1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 val-override-date: "20070916134226" 6 target-fetch-policy: "0 0 0 0 0" 7 qname-minimisation: "no" 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 11stub-zone: 12 name: "." 13 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 14CONFIG_END 15 16SCENARIO_BEGIN Test validator with blacklist for ENT response 17; 'ENT' Empty Non Terminal 18; which needs a valid NSEC(3) proof. 19 20; K.ROOT-SERVERS.NET. 21RANGE_BEGIN 0 100 22 ADDRESS 193.0.14.129 23ENTRY_BEGIN 24MATCH opcode qtype qname 25ADJUST copy_id 26REPLY QR NOERROR 27SECTION QUESTION 28. IN NS 29SECTION ANSWER 30. IN NS K.ROOT-SERVERS.NET. 31SECTION ADDITIONAL 32K.ROOT-SERVERS.NET. IN A 193.0.14.129 33ENTRY_END 34 35ENTRY_BEGIN 36MATCH opcode subdomain 37ADJUST copy_id copy_query 38REPLY QR NOERROR 39SECTION QUESTION 40com. IN A 41SECTION AUTHORITY 42com. IN NS a.gtld-servers.net. 43SECTION ADDITIONAL 44a.gtld-servers.net. IN A 192.5.6.30 45ENTRY_END 46RANGE_END 47 48; a.gtld-servers.net. 49RANGE_BEGIN 0 100 50 ADDRESS 192.5.6.30 51ENTRY_BEGIN 52MATCH opcode qtype qname 53ADJUST copy_id 54REPLY QR NOERROR 55SECTION QUESTION 56com. IN NS 57SECTION ANSWER 58com. IN NS a.gtld-servers.net. 59SECTION ADDITIONAL 60a.gtld-servers.net. IN A 192.5.6.30 61ENTRY_END 62 63ENTRY_BEGIN 64MATCH opcode qtype qname 65ADJUST copy_id 66REPLY QR NOERROR 67SECTION QUESTION 68ns.blabla.com. IN A 69SECTION ANSWER 70ns.blabla.com. IN A 1.2.3.5 71ENTRY_END 72 73ENTRY_BEGIN 74MATCH opcode qtype qname 75ADJUST copy_id 76REPLY QR NOERROR 77SECTION QUESTION 78ns.blabla.com. IN AAAA 79SECTION AUTHORITY 80com. IN SOA com. com. 2009100100 28800 7200 604800 3600 81ENTRY_END 82 83ENTRY_BEGIN 84MATCH opcode subdomain 85ADJUST copy_id copy_query 86REPLY QR NOERROR 87SECTION QUESTION 88example.com. IN NS 89SECTION AUTHORITY 90example.com. IN NS ns.example.com. 91example.com. IN NS ns.blabla.com. 92SECTION ADDITIONAL 93ns.example.com. IN A 1.2.3.4 94; no ns.blabla.com, try that later 95ENTRY_END 96RANGE_END 97 98; ns.example.com. 99RANGE_BEGIN 0 100 100 ADDRESS 1.2.3.4 101ENTRY_BEGIN 102MATCH opcode qtype qname 103ADJUST copy_id 104REPLY QR NOERROR 105SECTION QUESTION 106example.com. IN NS 107SECTION ANSWER 108example.com. IN NS ns.example.com. 109example.com. IN NS ns.blabla.com. 110example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. AKJ3xUBdSrCiOFkYajsy93d+h06rewpbmBHItTkL8R/26rw57b1gCIg= ;{id = 2854} 111SECTION ADDITIONAL 112ns.example.com. IN A 1.2.3.4 113ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 114ENTRY_END 115 116ENTRY_BEGIN 117MATCH opcode qtype qname 118ADJUST copy_id 119REPLY QR NOERROR 120SECTION QUESTION 121ns.example.com. IN A 122SECTION ANSWER 123ns.example.com. IN A 1.2.3.4 124ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 125SECTION ADDITIONAL 126ENTRY_END 127 128ENTRY_BEGIN 129MATCH opcode qtype qname 130ADJUST copy_id 131REPLY QR NOERROR 132SECTION QUESTION 133ns.example.com. IN AAAA 134SECTION ANSWER 135SECTION ADDITIONAL 136ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 137ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. ACFVLLBtuSX/1z3461tbOwDz9zTHe5S9DbVtwnSO1f2x06fYbMpzSDE= ;{id = 2854} 138ENTRY_END 139 140; response to DNSKEY priming query 141ENTRY_BEGIN 142MATCH opcode qtype qname 143ADJUST copy_id 144REPLY QR NOERROR 145SECTION QUESTION 146example.com. IN DNSKEY 147SECTION ANSWER 148example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 149; make priming query succeed 150example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 151;example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20030926134150 20030829134150 2854 example.com. AG21xE8CFQzTq6XtHErg28b9EAmqPsoYCUcFPEAoAjFybM6AY4/bMOo= ;{id = 2854} 152SECTION AUTHORITY 153;example.com. IN NS ns.example.com. 154;example.com. IN NS ns.blabla.com. 155;example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACiWu7zjBHqgEX3iUoOF7rfpOmIAHj1npKQ+XDIaNlmdkfJxoCwFl04= ;{id = 2854} 156SECTION ADDITIONAL 157;ns.example.com. IN A 1.2.3.4 158;ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. ACmAsKTf7hqDaYK8CQ7FL1cGYPW+blTCnzZGkExFtEUAGrHeze87o+A= ;{id = 2854} 159ENTRY_END 160 161ENTRY_BEGIN 162MATCH opcode qtype qname 163ADJUST copy_id 164REPLY QR NOERROR 165SECTION QUESTION 166www.example.com. IN A 167SECTION ANSWER 168www.example.com. IN A 10.20.30.40 169www.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGj9kE8oW3OhOLhkmJ3HBaNIOpvGf3S8zSd5gWmhpxAMc5hh6cxZfpQ= ;{id = 2854} 170SECTION AUTHORITY 171example.com. IN NS ns.example.com. 172example.com. IN NS ns.blabla.com. 173example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACHETweBNPgbmRoNRdKvxuw4X9qNUUTEpSuwV+HhuiBE83gbB98asAc= ;{id = 2854} 174SECTION ADDITIONAL 175ns.example.com. IN A 1.2.3.4 176ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGvu9A/nGsbatxJCmnObioIhKg2Tm0Apr0eo+DO1kIDrAHco/bt/EdY= ;{id = 2854} 177ENTRY_END 178 179; ENT request 180ENTRY_BEGIN 181MATCH opcode qtype qname 182ADJUST copy_id 183REPLY QR AA NOERROR 184SECTION QUESTION 185sub.example.com. IN DS 186SECTION AUTHORITY 187rub.example.com. IN NSEC sub.sub.example.com. RRSIG NSEC A 188rub.example.com. 3600 IN RRSIG NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. AAUOa/L9F/ZrGfXSov4WRhTTbd8+CsdTJeM4Nk973wcLZ27A4YiIlTs= ;{id = 2854} 189; extraneous DS 190sub.sub.example.com. IN NSEC tub.example.com. RRSIG NSEC DS 191sub.sub.example.com. 3600 IN RRSIG NSEC 3 4 3600 20030926134150 20030829134150 2854 example.com. AJVJEBTIlbnAHF0HR0skEfTVS28hMrbUHzBx5CMfY/NhxZohQtGVcwo= ;{id = 2854} 192ENTRY_END 193 194; DS request 195ENTRY_BEGIN 196MATCH opcode qtype qname 197ADJUST copy_id 198REPLY QR AA NOERROR 199SECTION QUESTION 200sub.sub.example.com. IN DS 201SECTION ANSWER 202sub.sub.example.com. 3600 IN DS 30899 5 1 dea269e4bccaa019a4ba0cf5b198292f28faeee1 203sub.sub.example.com. 3600 IN RRSIG DS 3 4 3600 20030926134150 20030829134150 2854 example.com. AGQoKQd4UT+e4AMdYdDznxWo9cybYZyRAgC7exEgJ1asYRmmgvJG7Zw= ;{id = 2854} 204ENTRY_END 205 206ENTRY_BEGIN 207MATCH opcode subdomain 208ADJUST copy_id copy_query 209REPLY QR AA NOERROR 210SECTION QUESTION 211sub.sub.example.com. IN NS 212SECTION AUTHORITY 213sub.sub.example.com. IN NS ns.sub.sub.example.com. 214sub.sub.example.com. IN NS ns.foo.com. 215sub.sub.example.com. 3600 IN DS 30899 5 1 dea269e4bccaa019a4ba0cf5b198292f28faeee1 216sub.sub.example.com. 3600 IN RRSIG DS 3 4 3600 20030926134150 20030829134150 2854 example.com. AGQoKQd4UT+e4AMdYdDznxWo9cybYZyRAgC7exEgJ1asYRmmgvJG7Zw= ;{id = 2854} 217SECTION ADDITIONAL 218ns.sub.sub.example.com. IN A 1.2.4.6 219ENTRY_END 220 221RANGE_END 222 223; ns.blabla.com. 224RANGE_BEGIN 0 100 225 ADDRESS 1.2.3.5 226ENTRY_BEGIN 227MATCH opcode qtype qname 228ADJUST copy_id 229REPLY QR NOERROR 230SECTION QUESTION 231example.com. IN NS 232SECTION ANSWER 233example.com. IN NS ns.example.com. 234example.com. IN NS ns.blabla.com. 235example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 236SECTION ADDITIONAL 237ns.example.com. IN A 1.2.3.4 238ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 239ENTRY_END 240 241ENTRY_BEGIN 242MATCH opcode qtype qname 243ADJUST copy_id 244REPLY QR NOERROR 245SECTION QUESTION 246ns.example.com. IN A 247SECTION ANSWER 248ns.example.com. IN A 1.2.3.4 249ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 250SECTION ADDITIONAL 251ENTRY_END 252 253ENTRY_BEGIN 254MATCH opcode qtype qname 255ADJUST copy_id 256REPLY QR NOERROR 257SECTION QUESTION 258ns.example.com. IN AAAA 259SECTION ANSWER 260SECTION ADDITIONAL 261ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 262ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. ABhDNtJramb2a4R1SK5gb/CTYJybQts6mZ++z3kLiwsrUSZInA4ikeQ= ;{id = 2854} 263ENTRY_END 264 265; response to DNSKEY priming query 266ENTRY_BEGIN 267MATCH opcode qtype qname 268ADJUST copy_id 269REPLY QR NOERROR 270SECTION QUESTION 271example.com. IN DNSKEY 272SECTION ANSWER 273example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 274example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 275SECTION AUTHORITY 276example.com. IN NS ns.example.com. 277example.com. IN NS ns.blabla.com. 278example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 279SECTION ADDITIONAL 280ns.example.com. IN A 1.2.3.4 281ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 282ENTRY_END 283 284ENTRY_BEGIN 285MATCH opcode qtype qname 286ADJUST copy_id 287REPLY QR NOERROR 288SECTION QUESTION 289www.example.com. IN A 290SECTION ANSWER 291www.example.com. IN A 10.20.30.40 292ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 293SECTION AUTHORITY 294example.com. IN NS ns.example.com. 295example.com. IN NS ns.blabla.com. 296example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 297SECTION ADDITIONAL 298ns.example.com. IN A 1.2.3.4 299www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 300ENTRY_END 301 302; ENT request 303ENTRY_BEGIN 304MATCH opcode qtype qname 305ADJUST copy_id 306REPLY QR AA NOERROR 307SECTION QUESTION 308sub.example.com. IN DS 309SECTION AUTHORITY 310rub.example.com. IN NSEC sub.sub.example.com. RRSIG NSEC A 311rub.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. AKxt275OlwQmfqO36rTYkPXBqdoyaD3lId4q+UA4+Gs50qfn/RkuIOs= ;{id = 2854} 312; extraneous DS 313sub.sub.example.com. IN NSEC tub.example.com. RRSIG NSEC DS 314sub.sub.example.com. 3600 IN RRSIG NSEC 3 4 3600 20070926134150 20070829134150 2854 example.com. AJlIjBQvBluNTu1883DMH9ZtBVfKTXVEH2LvLV785UcwGELnwRYfZbA= ;{id = 2854} 315ENTRY_END 316 317; DS request 318ENTRY_BEGIN 319MATCH opcode qtype qname 320ADJUST copy_id 321REPLY QR AA NOERROR 322SECTION QUESTION 323sub.sub.example.com. IN DS 324SECTION ANSWER 325sub.sub.example.com. 3600 IN DS 30899 5 1 dea269e4bccaa019a4ba0cf5b198292f28faeee1 326sub.sub.example.com. 3600 IN RRSIG DS 3 4 3600 20070926134150 20070829134150 2854 example.com. AAPYiFzyEyehaff0hYTyOBFHF6qiCE7I7Zoa7Atn2F+HN2N/g/RloN8= ;{id = 2854} 327 328ENTRY_END 329 330ENTRY_BEGIN 331MATCH opcode subdomain 332ADJUST copy_id copy_query 333REPLY QR AA NOERROR 334SECTION QUESTION 335sub.sub.example.com. IN NS 336SECTION AUTHORITY 337sub.sub.example.com. IN NS ns.sub.sub.example.com. 338sub.sub.example.com. IN NS ns.foo.com. 339sub.sub.example.com. 3600 IN DS 30899 5 1 dea269e4bccaa019a4ba0cf5b198292f28faeee1 340sub.sub.example.com. 3600 IN RRSIG DS 3 4 3600 20070926134150 20070829134150 2854 example.com. AAPYiFzyEyehaff0hYTyOBFHF6qiCE7I7Zoa7Atn2F+HN2N/g/RloN8= ;{id = 2854} 341SECTION ADDITIONAL 342ns.sub.sub.example.com. IN A 1.2.4.6 343ENTRY_END 344 345RANGE_END 346 347; ns.sub.sub.example.com. 348RANGE_BEGIN 0 100 349 ADDRESS 1.2.4.6 350ENTRY_BEGIN 351MATCH opcode qtype qname 352ADJUST copy_id 353REPLY QR AA NOERROR 354SECTION QUESTION 355sub.sub.example.com. IN DNSKEY 356SECTION ANSWER 357sub.sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 358sub.sub.example.com. 3600 IN RRSIG DNSKEY 5 4 3600 20070926134150 20070829134150 30899 sub.sub.example.com. RO6LECPRS3aL6kRp++qbSIdNiJvhvYTJr0fupJMF5lPuTwI5HhAL5mAHjrmc3r0LeFE9iRpjFmdp/p1i0qVWzQ== ;{id = 30899} 359ENTRY_END 360 361ENTRY_BEGIN 362MATCH opcode qtype qname 363ADJUST copy_id 364REPLY QR AA NOERROR 365SECTION QUESTION 366sub.sub.example.com. IN NS 367SECTION ANSWER 368sub.sub.example.com. IN NS ns.sub.sub.example.com. 369sub.sub.example.com. IN NS ns.foo.com. 370sub.sub.example.com. 3600 IN RRSIG NS 5 4 3600 20070926134150 20070829134150 30899 sub.sub.example.com. blhq9ELWjE5YhhLn1UN3K/QTh52w/ZkGv+hI8HbL1a9Av6W67H2jsb1B5iaPbOagKzAIPId9qtcskjCo3DSaHg== ;{id = 30899} 371SECTION ADDITIONAL 372ns.sub.sub.example.com. IN A 1.2.4.6 373ns.sub.sub.example.com. 3600 IN RRSIG A 5 5 3600 20070926134150 20070829134150 30899 sub.sub.example.com. JU2A7WvVR3AB7Ni9Qjfv7sxetc0jIfRgeERj8x+UUWdPiEBEkhUvD+ba6eLu5irMRWCj7CXIM81Mgl58QXCqfg== ;{id = 30899} 374ENTRY_END 375 376ENTRY_BEGIN 377MATCH opcode qtype qname 378ADJUST copy_id 379REPLY QR AA NOERROR 380SECTION QUESTION 381ns.sub.sub.example.com. IN A 382SECTION ANSWER 383ns.sub.sub.example.com. IN A 1.2.4.6 384ns.sub.sub.example.com. 3600 IN RRSIG A 5 5 3600 20070926134150 20070829134150 30899 sub.sub.example.com. JU2A7WvVR3AB7Ni9Qjfv7sxetc0jIfRgeERj8x+UUWdPiEBEkhUvD+ba6eLu5irMRWCj7CXIM81Mgl58QXCqfg== ;{id = 30899} 385ENTRY_END 386 387ENTRY_BEGIN 388MATCH opcode qtype qname 389ADJUST copy_id 390REPLY QR AA NOERROR 391SECTION QUESTION 392ns.sub.sub.example.com. IN AAAA 393SECTION AUTHORITY 394ns.sub.sub.example.com. IN NSEC nt.sub.sub.example.com. NSEC RRSIG A 395ns.sub.sub.example.com. 3600 IN RRSIG NSEC 5 5 3600 20070926134150 20070829134150 30899 sub.sub.example.com. zoir16lVMbPOFS81l20ZXyqWlXYvQg99zzfOiH5tzpbqPYHxrnQvsfJgTMR7rZvYG55Qh64Y4J1MSw+U2QAgmw== ;{id = 30899} 396sub.sub.example.com. IN SOA sub.sub.example.com. hostmaster.sub.sub.example.com. 1 2 3 4 5 397sub.sub.example.com. 3600 IN RRSIG SOA 5 4 3600 20070926134150 20070829134150 30899 sub.sub.example.com. aAKz5eF2EdRP5HVojabqDkvINeXczBAZyBesjC0+DtMmb7WvaUQzKQfYtBdWhE7CdrnPYuHPg4WlNbn0f7DsCw== ;{id = 30899} 398ENTRY_END 399 400ENTRY_BEGIN 401MATCH opcode qtype qname 402ADJUST copy_id 403REPLY QR AA NOERROR 404SECTION QUESTION 405www.sub.sub.example.com. IN A 406SECTION ANSWER 407www.sub.sub.example.com. IN A 10.20.30.40 408www.sub.sub.example.com. 3600 IN RRSIG A 5 5 3600 20070926134150 20070829134150 30899 sub.sub.example.com. ZXZoHA8pavJZELucMJpXLWQXNaIYXO4ryXpkp2BVZbW9sdcYCobWPyyzN5nmBatm+CaWLd6fjhwXh+OVVIH1Gg== ;{id = 30899} 409ENTRY_END 410 411RANGE_END 412 413STEP 1 QUERY 414ENTRY_BEGIN 415REPLY RD DO 416SECTION QUESTION 417www.sub.sub.example.com. IN A 418ENTRY_END 419 420; recursion happens here. 421STEP 10 CHECK_ANSWER 422ENTRY_BEGIN 423MATCH all 424REPLY QR RD RA AD DO NOERROR 425SECTION QUESTION 426www.sub.sub.example.com. IN A 427SECTION ANSWER 428www.sub.sub.example.com. IN A 10.20.30.40 429www.sub.sub.example.com. 3600 IN RRSIG A 5 5 3600 20070926134150 20070829134150 30899 sub.sub.example.com. ZXZoHA8pavJZELucMJpXLWQXNaIYXO4ryXpkp2BVZbW9sdcYCobWPyyzN5nmBatm+CaWLd6fjhwXh+OVVIH1Gg== ;{id = 30899} 430ENTRY_END 431 432; remove pending ns.blabla.com AAAA msg 433STEP 30 QUERY 434ENTRY_BEGIN 435REPLY RD DO CD 436SECTION QUESTION 437ns.blabla.com. IN AAAA 438ENTRY_END 439 440; recursion happens here. 441STEP 40 CHECK_ANSWER 442ENTRY_BEGIN 443MATCH all 444REPLY QR RD CD RA DO NOERROR 445SECTION QUESTION 446ns.blabla.com. IN AAAA 447SECTION ANSWER 448SECTION AUTHORITY 449com. IN SOA com. com. 2009100100 28800 7200 604800 3600 450ENTRY_END 451 452SCENARIO_END 453