1; config options 2server: 3 target-fetch-policy: "0 0 0 0 0" 4 minimal-responses: no 5 rrset-roundrobin: no 6 7stub-zone: 8 name: "." 9 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 10CONFIG_END 11 12SCENARIO_BEGIN Test detection of RA but no AA lameness 13; in this scenario mistakenly, a recursive server is deployed, instead 14; of an authoritative server. It gives answers from cache. 15; However, unbound is doing recursion on behalf of its client, and does 16; not trust the server to do so. 17 18; K.ROOT-SERVERS.NET. 19RANGE_BEGIN 0 100 20 ADDRESS 193.0.14.129 21ENTRY_BEGIN 22MATCH opcode qtype qname 23ADJUST copy_id 24REPLY QR NOERROR 25SECTION QUESTION 26. IN NS 27SECTION ANSWER 28. IN NS K.ROOT-SERVERS.NET. 29SECTION ADDITIONAL 30K.ROOT-SERVERS.NET. IN A 193.0.14.129 31ENTRY_END 32 33ENTRY_BEGIN 34MATCH opcode subdomain 35ADJUST copy_id copy_query 36REPLY QR NOERROR 37SECTION QUESTION 38com. IN A 39SECTION AUTHORITY 40com. IN NS a.gtld-servers.net. 41SECTION ADDITIONAL 42a.gtld-servers.net. IN A 192.5.6.30 43ENTRY_END 44 45ENTRY_BEGIN 46MATCH opcode subdomain 47ADJUST copy_id copy_query 48REPLY QR NOERROR 49SECTION QUESTION 50net. IN A 51SECTION AUTHORITY 52net. IN NS e.gtld-servers.net. 53SECTION ADDITIONAL 54e.gtld-servers.net. IN A 192.12.94.30 55ENTRY_END 56RANGE_END 57 58; a.gtld-servers.net. 59RANGE_BEGIN 0 100 60 ADDRESS 192.5.6.30 61ENTRY_BEGIN 62MATCH opcode qtype qname 63ADJUST copy_id 64REPLY QR NOERROR 65SECTION QUESTION 66com. IN NS 67SECTION ANSWER 68com. IN NS a.gtld-servers.net. 69SECTION ADDITIONAL 70a.gtld-servers.net. IN A 192.5.6.30 71ENTRY_END 72 73ENTRY_BEGIN 74MATCH opcode subdomain 75ADJUST copy_id copy_query 76REPLY QR NOERROR 77SECTION QUESTION 78example.com. IN A 79SECTION AUTHORITY 80example.com. IN NS ns.example.com. 81example.com. IN NS ns.example.net. 82SECTION ADDITIONAL 83; this entry; glue will make unbound take this reference first. 84; it is however, the lame server. 85ns.example.com. IN A 1.2.3.55 86ENTRY_END 87RANGE_END 88 89; e.gtld-servers.net. 90RANGE_BEGIN 0 100 91 ADDRESS 192.12.94.30 92ENTRY_BEGIN 93MATCH opcode qtype qname 94ADJUST copy_id 95REPLY QR NOERROR 96SECTION QUESTION 97net. IN NS 98SECTION ANSWER 99net. IN NS e.gtld-servers.net. 100SECTION ADDITIONAL 101e.gtld-servers.net. IN A 192.12.94.30 102ENTRY_END 103 104ENTRY_BEGIN 105MATCH opcode subdomain 106ADJUST copy_id copy_query 107REPLY QR NOERROR 108SECTION QUESTION 109example.net. IN A 110SECTION AUTHORITY 111example.net. IN NS ns.example.net. 112SECTION ADDITIONAL 113ns.example.net. IN A 1.2.3.44 114ENTRY_END 115RANGE_END 116 117; ns.example.net. 118RANGE_BEGIN 0 100 119 ADDRESS 1.2.3.44 120ENTRY_BEGIN 121MATCH opcode qtype qname 122ADJUST copy_id 123REPLY QR NOERROR 124SECTION QUESTION 125example.net. IN NS 126SECTION ANSWER 127example.net. IN NS ns.example.net. 128SECTION ADDITIONAL 129ns.example.net. IN A 1.2.3.44 130ENTRY_END 131 132ENTRY_BEGIN 133MATCH opcode qtype qname 134ADJUST copy_id 135REPLY QR AA NOERROR 136SECTION QUESTION 137example.com. IN NS 138SECTION ANSWER 139example.com. IN NS ns.example.com. 140example.com. IN NS ns.example.net. 141SECTION ADDITIONAL 142ns.example.net IN A 1.2.3.44 143ENTRY_END 144 145ENTRY_BEGIN 146MATCH opcode qtype qname 147ADJUST copy_id 148REPLY QR NOERROR 149SECTION QUESTION 150ns.example.net. IN A 151SECTION ANSWER 152ns.example.net. IN A 1.2.3.44 153SECTION AUTHORITY 154example.net. IN NS ns.example.net. 155ENTRY_END 156 157ENTRY_BEGIN 158MATCH opcode qtype qname 159ADJUST copy_id 160REPLY QR NOERROR 161SECTION QUESTION 162ns.example.com. IN A 163SECTION ANSWER 164ns.example.com. IN A 1.2.3.55 165ENTRY_END 166 167ENTRY_BEGIN 168MATCH opcode qtype qname 169ADJUST copy_id 170REPLY QR NOERROR 171SECTION QUESTION 172ns.example.net. IN AAAA 173SECTION AUTHORITY 174example.net. IN NS ns.example.net. 175SECTION ADDITIONAL 176www.example.net. IN A 1.2.3.44 177ENTRY_END 178 179ENTRY_BEGIN 180MATCH opcode qtype qname 181ADJUST copy_id 182REPLY QR AA NOERROR 183SECTION QUESTION 184www.example.com. IN A 185SECTION ANSWER 186www.example.com. IN A 10.20.30.40 187SECTION AUTHORITY 188example.com. IN NS ns.example.com. 189example.com. IN NS ns.example.net. 190SECTION ADDITIONAL 191ns.example.net IN A 1.2.3.44 192ENTRY_END 193 194ENTRY_BEGIN 195MATCH opcode qtype qname 196ADJUST copy_id 197REPLY QR NOERROR 198SECTION QUESTION 199ns.example.com. IN AAAA 200SECTION ANSWER 201ENTRY_END 202 203RANGE_END 204 205; ns.example.com. 206RANGE_BEGIN 0 100 207 ADDRESS 1.2.3.55 208ENTRY_BEGIN 209MATCH opcode qtype qname 210ADJUST copy_id 211REPLY QR AA NOERROR 212SECTION QUESTION 213example.com. IN NS 214SECTION ANSWER 215example.com. IN NS ns.example.com. 216example.com. IN NS ns.example.net. 217SECTION ADDITIONAL 218ns.example.com. IN A 1.2.3.55 219ENTRY_END 220 221ENTRY_BEGIN 222MATCH opcode qtype qname 223ADJUST copy_id 224REPLY QR NOERROR 225SECTION QUESTION 226ns.example.com. IN A 227SECTION ANSWER 228ns.example.com. IN A 1.2.3.55 229ENTRY_END 230 231ENTRY_BEGIN 232MATCH opcode qtype qname 233ADJUST copy_id 234REPLY QR NOERROR 235SECTION QUESTION 236ns.example.com. IN AAAA 237SECTION ANSWER 238ENTRY_END 239 240ENTRY_BEGIN 241MATCH opcode qtype qname 242ADJUST copy_id 243REPLY QR NOERROR 244SECTION QUESTION 245ns.example.net. IN AAAA 246ENTRY_END 247 248; the lame response. 249ENTRY_BEGIN 250MATCH opcode qtype qname 251ADJUST copy_id 252REPLY QR RA NOERROR 253SECTION QUESTION 254www.example.com. IN A 255SECTION ANSWER 256; the wrong answer. 257www.example.com. IN A 10.20.30.50 258SECTION AUTHORITY 259example.com. IN NS ns.example.com. 260example.com. IN NS ns.example.net. 261SECTION ADDITIONAL 262ns.example.com. IN A 1.2.3.55 263ENTRY_END 264RANGE_END 265 266STEP 1 QUERY 267ENTRY_BEGIN 268REPLY RD 269SECTION QUESTION 270www.example.com. IN A 271ENTRY_END 272 273; recursion happens here. 274STEP 20 CHECK_ANSWER 275ENTRY_BEGIN 276MATCH all 277REPLY QR RD RA NOERROR 278SECTION QUESTION 279www.example.com. IN A 280SECTION ANSWER 281www.example.com. IN A 10.20.30.40 282SECTION AUTHORITY 283example.com. IN NS ns.example.com. 284example.com. IN NS ns.example.net. 285; scrubbed off 286;SECTION ADDITIONAL 287;ns.example.net IN A 1.2.3.44 288ENTRY_END 289 290; query still pending 291STEP 30 QUERY 292ENTRY_BEGIN 293REPLY RD 294SECTION QUESTION 295ns.example.net. IN AAAA 296ENTRY_END 297 298; query still pending 299STEP 40 CHECK_ANSWER 300ENTRY_BEGIN 301REPLY RD RA 302SECTION QUESTION 303ENTRY_END 304 305SCENARIO_END 306