12 stub-zone: 13 name: "testzone.nlnetlabs.nl" 14 stub-addr: 185.49.140.60 15 stub-zone: 16 name: "zone2.nlnetlabs.nl" 17 stub-addr: 185.49.140.61 18 CONFIG_END 19 20 SCENARIO_BEGIN Test validator with negative cache TTL (aggressive NSEC) and some prefetch. 21 ; The NSEC records are restricted by the TTL of 900 of the SOA record. 22 ; There are prefetch actions, both with and without a CNAME preceding. 23 24 ; testzone.nlnetlabs.nl nameserver 25 RANGE_BEGIN 0 100 26 ADDRESS 185.49.140.60 27 28 ; response to DNSKEY priming query 29 ENTRY_BEGIN 30 MATCH opcode qtype qname 31 ADJUST copy_id 32 REPLY QR AA NOERROR 33 SECTION QUESTION 34 testzone.nlnetlabs.nl. IN DNSKEY 35 SECTION ANSWER 36 testzone.nlnetlabs.nl. 3600 IN DNSKEY 257 3 8 AwEAAbd9WqjzE2Pynz21OG5doSf9hFzMr5dhzz2waZ3vTa+0o5r7AjTAqmA1yH/B3+aAMihUm5ucZSfVqo7+kOaRE8yFj9aivOmA1n1+JLevJq/oyvQyjxQN2Qb89LyaNUT5oKZIiL+uyyhNW3KDR3SSbQ/GBwQNDHVcZi+JDR3RC0r7 ;{id = 1444 (ksk), size = 1024b} 37 testzone.nlnetlabs.nl. 3600 IN RRSIG DNSKEY 8 3 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. kQ2sc41aQeMxQ7KInz2HrHi4nQcUGdv1olro0GmVYgPvIJh7SqBKW3yZWYeQrbWWwdc3klBERBbBI8gnkNYbl5kX3BBa5su8w71mpTQPRGtMxDTB17daxc0SxpPUxM35CpWU9QlBuDXcu+VNyVUuLvZGGLznlqr6ku888U2Rz+c= 38 ENTRY_END 39 40 ; response for antelope.testzone.nlnetlabs.nl. 41 ; NSECs cover ant.testzone.nlnetlabs.nl as non-existent. 42 ENTRY_BEGIN 43 MATCH opcode qtype qname 44 ADJUST copy_id 45 REPLY QR AA NXDOMAIN 46 SECTION QUESTION 47 antelope.testzone.nlnetlabs.nl. IN TXT 48 SECTION ANSWER 49 SECTION AUTHORITY 50 testzone.nlnetlabs.nl. 3600 IN NSEC alligator.testzone.nlnetlabs.nl. NS SOA RRSIG NSEC DNSKEY 51 testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 3 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. tcW20hZu5Ao+ikM+qjqAlRt3ujNxTKi6kZF3waWJGY7Ldyp9XyWzB1DeoQzaNJ6zflPYFO32RUhj7jWhEIUphG4+lEvm7VGJAdSteUZ2yOppN6eZvOk0Nc0nAGPFGBjLO6ul1Wh1X+jL61q7mWt3nY+IFBZHWmhsi2Qi7vM/W4E= 52 alligator.testzone.nlnetlabs.nl. 3600 IN NSEC cheetah.testzone.nlnetlabs.nl. TXT RRSIG NSEC 53 alligator.testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. Zfkp3kmN8heAuIF/apf6RHhZAoGyXnvZLALRYTKIH7E9XC2wtvG9dZla4WLSr3ndA4d0CFgnKOt8mSVSLyNn232D0ahx4DFAnOJitnt9odT2+2sYhJbwCx38tPKhAUWmIn2jGZGMVjbVbEVi7WyQBrJYQqyhE/lADEDSdQZBNyA= 54 testzone.nlnetlabs.nl. 900 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 55 testzone.nlnetlabs.nl. 900 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 56 SECTION ADDITIONAL 57 ENTRY_END 58 59 ; No answer for ant.testzone.nlnetlabs.nl in this range 60 61 ; response for peanut.testzone.nlnetlabs.nl. AAAA 62 ENTRY_BEGIN 63 MATCH opcode qtype qname 64 ADJUST copy_id 65 REPLY QR AA NOERROR 66 SECTION QUESTION 67 peanut.testzone.nlnetlabs.nl. IN AAAA 68 SECTION AUTHORITY 69 peanut.testzone.nlnetlabs.nl. IN NSEC rust.testzone.nlnetlabs.nl. A RRSIG NSEC 70 peanut.testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. GhUUt3n1oVZCbU5l7XhbtE1kAhFXBRvQRvp/s3INitoHm1D54VERXWR33g+aQMcLAyCOe2TmpJMH1zDSbccf0zabvwEzqDzPmgcPt0KjXUdrN84/2XN+C4U84golbUui61lhhU+6bL8rylPuv3XtqQ4ppXy8sSe+gfsskauhMpg= 71 testzone.nlnetlabs.nl. 900 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 72 testzone.nlnetlabs.nl. 900 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 73 SECTION ADDITIONAL 74 ENTRY_END 75 RANGE_END 76 77 ; testzone.nlnetlabs.nl nameserver 78 RANGE_BEGIN 100 200 79 ADDRESS 185.49.140.60 80 ; response for ant.testzone.nlnetlabs.nl 81 ENTRY_BEGIN 82 MATCH opcode qtype qname 83 REPLY QR AA NOERROR 84 SECTION QUESTION 85 ant.testzone.nlnetlabs.nl. IN TXT 86 SECTION ANSWER 87 ant.testzone.nlnetlabs.nl. TXT "heap" 88 ant.testzone.nlnetlabs.nl. 3600 IN RRSIG TXT 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. Sn8dBGMSYGGKs7yGWO0CShxbm3ba5Y6ysHyE/HJyFnS8NmsKIx/KVdFPRQx/Jm7a3hektRXrjxetfhfJm0SzJ2UFeKlkE+VJ/Lj2oAETqN1oqqkNr+RDdbKLMzLApMRgrhStSAO1Yb8/8oUIflyrjNbuDbAHSMbkOE+Z49LIais= 89 ENTRY_END 90 RANGE_END 91 92 ; zone2.nlnetlabs.nl nameserver 93 RANGE_BEGIN 0 100 94 ADDRESS 185.49.140.61 95 ENTRY_BEGIN 96 MATCH opcode qtype qname 97 REPLY QR AA NOERROR 98 SECTION QUESTION 99 redir.zone2.nlnetlabs.nl. IN TXT 100 SECTION ANSWER 101 redir.zone2.nlnetlabs.nl. 15 IN CNAME antelope.testzone.nlnetlabs.nl. 102 ENTRY_END 103 RANGE_END 104 105 STEP 1 QUERY 106 ENTRY_BEGIN 107 REPLY RD DO 108 SECTION QUESTION 109 antelope.testzone.nlnetlabs.nl. IN TXT 110 ENTRY_END 111 112 ; recursion happens here. Expect NXDOMAIN. 113 STEP 2 CHECK_ANSWER 114 ENTRY_BEGIN 115 MATCH all ttl 116 REPLY QR RD RA DO AD NXDOMAIN 117 SECTION QUESTION 118 antelope.testzone.nlnetlabs.nl. IN TXT 119 SECTION ANSWER 120 SECTION AUTHORITY 121 testzone.nlnetlabs.nl. 3600 IN NSEC alligator.testzone.nlnetlabs.nl. NS SOA RRSIG NSEC DNSKEY 122 testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 3 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. tcW20hZu5Ao+ikM+qjqAlRt3ujNxTKi6kZF3waWJGY7Ldyp9XyWzB1DeoQzaNJ6zflPYFO32RUhj7jWhEIUphG4+lEvm7VGJAdSteUZ2yOppN6eZvOk0Nc0nAGPFGBjLO6ul1Wh1X+jL61q7mWt3nY+IFBZHWmhsi2Qi7vM/W4E= 123 alligator.testzone.nlnetlabs.nl. 3600 IN NSEC cheetah.testzone.nlnetlabs.nl. TXT RRSIG NSEC 124 alligator.testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. Zfkp3kmN8heAuIF/apf6RHhZAoGyXnvZLALRYTKIH7E9XC2wtvG9dZla4WLSr3ndA4d0CFgnKOt8mSVSLyNn232D0ahx4DFAnOJitnt9odT2+2sYhJbwCx38tPKhAUWmIn2jGZGMVjbVbEVi7WyQBrJYQqyhE/lADEDSdQZBNyA= 125 testzone.nlnetlabs.nl. 900 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 126 testzone.nlnetlabs.nl. 900 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 127 SECTION ADDITIONAL 128 ENTRY_END 129 130 STEP 4 QUERY 131 ENTRY_BEGIN 132 REPLY RD DO 133 SECTION QUESTION 134 peanut.testzone.nlnetlabs.nl. IN AAAA 135 ENTRY_END 136 137 STEP 5 CHECK_ANSWER 138 ENTRY_BEGIN 139 MATCH all ttl 140 REPLY QR RD RA AD DO NOERROR 141 SECTION QUESTION 142 peanut.testzone.nlnetlabs.nl. IN AAAA 143 SECTION AUTHORITY 144 peanut.testzone.nlnetlabs.nl. IN NSEC rust.testzone.nlnetlabs.nl. A RRSIG NSEC 145 peanut.testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. GhUUt3n1oVZCbU5l7XhbtE1kAhFXBRvQRvp/s3INitoHm1D54VERXWR33g+aQMcLAyCOe2TmpJMH1zDSbccf0zabvwEzqDzPmgcPt0KjXUdrN84/2XN+C4U84golbUui61lhhU+6bL8rylPuv3XtqQ4ppXy8sSe+gfsskauhMpg= 146 testzone.nlnetlabs.nl. 900 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 147 testzone.nlnetlabs.nl. 900 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 148 ENTRY_END 149 150 ; query for ant.testzone.nlnetlabs.nl (non-existent) 151 STEP 11 QUERY 152 ENTRY_BEGIN 153 REPLY RD DO 154 SECTION QUESTION 155 ant.testzone.nlnetlabs.nl. IN TXT 156 ENTRY_END 157 158 ; this is the synthesized NXDOMAIN from aggressive-nsec 159 STEP 12 CHECK_ANSWER 160 ENTRY_BEGIN 161 MATCH all ttl 162 REPLY QR RD RA AD DO NXDOMAIN 163 SECTION QUESTION 164 ant.testzone.nlnetlabs.nl. IN TXT 165 SECTION ANSWER 166 SECTION AUTHORITY 167 testzone.nlnetlabs.nl. 3600 IN NSEC alligator.testzone.nlnetlabs.nl. NS SOA RRSIG NSEC DNSKEY 168 testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 3 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. tcW20hZu5Ao+ikM+qjqAlRt3ujNxTKi6kZF3waWJGY7Ldyp9XyWzB1DeoQzaNJ6zflPYFO32RUhj7jWhEIUphG4+lEvm7VGJAdSteUZ2yOppN6eZvOk0Nc0nAGPFGBjLO6ul1Wh1X+jL61q7mWt3nY+IFBZHWmhsi2Qi7vM/W4E= 169 alligator.testzone.nlnetlabs.nl. 3600 IN NSEC cheetah.testzone.nlnetlabs.nl. TXT RRSIG NSEC 170 alligator.testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. Zfkp3kmN8heAuIF/apf6RHhZAoGyXnvZLALRYTKIH7E9XC2wtvG9dZla4WLSr3ndA4d0CFgnKOt8mSVSLyNn232D0ahx4DFAnOJitnt9odT2+2sYhJbwCx38tPKhAUWmIn2jGZGMVjbVbEVi7WyQBrJYQqyhE/lADEDSdQZBNyA= 171 testzone.nlnetlabs.nl. 900 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 172 testzone.nlnetlabs.nl. 900 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 173 ENTRY_END 174 175 STEP 13 TIME_PASSES ELAPSE 860 176 STEP 14 QUERY 177 ENTRY_BEGIN 178 REPLY RD DO 179 SECTION QUESTION 180 redir.zone2.nlnetlabs.nl. IN TXT 181 ENTRY_END 182 183 STEP 15 CHECK_ANSWER 184 ENTRY_BEGIN 185 MATCH all ttl 186 REPLY QR RD RA DO NXDOMAIN 187 SECTION QUESTION 188 redir.zone2.nlnetlabs.nl. IN TXT 189 SECTION ANSWER 190 redir.zone2.nlnetlabs.nl. 15 IN CNAME antelope.testzone.nlnetlabs.nl. 191 SECTION AUTHORITY 192 testzone.nlnetlabs.nl. 2740 IN NSEC alligator.testzone.nlnetlabs.nl. NS SOA RRSIG NSEC DNSKEY 193 testzone.nlnetlabs.nl. 2740 IN RRSIG NSEC 8 3 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. tcW20hZu5Ao+ikM+qjqAlRt3ujNxTKi6kZF3waWJGY7Ldyp9XyWzB1DeoQzaNJ6zflPYFO32RUhj7jWhEIUphG4+lEvm7VGJAdSteUZ2yOppN6eZvOk0Nc0nAGPFGBjLO6ul1Wh1X+jL61q7mWt3nY+IFBZHWmhsi2Qi7vM/W4E= 194 alligator.testzone.nlnetlabs.nl. 2740 IN NSEC cheetah.testzone.nlnetlabs.nl. TXT RRSIG NSEC 195 alligator.testzone.nlnetlabs.nl. 2740 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. Zfkp3kmN8heAuIF/apf6RHhZAoGyXnvZLALRYTKIH7E9XC2wtvG9dZla4WLSr3ndA4d0CFgnKOt8mSVSLyNn232D0ahx4DFAnOJitnt9odT2+2sYhJbwCx38tPKhAUWmIn2jGZGMVjbVbEVi7WyQBrJYQqyhE/lADEDSdQZBNyA= 196 testzone.nlnetlabs.nl. 40 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 197 testzone.nlnetlabs.nl. 40 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 198 ENTRY_END 199 200 STEP 16 TIME_PASSES ELAPSE 14 201 STEP 17 QUERY 202 ENTRY_BEGIN 203 REPLY RD DO 204 SECTION QUESTION 205 redir.zone2.nlnetlabs.nl. IN TXT 206 ENTRY_END 207 208 STEP 18 CHECK_ANSWER 209 ENTRY_BEGIN 210 MATCH all ttl 211 REPLY QR RD RA DO NXDOMAIN 212 SECTION QUESTION 213 redir.zone2.nlnetlabs.nl. IN TXT 214 SECTION ANSWER 215 redir.zone2.nlnetlabs.nl. 1 IN CNAME antelope.testzone.nlnetlabs.nl. 216 SECTION AUTHORITY 217 testzone.nlnetlabs.nl. 2726 IN NSEC alligator.testzone.nlnetlabs.nl. NS SOA RRSIG NSEC DNSKEY 218 testzone.nlnetlabs.nl. 2726 IN RRSIG NSEC 8 3 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. tcW20hZu5Ao+ikM+qjqAlRt3ujNxTKi6kZF3waWJGY7Ldyp9XyWzB1DeoQzaNJ6zflPYFO32RUhj7jWhEIUphG4+lEvm7VGJAdSteUZ2yOppN6eZvOk0Nc0nAGPFGBjLO6ul1Wh1X+jL61q7mWt3nY+IFBZHWmhsi2Qi7vM/W4E= 219 alligator.testzone.nlnetlabs.nl. 2726 IN NSEC cheetah.testzone.nlnetlabs.nl. TXT RRSIG NSEC 220 alligator.testzone.nlnetlabs.nl. 2726 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. Zfkp3kmN8heAuIF/apf6RHhZAoGyXnvZLALRYTKIH7E9XC2wtvG9dZla4WLSr3ndA4d0CFgnKOt8mSVSLyNn232D0ahx4DFAnOJitnt9odT2+2sYhJbwCx38tPKhAUWmIn2jGZGMVjbVbEVi7WyQBrJYQqyhE/lADEDSdQZBNyA= 221 testzone.nlnetlabs.nl. 26 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 222 testzone.nlnetlabs.nl. 26 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 223 ENTRY_END 224 225 STEP 19 TRAFFIC 226 227 STEP 20 QUERY 228 ENTRY_BEGIN 229 REPLY RD DO 230 SECTION QUESTION 231 peanut.testzone.nlnetlabs.nl. IN AAAA 232 ENTRY_END 233 234 STEP 21 CHECK_ANSWER 235 ENTRY_BEGIN 236 MATCH all ttl 237 REPLY QR RD RA AD DO NOERROR 238 SECTION QUESTION 239 peanut.testzone.nlnetlabs.nl. IN AAAA 240 SECTION AUTHORITY 241 peanut.testzone.nlnetlabs.nl. 2726 IN NSEC rust.testzone.nlnetlabs.nl. A RRSIG NSEC 242 peanut.testzone.nlnetlabs.nl. 2726 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. GhUUt3n1oVZCbU5l7XhbtE1kAhFXBRvQRvp/s3INitoHm1D54VERXWR33g+aQMcLAyCOe2TmpJMH1zDSbccf0zabvwEzqDzPmgcPt0KjXUdrN84/2XN+C4U84golbUui61lhhU+6bL8rylPuv3XtqQ4ppXy8sSe+gfsskauhMpg= 243 testzone.nlnetlabs.nl. 900 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 244 testzone.nlnetlabs.nl. 900 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 245 ENTRY_END 246 247 STEP 22 TRAFFIC 248 STEP 23 TIME_PASSES ELAPSE 901 249 250 STEP 24 QUERY 251 ENTRY_BEGIN 252 REPLY RD DO 253 SECTION QUESTION 254 peanut.testzone.nlnetlabs.nl. IN AAAA 255 ENTRY_END 256 257 STEP 25 CHECK_ANSWER 258 ENTRY_BEGIN 259 MATCH all ttl 260 REPLY QR RD RA AD DO NOERROR 261 SECTION QUESTION 262 peanut.testzone.nlnetlabs.nl. IN AAAA 263 SECTION AUTHORITY 264 peanut.testzone.nlnetlabs.nl. IN NSEC rust.testzone.nlnetlabs.nl. A RRSIG NSEC 265 peanut.testzone.nlnetlabs.nl. 3600 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. GhUUt3n1oVZCbU5l7XhbtE1kAhFXBRvQRvp/s3INitoHm1D54VERXWR33g+aQMcLAyCOe2TmpJMH1zDSbccf0zabvwEzqDzPmgcPt0KjXUdrN84/2XN+C4U84golbUui61lhhU+6bL8rylPuv3XtqQ4ppXy8sSe+gfsskauhMpg= 266 testzone.nlnetlabs.nl. 900 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 267 testzone.nlnetlabs.nl. 900 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 268 ENTRY_END 269 STEP 26 TRAFFIC 270 271 ; Time passes and NSECs should be expired. 272 STEP 60 TIME_PASSES ELAPSE 60 273 274 ; query something that gets the SOA record for the testzone in cache. 275 STEP 70 QUERY 276 ENTRY_BEGIN 277 REPLY RD DO 278 SECTION QUESTION 279 peanut.testzone.nlnetlabs.nl. IN AAAA 280 ENTRY_END 281 282 STEP 80 CHECK_ANSWER 283 ENTRY_BEGIN 284 MATCH all ttl 285 REPLY QR RD RA AD DO NOERROR 286 SECTION QUESTION 287 peanut.testzone.nlnetlabs.nl. IN AAAA 288 SECTION AUTHORITY 289 peanut.testzone.nlnetlabs.nl. 3540 IN NSEC rust.testzone.nlnetlabs.nl. A RRSIG NSEC 290 peanut.testzone.nlnetlabs.nl. 3540 IN RRSIG NSEC 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. GhUUt3n1oVZCbU5l7XhbtE1kAhFXBRvQRvp/s3INitoHm1D54VERXWR33g+aQMcLAyCOe2TmpJMH1zDSbccf0zabvwEzqDzPmgcPt0KjXUdrN84/2XN+C4U84golbUui61lhhU+6bL8rylPuv3XtqQ4ppXy8sSe+gfsskauhMpg= 291 testzone.nlnetlabs.nl. 840 IN SOA ns.nlnetlabs.nl. ralph.nlnetlabs.nl. 1 14400 3600 604800 3600 292 testzone.nlnetlabs.nl. 840 IN RRSIG SOA 8 3 900 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. abG0cByo/q5NaDNMz6FPvNvehHqUDhQRwLdvG72315hMGzCavLRWuAB5gieibMCrICH2WVHVj7fisjSuY0iPwf9xZlCGts3Z+xD9D72VRiTz7QXF+JjRWKl+3Uk6c29+pvIRKXC1Ht0r9uBXGmDTaHdV7cZCveoDwIVSngY+mQ0= 293 ENTRY_END 294 295 ; query for ant.testzone.nlnetlabs.nl. In this range it is on the nameserver. 296 STEP 110 QUERY 297 ENTRY_BEGIN 298 REPLY RD DO 299 SECTION QUESTION 300 ant.testzone.nlnetlabs.nl. IN TXT 301 ENTRY_END 302 303 ; Expect an answer since the 3600 TTL NSECs from STEP 10 should have been 304 ; limited to 900 and be expired by now. 305 STEP 120 CHECK_ANSWER 306 ENTRY_BEGIN 307 MATCH all ttl 308 REPLY QR RD RA AD DO NOERROR 309 SECTION QUESTION 310 ant.testzone.nlnetlabs.nl. IN TXT 311 SECTION ANSWER 312 ant.testzone.nlnetlabs.nl. TXT "heap" 313 ant.testzone.nlnetlabs.nl. 3600 IN RRSIG TXT 8 4 3600 20180313101254 20180213101254 1444 testzone.nlnetlabs.nl. Sn8dBGMSYGGKs7yGWO0CShxbm3ba5Y6ysHyE/HJyFnS8NmsKIx/KVdFPRQx/Jm7a3hektRXrjxetfhfJm0SzJ2UFeKlkE+VJ/Lj2oAETqN1oqqkNr+RDdbKLMzLApMRgrhStSAO1Yb8/8oUIflyrjNbuDbAHSMbkOE+Z49LIais= 314 ENTRY_END 315 316 SCENARIO_END 317