1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 val-override-date: "20070916134226" 6 target-fetch-policy: "0 0 0 0 0" 7 8stub-zone: 9 name: "." 10 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 11CONFIG_END 12 13SCENARIO_BEGIN Test validator with blacked key entry for DS and further queries 14; a DS record fails. 15; the blacklist action does not help. 16; the further queries should not generate traffic to the authority any more. 17; until the key entry expires. 18 19; K.ROOT-SERVERS.NET. 20RANGE_BEGIN 0 100 21 ADDRESS 193.0.14.129 22ENTRY_BEGIN 23MATCH opcode qtype qname 24ADJUST copy_id 25REPLY QR NOERROR 26SECTION QUESTION 27. IN NS 28SECTION ANSWER 29. IN NS K.ROOT-SERVERS.NET. 30SECTION ADDITIONAL 31K.ROOT-SERVERS.NET. IN A 193.0.14.129 32ENTRY_END 33 34ENTRY_BEGIN 35MATCH opcode subdomain 36ADJUST copy_id copy_query 37REPLY QR NOERROR 38SECTION QUESTION 39com. IN A 40SECTION AUTHORITY 41com. IN NS a.gtld-servers.net. 42SECTION ADDITIONAL 43a.gtld-servers.net. IN A 192.5.6.30 44ENTRY_END 45RANGE_END 46 47; a.gtld-servers.net. 48RANGE_BEGIN 0 100 49 ADDRESS 192.5.6.30 50ENTRY_BEGIN 51MATCH opcode qtype qname 52ADJUST copy_id 53REPLY QR NOERROR 54SECTION QUESTION 55com. IN NS 56SECTION ANSWER 57com. IN NS a.gtld-servers.net. 58SECTION ADDITIONAL 59a.gtld-servers.net. IN A 192.5.6.30 60ENTRY_END 61 62ENTRY_BEGIN 63MATCH opcode qtype qname 64ADJUST copy_id 65REPLY QR NOERROR 66SECTION QUESTION 67ns.blabla.com. IN A 68SECTION ANSWER 69ns.blabla.com. IN A 1.2.3.5 70ENTRY_END 71 72ENTRY_BEGIN 73MATCH opcode qtype qname 74ADJUST copy_id 75REPLY QR NOERROR 76SECTION QUESTION 77ns.blabla.com. IN AAAA 78SECTION AUTHORITY 79com. IN SOA com. com. 2009100100 28800 7200 604800 3600 80ENTRY_END 81 82ENTRY_BEGIN 83MATCH opcode qtype qname 84ADJUST copy_id 85REPLY QR NOERROR 86SECTION QUESTION 87ns.foo.com. IN A 88SECTION ANSWER 89ns.foo.com. IN A 1.2.4.7 90ENTRY_END 91 92ENTRY_BEGIN 93MATCH opcode qtype qname 94ADJUST copy_id 95REPLY QR NOERROR 96SECTION QUESTION 97ns.foo.com. IN AAAA 98SECTION AUTHORITY 99com. IN SOA com. com. 2009100100 28800 7200 604800 3600 100ENTRY_END 101 102ENTRY_BEGIN 103MATCH opcode subdomain 104ADJUST copy_id copy_query 105REPLY QR NOERROR 106SECTION QUESTION 107example.com. IN NS 108SECTION AUTHORITY 109example.com. IN NS ns.example.com. 110;example.com. IN NS ns.blabla.com. 111SECTION ADDITIONAL 112ns.example.com. IN A 1.2.3.4 113ENTRY_END 114RANGE_END 115 116; ns.example.com. 117RANGE_BEGIN 0 100 118 ADDRESS 1.2.3.4 119ENTRY_BEGIN 120MATCH opcode qtype qname 121ADJUST copy_id 122REPLY QR NOERROR 123SECTION QUESTION 124example.com. IN NS 125SECTION ANSWER 126example.com. IN NS ns.example.com. 127;example.com. IN NS ns.blabla.com. 128example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. AKJ3xUBdSrCiOFkYajsy93d+h06rewpbmBHItTkL8R/26rw57b1gCIg= ;{id = 2854} 129SECTION ADDITIONAL 130ns.example.com. IN A 1.2.3.4 131ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 132ENTRY_END 133 134ENTRY_BEGIN 135MATCH opcode qtype qname 136ADJUST copy_id 137REPLY QR NOERROR 138SECTION QUESTION 139ns.example.com. IN A 140SECTION ANSWER 141ns.example.com. IN A 1.2.3.4 142ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 143SECTION ADDITIONAL 144ENTRY_END 145 146ENTRY_BEGIN 147MATCH opcode qtype qname 148ADJUST copy_id 149REPLY QR NOERROR 150SECTION QUESTION 151ns.example.com. IN AAAA 152SECTION ANSWER 153SECTION ADDITIONAL 154ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 155ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. ACFVLLBtuSX/1z3461tbOwDz9zTHe5S9DbVtwnSO1f2x06fYbMpzSDE= ;{id = 2854} 156ENTRY_END 157 158; response to DNSKEY priming query 159ENTRY_BEGIN 160MATCH opcode qtype qname 161ADJUST copy_id 162REPLY QR NOERROR 163SECTION QUESTION 164example.com. IN DNSKEY 165SECTION ANSWER 166example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 167; make priming query succeed 168example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 169;example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20030926134150 20030829134150 2854 example.com. AG21xE8CFQzTq6XtHErg28b9EAmqPsoYCUcFPEAoAjFybM6AY4/bMOo= ;{id = 2854} 170SECTION AUTHORITY 171;example.com. IN NS ns.example.com. 172;example.com. IN NS ns.blabla.com. 173;example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACiWu7zjBHqgEX3iUoOF7rfpOmIAHj1npKQ+XDIaNlmdkfJxoCwFl04= ;{id = 2854} 174SECTION ADDITIONAL 175;ns.example.com. IN A 1.2.3.4 176;ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. ACmAsKTf7hqDaYK8CQ7FL1cGYPW+blTCnzZGkExFtEUAGrHeze87o+A= ;{id = 2854} 177ENTRY_END 178 179ENTRY_BEGIN 180MATCH opcode qtype qname 181ADJUST copy_id 182REPLY QR NOERROR 183SECTION QUESTION 184www.example.com. IN A 185SECTION ANSWER 186www.example.com. IN A 10.20.30.40 187www.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGj9kE8oW3OhOLhkmJ3HBaNIOpvGf3S8zSd5gWmhpxAMc5hh6cxZfpQ= ;{id = 2854} 188SECTION AUTHORITY 189example.com. IN NS ns.example.com. 190;example.com. IN NS ns.blabla.com. 191example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACHETweBNPgbmRoNRdKvxuw4X9qNUUTEpSuwV+HhuiBE83gbB98asAc= ;{id = 2854} 192SECTION ADDITIONAL 193ns.example.com. IN A 1.2.3.4 194ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGvu9A/nGsbatxJCmnObioIhKg2Tm0Apr0eo+DO1kIDrAHco/bt/EdY= ;{id = 2854} 195ENTRY_END 196 197; DS request 198ENTRY_BEGIN 199MATCH opcode qtype qname 200ADJUST copy_id 201REPLY QR AA NOERROR 202SECTION QUESTION 203sub.example.com. IN DS 204SECTION ANSWER 205sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 206;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 207sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854} 208ENTRY_END 209 210ENTRY_BEGIN 211MATCH opcode subdomain 212ADJUST copy_id copy_query 213REPLY QR AA NOERROR 214SECTION QUESTION 215sub.example.com. IN NS 216SECTION AUTHORITY 217sub.example.com. IN NS ns.sub.example.com. 218;sub.example.com. IN NS ns.foo.com. 219sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 220;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 221sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854} 222SECTION ADDITIONAL 223ns.sub.example.com. IN A 1.2.4.6 224ENTRY_END 225 226RANGE_END 227 228; ns.blabla.com. 229RANGE_BEGIN 0 100 230 ADDRESS 1.2.3.5 231ENTRY_BEGIN 232MATCH opcode qtype qname 233ADJUST copy_id 234REPLY QR NOERROR 235SECTION QUESTION 236example.com. IN NS 237SECTION ANSWER 238example.com. IN NS ns.example.com. 239example.com. IN NS ns.blabla.com. 240example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 241SECTION ADDITIONAL 242ns.example.com. IN A 1.2.3.4 243ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 244ENTRY_END 245 246ENTRY_BEGIN 247MATCH opcode qtype qname 248ADJUST copy_id 249REPLY QR NOERROR 250SECTION QUESTION 251ns.example.com. IN A 252SECTION ANSWER 253ns.example.com. IN A 1.2.3.4 254ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 255SECTION ADDITIONAL 256ENTRY_END 257 258ENTRY_BEGIN 259MATCH opcode qtype qname 260ADJUST copy_id 261REPLY QR NOERROR 262SECTION QUESTION 263ns.example.com. IN AAAA 264SECTION ANSWER 265SECTION ADDITIONAL 266ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 267ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. ABhDNtJramb2a4R1SK5gb/CTYJybQts6mZ++z3kLiwsrUSZInA4ikeQ= ;{id = 2854} 268ENTRY_END 269 270; response to DNSKEY priming query 271ENTRY_BEGIN 272MATCH opcode qtype qname 273ADJUST copy_id 274REPLY QR NOERROR 275SECTION QUESTION 276example.com. IN DNSKEY 277SECTION ANSWER 278example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 279example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 280SECTION AUTHORITY 281example.com. IN NS ns.example.com. 282example.com. IN NS ns.blabla.com. 283example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 284SECTION ADDITIONAL 285ns.example.com. IN A 1.2.3.4 286ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 287ENTRY_END 288 289ENTRY_BEGIN 290MATCH opcode qtype qname 291ADJUST copy_id 292REPLY QR NOERROR 293SECTION QUESTION 294www.example.com. IN A 295SECTION ANSWER 296www.example.com. IN A 10.20.30.40 297ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 298SECTION AUTHORITY 299example.com. IN NS ns.example.com. 300example.com. IN NS ns.blabla.com. 301example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 302SECTION ADDITIONAL 303ns.example.com. IN A 1.2.3.4 304www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 305ENTRY_END 306 307; DS request 308ENTRY_BEGIN 309MATCH opcode qtype qname 310ADJUST copy_id 311REPLY QR AA NOERROR 312SECTION QUESTION 313sub.example.com. IN DS 314SECTION ANSWER 315sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 316sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 317ENTRY_END 318 319ENTRY_BEGIN 320MATCH opcode subdomain 321ADJUST copy_id copy_query 322REPLY QR AA NOERROR 323SECTION QUESTION 324sub.example.com. IN NS 325SECTION AUTHORITY 326sub.example.com. IN NS ns.sub.example.com. 327;sub.example.com. IN NS ns.foo.com. 328sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 329sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 330SECTION ADDITIONAL 331ns.sub.example.com. IN A 1.2.4.6 332ENTRY_END 333 334RANGE_END 335 336; ns.sub.example.com. 337RANGE_BEGIN 0 100 338 ADDRESS 1.2.4.6 339ENTRY_BEGIN 340MATCH opcode qtype qname 341ADJUST copy_id 342REPLY QR AA NOERROR 343SECTION QUESTION 344sub.example.com. IN DNSKEY 345SECTION ANSWER 346sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 347sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. g+YoDwrCF75YCFyqYoxlF+/mNfcscnuZ6LfmfBgPLohlvCCC7jYj/wkc2fxAl3MEK0CriWkHp1hw0QQYkmbbKw== ;{id = 30899} 348ENTRY_END 349 350ENTRY_BEGIN 351MATCH opcode qtype qname 352ADJUST copy_id 353REPLY QR AA NOERROR 354SECTION QUESTION 355sub.example.com. IN NS 356SECTION ANSWER 357sub.example.com. IN NS ns.sub.example.com. 358;sub.example.com. IN NS ns.foo.com. 359sub.example.com. 3600 IN RRSIG NS 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. VCDq+gfZHuziE81Uypxm2va4eXCtoD8F8YKkwNo8laMNUcXh/hvGdbHKXMMghwuJXgxLh89Diu5kywBVwb/AIg== ;{id = 30899} 360SECTION ADDITIONAL 361ns.sub.example.com. IN A 1.2.4.6 362ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899} 363ENTRY_END 364 365ENTRY_BEGIN 366MATCH opcode qtype qname 367ADJUST copy_id 368REPLY QR AA NOERROR 369SECTION QUESTION 370ns.sub.example.com. IN A 371SECTION ANSWER 372ns.sub.example.com. IN A 1.2.4.6 373ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899} 374ENTRY_END 375 376ENTRY_BEGIN 377MATCH opcode qtype qname 378ADJUST copy_id 379REPLY QR AA NOERROR 380SECTION QUESTION 381ns.sub.example.com. IN AAAA 382SECTION AUTHORITY 383ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 384ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. eVe3iQS2/a1Y57AA2QSlMU/z31xaJ2mwUU36PZh8vlv6shPpQywAT70JdX6+ZsuliRpsbY6crkVXTXJ2qpKTiQ== ;{id = 30899} 385sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 386sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. vEX2n1CksMr5jPq9d2BQJMIDwxaXdWlY5mYg+PBmOFI4xngFMKTsXa/+SfJy2SiqAgHTDI6joIo30AdQJsjdHA== ;{id = 30899} 387ENTRY_END 388 389ENTRY_BEGIN 390MATCH opcode qtype qname 391ADJUST copy_id 392REPLY QR AA NOERROR 393SECTION QUESTION 394www.sub.example.com. IN A 395SECTION ANSWER 396www.sub.example.com. IN A 10.20.30.40 397www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. dBK6JOkKlp2G+f7mhInKnQM6DUBnEziTS+KpXzQ/5HT8/h9XkryOt4vAJKGCz0Ew3qRqjLgylsbGrcuxmIO9jA== ;{id = 30899} 398ENTRY_END 399 400RANGE_END 401 402; ns.foo.com. 403RANGE_BEGIN 0 100 404 ADDRESS 1.2.4.7 405ENTRY_BEGIN 406MATCH opcode qtype qname 407ADJUST copy_id 408REPLY QR AA NOERROR 409SECTION QUESTION 410sub.example.com. IN DNSKEY 411SECTION ANSWER 412sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 413sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899} 414ENTRY_END 415 416ENTRY_BEGIN 417MATCH opcode qtype qname 418ADJUST copy_id 419REPLY QR AA NOERROR 420SECTION QUESTION 421sub.example.com. IN NS 422SECTION ANSWER 423sub.example.com. IN NS ns.sub.example.com. 424;sub.example.com. IN NS ns.foo.com. 425sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899} 426SECTION ADDITIONAL 427ns.sub.example.com. IN A 1.2.4.6 428ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 429ENTRY_END 430 431ENTRY_BEGIN 432MATCH opcode qtype qname 433ADJUST copy_id 434REPLY QR AA NOERROR 435SECTION QUESTION 436ns.sub.example.com. IN A 437SECTION ANSWER 438ns.sub.example.com. IN A 1.2.4.6 439ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 440ENTRY_END 441 442ENTRY_BEGIN 443MATCH opcode qtype qname 444ADJUST copy_id 445REPLY QR AA NOERROR 446SECTION QUESTION 447ns.sub.example.com. IN AAAA 448SECTION AUTHORITY 449ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 450ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899} 451sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 452sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899} 453ENTRY_END 454 455ENTRY_BEGIN 456MATCH opcode qtype qname 457ADJUST copy_id 458REPLY QR AA NOERROR 459SECTION QUESTION 460www.sub.example.com. IN A 461SECTION ANSWER 462www.sub.example.com. IN A 10.20.30.40 463www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 464ENTRY_END 465RANGE_END 466 467; ns.sub.example.com. 468; This is for after, so only new queries, no requeries allowed. 469RANGE_BEGIN 100 200 470 ADDRESS 1.2.4.6 471 472ENTRY_BEGIN 473MATCH opcode qtype qname 474ADJUST copy_id 475REPLY QR AA NOERROR 476SECTION QUESTION 477ftp.sub.example.com. IN A 478SECTION ANSWER 479ftp.sub.example.com. IN A 10.20.30.46 480ftp.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. nbxk6SiooKsUeVm/ZGskrxKwhOSWdJt9ly9X6Hqji4DKpBskM6bqulmTt/xZ/3G4ZOguYBeiTp8qwlWjl7VoSQ== ;{id = 30899} 481ENTRY_END 482 483RANGE_END 484 485; ns.example.com. 486; fixed version 487RANGE_BEGIN 200 300 488 ADDRESS 1.2.3.4 489; DS request 490ENTRY_BEGIN 491MATCH opcode qtype qname 492ADJUST copy_id 493REPLY QR AA NOERROR 494SECTION QUESTION 495sub.example.com. IN DS 496SECTION ANSWER 497sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 498sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 499ENTRY_END 500 501RANGE_END 502 503; ns.sub.example.com. 504; fixed version 505RANGE_BEGIN 200 300 506 ADDRESS 1.2.4.6 507ENTRY_BEGIN 508MATCH opcode qtype qname 509ADJUST copy_id 510REPLY QR AA NOERROR 511SECTION QUESTION 512sub.example.com. IN DNSKEY 513SECTION ANSWER 514sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 515sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899} 516ENTRY_END 517 518ENTRY_BEGIN 519MATCH opcode qtype qname 520ADJUST copy_id 521REPLY QR AA NOERROR 522SECTION QUESTION 523sub.example.com. IN NS 524SECTION ANSWER 525sub.example.com. IN NS ns.sub.example.com. 526;sub.example.com. IN NS ns.foo.com. 527sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899} 528SECTION ADDITIONAL 529ns.sub.example.com. IN A 1.2.4.6 530ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 531ENTRY_END 532 533ENTRY_BEGIN 534MATCH opcode qtype qname 535ADJUST copy_id 536REPLY QR AA NOERROR 537SECTION QUESTION 538ns.sub.example.com. IN A 539SECTION ANSWER 540ns.sub.example.com. IN A 1.2.4.6 541ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 542ENTRY_END 543 544ENTRY_BEGIN 545MATCH opcode qtype qname 546ADJUST copy_id 547REPLY QR AA NOERROR 548SECTION QUESTION 549ns.sub.example.com. IN AAAA 550SECTION AUTHORITY 551ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 552ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899} 553sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 554sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899} 555ENTRY_END 556 557ENTRY_BEGIN 558MATCH opcode qtype qname 559ADJUST copy_id 560REPLY QR AA NOERROR 561SECTION QUESTION 562www.sub.example.com. IN A 563SECTION ANSWER 564www.sub.example.com. IN A 10.20.30.40 565www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 566ENTRY_END 567RANGE_END 568 569STEP 1 QUERY 570ENTRY_BEGIN 571REPLY RD DO 572SECTION QUESTION 573www.sub.example.com. IN A 574ENTRY_END 575 576; recursion happens here. 577STEP 10 CHECK_ANSWER 578ENTRY_BEGIN 579MATCH all 580REPLY QR RD RA DO SERVFAIL 581SECTION QUESTION 582www.sub.example.com. IN A 583SECTION ANSWER 584ENTRY_END 585 586; no more outgoing traffic possible. 587STEP 110 QUERY 588ENTRY_BEGIN 589REPLY RD DO 590SECTION QUESTION 591ftp.sub.example.com. IN A 592ENTRY_END 593 594STEP 120 CHECK_ANSWER 595ENTRY_BEGIN 596MATCH all 597REPLY QR RD RA DO SERVFAIL 598SECTION QUESTION 599ftp.sub.example.com. IN A 600SECTION ANSWER 601ENTRY_END 602 603; wait for timeout seconds. 604STEP 130 TIME_PASSES ELAPSE 901 605 606STEP 210 QUERY 607ENTRY_BEGIN 608REPLY RD DO 609SECTION QUESTION 610www.sub.example.com. IN A 611ENTRY_END 612 613; recursion happens here. 614STEP 220 CHECK_ANSWER 615ENTRY_BEGIN 616MATCH all 617REPLY QR RD RA AD DO NOERROR 618SECTION QUESTION 619www.sub.example.com. IN A 620SECTION ANSWER 621www.sub.example.com. IN A 10.20.30.40 622www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 623ENTRY_END 624 625 626SCENARIO_END 627