1; config options 2server: 3 module-config: "respip validator iterator" 4 target-fetch-policy: "0 0 0 0 0" 5 qname-minimisation: no 6 7rpz: 8 name: "rpz.example.com." 9 zonefile: 10TEMPFILE_NAME rpz.example.com 11TEMPFILE_CONTENTS rpz.example.com 12$ORIGIN example.com. 13rpz 3600 IN SOA ns1.rpz.example.com. hostmaster.rpz.example.com. ( 14 1379078166 28800 7200 604800 7200 ) 15 3600 IN NS ns1.rpz.example.com. 16 3600 IN NS ns2.rpz.example.com. 17$ORIGIN rpz.example.com. 18a.a CNAME rpz-passthru. 19b.a CNAME rpz-tcp-only. 20TEMPFILE_END 21 22stub-zone: 23 name: "a." 24 stub-addr: 10.20.30.40 25CONFIG_END 26 27SCENARIO_BEGIN Test RPZ qname trigger and tcp-only action 28 29RANGE_BEGIN 0 100 30 ADDRESS 10.20.30.40 31ENTRY_BEGIN 32MATCH opcode qtype qname 33ADJUST copy_id 34REPLY QR NOERROR 35SECTION QUESTION 36a. IN NS 37SECTION ANSWER 38a. IN NS ns.a. 39SECTION ADDITIONAL 40ns.a IN A 10.20.30.40 41ENTRY_END 42 43ENTRY_BEGIN 44MATCH opcode qtype qname 45ADJUST copy_id 46REPLY QR NOERROR 47SECTION QUESTION 48a.a. IN TXT 49SECTION ANSWER 50a.a. IN TXT "upstream txt rr a.a." 51ENTRY_END 52 53ENTRY_BEGIN 54MATCH opcode qtype qname 55ADJUST copy_id 56REPLY QR NOERROR 57SECTION QUESTION 58b.a. IN TXT 59SECTION ANSWER 60b.a. IN TXT "upstream txt rr b.a." 61ENTRY_END 62 63RANGE_END 64 65STEP 10 QUERY 66ENTRY_BEGIN 67REPLY RD 68SECTION QUESTION 69a.a. IN TXT 70ENTRY_END 71 72STEP 11 CHECK_ANSWER 73ENTRY_BEGIN 74MATCH all 75REPLY QR RD RA NOERROR 76SECTION QUESTION 77a.a. IN TXT 78SECTION ANSWER 79a.a. IN TXT "upstream txt rr a.a." 80ENTRY_END 81 82STEP 20 QUERY 83ENTRY_BEGIN 84MATCH UDP 85REPLY RD 86SECTION QUESTION 87b.a. IN TXT 88ENTRY_END 89 90STEP 21 CHECK_ANSWER 91ENTRY_BEGIN 92MATCH all UDP 93REPLY QR AA TC RD RA NOERROR 94SECTION QUESTION 95b.a. IN TXT 96SECTION ANSWER 97ENTRY_END 98 99STEP 30 QUERY 100ENTRY_BEGIN 101MATCH TCP 102REPLY RD 103SECTION QUESTION 104b.a. IN TXT 105ENTRY_END 106 107STEP 31 CHECK_ANSWER 108ENTRY_BEGIN 109MATCH all TCP 110REPLY QR RD RA NOERROR 111SECTION QUESTION 112b.a. IN TXT 113SECTION ANSWER 114b.a. IN TXT "upstream txt rr b.a." 115ENTRY_END 116 117SCENARIO_END 118