1 // validating resolver 2 3 options { 4 {% include_indented "_common/options.conf.j2" %} 5 dnssec-validation yes; 6 synth-from-dnssec yes; 7 }; 8 9 {% include "_common/controls.conf.j2" %} 10 11 {% include "_common/root.hint.conf" %} 12 13 zone "f004.test" { 14 type static-stub; 15 server-addresses { 10.53.0.1; }; 16 }; 17 18 zone "f007.test" { 19 type static-stub; 20 server-addresses { 10.53.0.3; }; 21 }; 22 23 zone "f023.test" { 24 type static-stub; 25 server-addresses { 10.53.0.1; }; 26 }; 27 28 zone "evil.f023.test" { 29 type static-stub; 30 server-addresses { 10.53.0.1; }; 31 }; 32 33 trust-anchors { 34 f004.test. static-key 257 3 13 "@DNSKEY@"; 35 f007.test. static-key 257 3 13 "@DNSKEY@"; 36 f023.test. static-key 257 3 13 "@DNSKEY@"; 37 }; 38