1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 val-override-date: "20070916134226" 6 target-fetch-policy: "0 0 0 0 0" 7 fake-sha1: yes 8 trust-anchor-signaling: no 9 10stub-zone: 11 name: "." 12 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 13CONFIG_END 14 15SCENARIO_BEGIN Test validator with blacked key entry for DS and further queries 16; a DS record fails. 17; the blacklist action does not help. 18; the further queries should not generate traffic to the authority any more. 19; until the key entry expires. 20 21; K.ROOT-SERVERS.NET. 22RANGE_BEGIN 0 99 23 ADDRESS 193.0.14.129 24ENTRY_BEGIN 25MATCH opcode qtype qname 26ADJUST copy_id 27REPLY QR NOERROR 28SECTION QUESTION 29. IN NS 30SECTION ANSWER 31. IN NS K.ROOT-SERVERS.NET. 32SECTION ADDITIONAL 33K.ROOT-SERVERS.NET. IN A 193.0.14.129 34ENTRY_END 35 36ENTRY_BEGIN 37MATCH opcode subdomain 38ADJUST copy_id copy_query 39REPLY QR NOERROR 40SECTION QUESTION 41com. IN A 42SECTION AUTHORITY 43com. IN NS a.gtld-servers.net. 44SECTION ADDITIONAL 45a.gtld-servers.net. IN A 192.5.6.30 46ENTRY_END 47RANGE_END 48 49; a.gtld-servers.net. 50RANGE_BEGIN 0 99 51 ADDRESS 192.5.6.30 52ENTRY_BEGIN 53MATCH opcode qtype qname 54ADJUST copy_id 55REPLY QR NOERROR 56SECTION QUESTION 57com. IN NS 58SECTION ANSWER 59com. IN NS a.gtld-servers.net. 60SECTION ADDITIONAL 61a.gtld-servers.net. IN A 192.5.6.30 62ENTRY_END 63 64ENTRY_BEGIN 65MATCH opcode qtype qname 66ADJUST copy_id 67REPLY QR NOERROR 68SECTION QUESTION 69ns.blabla.com. IN A 70SECTION ANSWER 71ns.blabla.com. IN A 1.2.3.5 72ENTRY_END 73 74ENTRY_BEGIN 75MATCH opcode qtype qname 76ADJUST copy_id 77REPLY QR NOERROR 78SECTION QUESTION 79ns.blabla.com. IN AAAA 80SECTION AUTHORITY 81com. IN SOA com. com. 2009100100 28800 7200 604800 3600 82ENTRY_END 83 84ENTRY_BEGIN 85MATCH opcode qtype qname 86ADJUST copy_id 87REPLY QR NOERROR 88SECTION QUESTION 89ns.foo.com. IN A 90SECTION ANSWER 91ns.foo.com. IN A 1.2.4.7 92ENTRY_END 93 94ENTRY_BEGIN 95MATCH opcode qtype qname 96ADJUST copy_id 97REPLY QR NOERROR 98SECTION QUESTION 99ns.foo.com. IN AAAA 100SECTION AUTHORITY 101com. IN SOA com. com. 2009100100 28800 7200 604800 3600 102ENTRY_END 103 104ENTRY_BEGIN 105MATCH opcode subdomain 106ADJUST copy_id copy_query 107REPLY QR NOERROR 108SECTION QUESTION 109example.com. IN NS 110SECTION AUTHORITY 111example.com. IN NS ns.example.com. 112;example.com. IN NS ns.blabla.com. 113SECTION ADDITIONAL 114ns.example.com. IN A 1.2.3.4 115ENTRY_END 116RANGE_END 117 118; ns.example.com. 119RANGE_BEGIN 0 99 120 ADDRESS 1.2.3.4 121ENTRY_BEGIN 122MATCH opcode qtype qname 123ADJUST copy_id 124REPLY QR NOERROR 125SECTION QUESTION 126example.com. IN NS 127SECTION ANSWER 128example.com. IN NS ns.example.com. 129;example.com. IN NS ns.blabla.com. 130example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. AKJ3xUBdSrCiOFkYajsy93d+h06rewpbmBHItTkL8R/26rw57b1gCIg= ;{id = 2854} 131SECTION ADDITIONAL 132ns.example.com. IN A 1.2.3.4 133ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 134ENTRY_END 135 136ENTRY_BEGIN 137MATCH opcode qtype qname 138ADJUST copy_id 139REPLY QR NOERROR 140SECTION QUESTION 141ns.example.com. IN A 142SECTION ANSWER 143ns.example.com. IN A 1.2.3.4 144ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 145SECTION ADDITIONAL 146ENTRY_END 147 148ENTRY_BEGIN 149MATCH opcode qtype qname 150ADJUST copy_id 151REPLY QR NOERROR 152SECTION QUESTION 153ns.example.com. IN AAAA 154SECTION ANSWER 155SECTION ADDITIONAL 156ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 157ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. ACFVLLBtuSX/1z3461tbOwDz9zTHe5S9DbVtwnSO1f2x06fYbMpzSDE= ;{id = 2854} 158ENTRY_END 159 160; response to DNSKEY priming query 161ENTRY_BEGIN 162MATCH opcode qtype qname 163ADJUST copy_id 164REPLY QR NOERROR 165SECTION QUESTION 166example.com. IN DNSKEY 167SECTION ANSWER 168example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 169; make priming query succeed 170example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 171;example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20030926134150 20030829134150 2854 example.com. AG21xE8CFQzTq6XtHErg28b9EAmqPsoYCUcFPEAoAjFybM6AY4/bMOo= ;{id = 2854} 172SECTION AUTHORITY 173;example.com. IN NS ns.example.com. 174;example.com. IN NS ns.blabla.com. 175;example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACiWu7zjBHqgEX3iUoOF7rfpOmIAHj1npKQ+XDIaNlmdkfJxoCwFl04= ;{id = 2854} 176SECTION ADDITIONAL 177;ns.example.com. IN A 1.2.3.4 178;ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. ACmAsKTf7hqDaYK8CQ7FL1cGYPW+blTCnzZGkExFtEUAGrHeze87o+A= ;{id = 2854} 179ENTRY_END 180 181ENTRY_BEGIN 182MATCH opcode qtype qname 183ADJUST copy_id 184REPLY QR NOERROR 185SECTION QUESTION 186www.example.com. IN A 187SECTION ANSWER 188www.example.com. IN A 10.20.30.40 189www.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGj9kE8oW3OhOLhkmJ3HBaNIOpvGf3S8zSd5gWmhpxAMc5hh6cxZfpQ= ;{id = 2854} 190SECTION AUTHORITY 191example.com. IN NS ns.example.com. 192;example.com. IN NS ns.blabla.com. 193example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACHETweBNPgbmRoNRdKvxuw4X9qNUUTEpSuwV+HhuiBE83gbB98asAc= ;{id = 2854} 194SECTION ADDITIONAL 195ns.example.com. IN A 1.2.3.4 196ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGvu9A/nGsbatxJCmnObioIhKg2Tm0Apr0eo+DO1kIDrAHco/bt/EdY= ;{id = 2854} 197ENTRY_END 198 199; DS request 200ENTRY_BEGIN 201MATCH opcode qtype qname 202ADJUST copy_id 203REPLY QR AA NOERROR 204SECTION QUESTION 205sub.example.com. IN DS 206SECTION ANSWER 207sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 208;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 209sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854} 210ENTRY_END 211 212ENTRY_BEGIN 213MATCH opcode subdomain 214ADJUST copy_id copy_query 215REPLY QR AA NOERROR 216SECTION QUESTION 217sub.example.com. IN NS 218SECTION AUTHORITY 219sub.example.com. IN NS ns.sub.example.com. 220;sub.example.com. IN NS ns.foo.com. 221sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 222;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 223sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854} 224SECTION ADDITIONAL 225ns.sub.example.com. IN A 1.2.4.6 226ENTRY_END 227 228RANGE_END 229 230; ns.blabla.com. 231RANGE_BEGIN 0 99 232 ADDRESS 1.2.3.5 233ENTRY_BEGIN 234MATCH opcode qtype qname 235ADJUST copy_id 236REPLY QR NOERROR 237SECTION QUESTION 238example.com. IN NS 239SECTION ANSWER 240example.com. IN NS ns.example.com. 241example.com. IN NS ns.blabla.com. 242example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 243SECTION ADDITIONAL 244ns.example.com. IN A 1.2.3.4 245ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 246ENTRY_END 247 248ENTRY_BEGIN 249MATCH opcode qtype qname 250ADJUST copy_id 251REPLY QR NOERROR 252SECTION QUESTION 253ns.example.com. IN A 254SECTION ANSWER 255ns.example.com. IN A 1.2.3.4 256ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 257SECTION ADDITIONAL 258ENTRY_END 259 260ENTRY_BEGIN 261MATCH opcode qtype qname 262ADJUST copy_id 263REPLY QR NOERROR 264SECTION QUESTION 265ns.example.com. IN AAAA 266SECTION ANSWER 267SECTION ADDITIONAL 268ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 269ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. ABhDNtJramb2a4R1SK5gb/CTYJybQts6mZ++z3kLiwsrUSZInA4ikeQ= ;{id = 2854} 270ENTRY_END 271 272; response to DNSKEY priming query 273ENTRY_BEGIN 274MATCH opcode qtype qname 275ADJUST copy_id 276REPLY QR NOERROR 277SECTION QUESTION 278example.com. IN DNSKEY 279SECTION ANSWER 280example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 281example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 282SECTION AUTHORITY 283example.com. IN NS ns.example.com. 284example.com. IN NS ns.blabla.com. 285example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 286SECTION ADDITIONAL 287ns.example.com. IN A 1.2.3.4 288ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 289ENTRY_END 290 291ENTRY_BEGIN 292MATCH opcode qtype qname 293ADJUST copy_id 294REPLY QR NOERROR 295SECTION QUESTION 296www.example.com. IN A 297SECTION ANSWER 298www.example.com. IN A 10.20.30.40 299ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 300SECTION AUTHORITY 301example.com. IN NS ns.example.com. 302example.com. IN NS ns.blabla.com. 303example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 304SECTION ADDITIONAL 305ns.example.com. IN A 1.2.3.4 306www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 307ENTRY_END 308 309; DS request 310ENTRY_BEGIN 311MATCH opcode qtype qname 312ADJUST copy_id 313REPLY QR AA NOERROR 314SECTION QUESTION 315sub.example.com. IN DS 316SECTION ANSWER 317sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 318sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 319ENTRY_END 320 321ENTRY_BEGIN 322MATCH opcode subdomain 323ADJUST copy_id copy_query 324REPLY QR AA NOERROR 325SECTION QUESTION 326sub.example.com. IN NS 327SECTION AUTHORITY 328sub.example.com. IN NS ns.sub.example.com. 329;sub.example.com. IN NS ns.foo.com. 330sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 331sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 332SECTION ADDITIONAL 333ns.sub.example.com. IN A 1.2.4.6 334ENTRY_END 335 336RANGE_END 337 338; ns.sub.example.com. 339RANGE_BEGIN 0 99 340 ADDRESS 1.2.4.6 341ENTRY_BEGIN 342MATCH opcode qtype qname 343ADJUST copy_id 344REPLY QR AA NOERROR 345SECTION QUESTION 346sub.example.com. IN DNSKEY 347SECTION ANSWER 348sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 349sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. g+YoDwrCF75YCFyqYoxlF+/mNfcscnuZ6LfmfBgPLohlvCCC7jYj/wkc2fxAl3MEK0CriWkHp1hw0QQYkmbbKw== ;{id = 30899} 350ENTRY_END 351 352ENTRY_BEGIN 353MATCH opcode qtype qname 354ADJUST copy_id 355REPLY QR AA NOERROR 356SECTION QUESTION 357sub.example.com. IN NS 358SECTION ANSWER 359sub.example.com. IN NS ns.sub.example.com. 360;sub.example.com. IN NS ns.foo.com. 361sub.example.com. 3600 IN RRSIG NS 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. VCDq+gfZHuziE81Uypxm2va4eXCtoD8F8YKkwNo8laMNUcXh/hvGdbHKXMMghwuJXgxLh89Diu5kywBVwb/AIg== ;{id = 30899} 362SECTION ADDITIONAL 363ns.sub.example.com. IN A 1.2.4.6 364ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899} 365ENTRY_END 366 367ENTRY_BEGIN 368MATCH opcode qtype qname 369ADJUST copy_id 370REPLY QR AA NOERROR 371SECTION QUESTION 372ns.sub.example.com. IN A 373SECTION ANSWER 374ns.sub.example.com. IN A 1.2.4.6 375ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899} 376ENTRY_END 377 378ENTRY_BEGIN 379MATCH opcode qtype qname 380ADJUST copy_id 381REPLY QR AA NOERROR 382SECTION QUESTION 383ns.sub.example.com. IN AAAA 384SECTION AUTHORITY 385ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 386ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. eVe3iQS2/a1Y57AA2QSlMU/z31xaJ2mwUU36PZh8vlv6shPpQywAT70JdX6+ZsuliRpsbY6crkVXTXJ2qpKTiQ== ;{id = 30899} 387sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 388sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. vEX2n1CksMr5jPq9d2BQJMIDwxaXdWlY5mYg+PBmOFI4xngFMKTsXa/+SfJy2SiqAgHTDI6joIo30AdQJsjdHA== ;{id = 30899} 389ENTRY_END 390 391ENTRY_BEGIN 392MATCH opcode qtype qname 393ADJUST copy_id 394REPLY QR AA NOERROR 395SECTION QUESTION 396www.sub.example.com. IN A 397SECTION ANSWER 398www.sub.example.com. IN A 10.20.30.40 399www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. dBK6JOkKlp2G+f7mhInKnQM6DUBnEziTS+KpXzQ/5HT8/h9XkryOt4vAJKGCz0Ew3qRqjLgylsbGrcuxmIO9jA== ;{id = 30899} 400ENTRY_END 401 402RANGE_END 403 404; ns.foo.com. 405RANGE_BEGIN 0 99 406 ADDRESS 1.2.4.7 407ENTRY_BEGIN 408MATCH opcode qtype qname 409ADJUST copy_id 410REPLY QR AA NOERROR 411SECTION QUESTION 412sub.example.com. IN DNSKEY 413SECTION ANSWER 414sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 415sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899} 416ENTRY_END 417 418ENTRY_BEGIN 419MATCH opcode qtype qname 420ADJUST copy_id 421REPLY QR AA NOERROR 422SECTION QUESTION 423sub.example.com. IN NS 424SECTION ANSWER 425sub.example.com. IN NS ns.sub.example.com. 426;sub.example.com. IN NS ns.foo.com. 427sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899} 428SECTION ADDITIONAL 429ns.sub.example.com. IN A 1.2.4.6 430ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 431ENTRY_END 432 433ENTRY_BEGIN 434MATCH opcode qtype qname 435ADJUST copy_id 436REPLY QR AA NOERROR 437SECTION QUESTION 438ns.sub.example.com. IN A 439SECTION ANSWER 440ns.sub.example.com. IN A 1.2.4.6 441ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 442ENTRY_END 443 444ENTRY_BEGIN 445MATCH opcode qtype qname 446ADJUST copy_id 447REPLY QR AA NOERROR 448SECTION QUESTION 449ns.sub.example.com. IN AAAA 450SECTION AUTHORITY 451ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 452ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899} 453sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 454sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899} 455ENTRY_END 456 457ENTRY_BEGIN 458MATCH opcode qtype qname 459ADJUST copy_id 460REPLY QR AA NOERROR 461SECTION QUESTION 462www.sub.example.com. IN A 463SECTION ANSWER 464www.sub.example.com. IN A 10.20.30.40 465www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 466ENTRY_END 467RANGE_END 468 469; ns.sub.example.com. 470; This is for after, so only new queries, no requeries allowed. 471RANGE_BEGIN 100 200 472 ADDRESS 1.2.4.6 473 474ENTRY_BEGIN 475MATCH opcode qtype qname 476ADJUST copy_id 477REPLY QR AA NOERROR 478SECTION QUESTION 479ftp.sub.example.com. IN A 480SECTION ANSWER 481ftp.sub.example.com. IN A 10.20.30.46 482ftp.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. nbxk6SiooKsUeVm/ZGskrxKwhOSWdJt9ly9X6Hqji4DKpBskM6bqulmTt/xZ/3G4ZOguYBeiTp8qwlWjl7VoSQ== ;{id = 30899} 483ENTRY_END 484 485RANGE_END 486 487; ns.example.com. 488; fixed version 489RANGE_BEGIN 200 300 490 ADDRESS 1.2.3.4 491; DS request 492ENTRY_BEGIN 493MATCH opcode qtype qname 494ADJUST copy_id 495REPLY QR AA NOERROR 496SECTION QUESTION 497sub.example.com. IN DS 498SECTION ANSWER 499sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 500sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 501ENTRY_END 502 503RANGE_END 504 505; ns.sub.example.com. 506; fixed version 507RANGE_BEGIN 200 300 508 ADDRESS 1.2.4.6 509ENTRY_BEGIN 510MATCH opcode qtype qname 511ADJUST copy_id 512REPLY QR AA NOERROR 513SECTION QUESTION 514sub.example.com. IN DNSKEY 515SECTION ANSWER 516sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 517sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899} 518ENTRY_END 519 520ENTRY_BEGIN 521MATCH opcode qtype qname 522ADJUST copy_id 523REPLY QR AA NOERROR 524SECTION QUESTION 525sub.example.com. IN NS 526SECTION ANSWER 527sub.example.com. IN NS ns.sub.example.com. 528;sub.example.com. IN NS ns.foo.com. 529sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899} 530SECTION ADDITIONAL 531ns.sub.example.com. IN A 1.2.4.6 532ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 533ENTRY_END 534 535ENTRY_BEGIN 536MATCH opcode qtype qname 537ADJUST copy_id 538REPLY QR AA NOERROR 539SECTION QUESTION 540ns.sub.example.com. IN A 541SECTION ANSWER 542ns.sub.example.com. IN A 1.2.4.6 543ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 544ENTRY_END 545 546ENTRY_BEGIN 547MATCH opcode qtype qname 548ADJUST copy_id 549REPLY QR AA NOERROR 550SECTION QUESTION 551ns.sub.example.com. IN AAAA 552SECTION AUTHORITY 553ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 554ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899} 555sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 556sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899} 557ENTRY_END 558 559ENTRY_BEGIN 560MATCH opcode qtype qname 561ADJUST copy_id 562REPLY QR AA NOERROR 563SECTION QUESTION 564www.sub.example.com. IN A 565SECTION ANSWER 566www.sub.example.com. IN A 10.20.30.40 567www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 568ENTRY_END 569RANGE_END 570 571STEP 1 QUERY 572ENTRY_BEGIN 573REPLY RD DO 574SECTION QUESTION 575www.sub.example.com. IN A 576ENTRY_END 577 578; recursion happens here. 579STEP 10 CHECK_ANSWER 580ENTRY_BEGIN 581MATCH all 582REPLY QR RD RA DO SERVFAIL 583SECTION QUESTION 584www.sub.example.com. IN A 585SECTION ANSWER 586ENTRY_END 587 588; no more outgoing traffic possible. 589STEP 110 QUERY 590ENTRY_BEGIN 591REPLY RD DO 592SECTION QUESTION 593ftp.sub.example.com. IN A 594ENTRY_END 595 596STEP 120 CHECK_ANSWER 597ENTRY_BEGIN 598MATCH all 599REPLY QR RD RA DO SERVFAIL 600SECTION QUESTION 601ftp.sub.example.com. IN A 602SECTION ANSWER 603ENTRY_END 604 605; wait for timeout seconds. 606STEP 130 TIME_PASSES ELAPSE 901 607 608STEP 210 QUERY 609ENTRY_BEGIN 610REPLY RD DO 611SECTION QUESTION 612www.sub.example.com. IN A 613ENTRY_END 614 615; recursion happens here. 616STEP 220 CHECK_ANSWER 617ENTRY_BEGIN 618MATCH all 619REPLY QR RD RA AD DO NOERROR 620SECTION QUESTION 621www.sub.example.com. IN A 622SECTION ANSWER 623www.sub.example.com. IN A 10.20.30.40 624www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 625ENTRY_END 626 627 628SCENARIO_END 629