1; config options 2server: 3 target-fetch-policy: "0 0 0 0 0" 4 minimal-responses: no 5 rrset-roundrobin: no 6 7stub-zone: 8 name: "." 9 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 10CONFIG_END 11 12SCENARIO_BEGIN Test detection of RA but no AA lameness 13; in this scenario mistakenly, a recursive server is deployed, instead 14; of an authoritative server. It gives answers from cache. 15; However, unbound is doing recursion on behalf of its client, and does 16; not trust the server to do so. 17 18; K.ROOT-SERVERS.NET. 19RANGE_BEGIN 0 100 20 ADDRESS 193.0.14.129 21ENTRY_BEGIN 22MATCH opcode qtype qname 23ADJUST copy_id 24REPLY QR NOERROR 25SECTION QUESTION 26. IN NS 27SECTION ANSWER 28. IN NS K.ROOT-SERVERS.NET. 29SECTION ADDITIONAL 30K.ROOT-SERVERS.NET. IN A 193.0.14.129 31ENTRY_END 32 33ENTRY_BEGIN 34MATCH opcode subdomain 35ADJUST copy_id copy_query 36REPLY QR NOERROR 37SECTION QUESTION 38com. IN A 39SECTION AUTHORITY 40com. IN NS a.gtld-servers.net. 41SECTION ADDITIONAL 42a.gtld-servers.net. IN A 192.5.6.30 43ENTRY_END 44 45ENTRY_BEGIN 46MATCH opcode subdomain 47ADJUST copy_id copy_query 48REPLY QR NOERROR 49SECTION QUESTION 50net. IN A 51SECTION AUTHORITY 52net. IN NS e.gtld-servers.net. 53SECTION ADDITIONAL 54e.gtld-servers.net. IN A 192.12.94.30 55ENTRY_END 56RANGE_END 57 58; a.gtld-servers.net. 59RANGE_BEGIN 0 100 60 ADDRESS 192.5.6.30 61ENTRY_BEGIN 62MATCH opcode qtype qname 63ADJUST copy_id 64REPLY QR NOERROR 65SECTION QUESTION 66com. IN NS 67SECTION ANSWER 68com. IN NS a.gtld-servers.net. 69SECTION ADDITIONAL 70a.gtld-servers.net. IN A 192.5.6.30 71ENTRY_END 72 73ENTRY_BEGIN 74MATCH opcode subdomain 75ADJUST copy_id copy_query 76REPLY QR NOERROR 77SECTION QUESTION 78example.com. IN A 79SECTION AUTHORITY 80example.com. IN NS ns.example.com. 81example.com. IN NS ns.example.net. 82SECTION ADDITIONAL 83; this entry; glue will make unbound take this reference first. 84; it is however, the lame server. 85ns.example.com. IN A 1.2.3.55 86ENTRY_END 87RANGE_END 88 89; e.gtld-servers.net. 90RANGE_BEGIN 0 100 91 ADDRESS 192.12.94.30 92ENTRY_BEGIN 93MATCH opcode qtype qname 94ADJUST copy_id 95REPLY QR NOERROR 96SECTION QUESTION 97net. IN NS 98SECTION ANSWER 99net. IN NS e.gtld-servers.net. 100SECTION ADDITIONAL 101e.gtld-servers.net. IN A 192.12.94.30 102ENTRY_END 103 104ENTRY_BEGIN 105MATCH opcode subdomain 106ADJUST copy_id copy_query 107REPLY QR NOERROR 108SECTION QUESTION 109example.net. IN A 110SECTION AUTHORITY 111example.net. IN NS ns.example.net. 112SECTION ADDITIONAL 113ns.example.net. IN A 1.2.3.44 114ENTRY_END 115RANGE_END 116 117; ns.example.net. 118RANGE_BEGIN 0 100 119 ADDRESS 1.2.3.44 120ENTRY_BEGIN 121MATCH opcode qtype qname 122ADJUST copy_id 123REPLY QR NOERROR 124SECTION QUESTION 125example.net. IN NS 126SECTION ANSWER 127example.net. IN NS ns.example.net. 128SECTION ADDITIONAL 129ns.example.net. IN A 1.2.3.44 130ENTRY_END 131 132ENTRY_BEGIN 133MATCH opcode qtype qname 134ADJUST copy_id 135REPLY QR AA NOERROR 136SECTION QUESTION 137example.com. IN NS 138SECTION ANSWER 139example.com. IN NS ns.example.com. 140example.com. IN NS ns.example.net. 141SECTION ADDITIONAL 142ns.example.net IN A 1.2.3.44 143ENTRY_END 144 145ENTRY_BEGIN 146MATCH opcode qtype qname 147ADJUST copy_id 148REPLY QR NOERROR 149SECTION QUESTION 150ns.example.net. IN A 151SECTION ANSWER 152ns.example.net. IN A 1.2.3.44 153SECTION AUTHORITY 154example.net. IN NS ns.example.net. 155ENTRY_END 156 157ENTRY_BEGIN 158MATCH opcode qtype qname 159ADJUST copy_id 160REPLY QR NOERROR 161SECTION QUESTION 162ns.example.com. IN A 163SECTION ANSWER 164ns.example.com. IN A 1.2.3.55 165ENTRY_END 166 167ENTRY_BEGIN 168MATCH opcode qtype qname 169ADJUST copy_id 170REPLY QR NOERROR 171SECTION QUESTION 172ns.example.net. IN AAAA 173SECTION AUTHORITY 174example.net. IN NS ns.example.net. 175SECTION ADDITIONAL 176www.example.net. IN A 1.2.3.44 177ENTRY_END 178 179ENTRY_BEGIN 180MATCH opcode qtype qname 181ADJUST copy_id 182REPLY QR AA NOERROR 183SECTION QUESTION 184www.example.com. IN A 185SECTION ANSWER 186www.example.com. IN A 10.20.30.40 187SECTION AUTHORITY 188example.com. IN NS ns.example.com. 189example.com. IN NS ns.example.net. 190SECTION ADDITIONAL 191ns.example.net IN A 1.2.3.44 192ENTRY_END 193 194ENTRY_BEGIN 195MATCH opcode qtype qname 196ADJUST copy_id 197REPLY QR NOERROR 198SECTION QUESTION 199ns.example.com. IN AAAA 200SECTION ANSWER 201SECTION AUTHORITY 202example.com. IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 203ENTRY_END 204 205RANGE_END 206 207; ns.example.com. 208RANGE_BEGIN 0 100 209 ADDRESS 1.2.3.55 210ENTRY_BEGIN 211MATCH opcode qtype qname 212ADJUST copy_id 213REPLY QR AA NOERROR 214SECTION QUESTION 215example.com. IN NS 216SECTION ANSWER 217example.com. IN NS ns.example.com. 218example.com. IN NS ns.example.net. 219SECTION ADDITIONAL 220ns.example.com. IN A 1.2.3.55 221ENTRY_END 222 223ENTRY_BEGIN 224MATCH opcode qtype qname 225ADJUST copy_id 226REPLY QR NOERROR 227SECTION QUESTION 228ns.example.com. IN A 229SECTION ANSWER 230ns.example.com. IN A 1.2.3.55 231ENTRY_END 232 233ENTRY_BEGIN 234MATCH opcode qtype qname 235ADJUST copy_id 236REPLY QR NOERROR 237SECTION QUESTION 238ns.example.com. IN AAAA 239SECTION ANSWER 240SECTION AUTHORITY 241example.com. IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 242ENTRY_END 243 244ENTRY_BEGIN 245MATCH opcode qtype qname 246ADJUST copy_id 247REPLY QR NOERROR 248SECTION QUESTION 249ns.example.net. IN AAAA 250SECTION AUTHORITY 251example.net. IN SOA ns.example.com. root.example.com. 4 14400 3600 604800 3600 252ENTRY_END 253 254; the lame response. 255ENTRY_BEGIN 256MATCH opcode qtype qname 257ADJUST copy_id 258REPLY QR RA NOERROR 259SECTION QUESTION 260www.example.com. IN A 261SECTION ANSWER 262; the wrong answer. 263www.example.com. IN A 10.20.30.50 264SECTION AUTHORITY 265example.com. IN NS ns.example.com. 266example.com. IN NS ns.example.net. 267SECTION ADDITIONAL 268ns.example.com. IN A 1.2.3.55 269ENTRY_END 270RANGE_END 271 272STEP 1 QUERY 273ENTRY_BEGIN 274REPLY RD 275SECTION QUESTION 276www.example.com. IN A 277ENTRY_END 278 279; recursion happens here. 280STEP 20 CHECK_ANSWER 281ENTRY_BEGIN 282MATCH all 283REPLY QR RD RA NOERROR 284SECTION QUESTION 285www.example.com. IN A 286SECTION ANSWER 287www.example.com. IN A 10.20.30.40 288SECTION AUTHORITY 289example.com. IN NS ns.example.com. 290example.com. IN NS ns.example.net. 291; scrubbed off 292;SECTION ADDITIONAL 293;ns.example.net IN A 1.2.3.44 294ENTRY_END 295 296; query still pending 297STEP 30 QUERY 298ENTRY_BEGIN 299REPLY RD 300SECTION QUESTION 301ns.example.net. IN AAAA 302ENTRY_END 303 304; query still pending 305STEP 40 CHECK_ANSWER 306ENTRY_BEGIN 307REPLY RD RA 308SECTION QUESTION 309ENTRY_END 310 311SCENARIO_END 312