1; This is a comment. 2; config options go here. 3server: 4 minimal-responses: no 5forward-zone: name: "." forward-addr: 216.0.0.1 6CONFIG_END 7 8SCENARIO_BEGIN Untrusted rrset not used for update 9 10STEP 1 QUERY 11ENTRY_BEGIN 12 REPLY RD 13 SECTION QUESTION 14 www.example.com. IN A 15ENTRY_END 16; the query is sent to the forwarder - no cache yet. 17STEP 2 CHECK_OUT_QUERY 18ENTRY_BEGIN 19 MATCH qname qtype opcode 20 SECTION QUESTION 21 www.example.com. IN A 22ENTRY_END 23STEP 3 REPLY 24ENTRY_BEGIN 25 MATCH opcode qtype qname 26 ADJUST copy_id 27 ; authoritative answer 28 REPLY QR AA RD RA NOERROR 29 SECTION QUESTION 30 www.example.com. IN A 31 SECTION ANSWER 32 www.example.com. IN A 10.20.30.40 33 SECTION AUTHORITY 34 example.com. IN NS ns.example.com. 35 SECTION ADDITIONAL 36 ns.example.com. IN A 10.20.30.50 37ENTRY_END 38STEP 4 CHECK_ANSWER 39ENTRY_BEGIN 40 MATCH all 41 REPLY QR RD RA 42 SECTION QUESTION 43 www.example.com. IN A 44 SECTION ANSWER 45 www.example.com. IN A 10.20.30.40 46 SECTION AUTHORITY 47 example.com. IN NS ns.example.com. 48 SECTION ADDITIONAL 49 ns.example.com. IN A 10.20.30.50 50ENTRY_END 51 52; another query passes along 53STEP 6 QUERY 54ENTRY_BEGIN 55 REPLY RD 56 SECTION QUESTION 57 bla.example.com. IN A 58ENTRY_END 59STEP 7 CHECK_OUT_QUERY 60ENTRY_BEGIN 61 MATCH qname qtype opcode 62 SECTION QUESTION 63 bla.example.com. IN A 64ENTRY_END 65STEP 8 REPLY 66; This answer has updated information on ns2.example.com. 67; But it is nerfed into the additional. Must be ignored per rfc2181. 68ENTRY_BEGIN 69 MATCH opcode qtype qname 70 ADJUST copy_id 71 ; authoritative answer 72 REPLY QR AA RD RA NOERROR 73 SECTION QUESTION 74 bla.example.com. IN A 75 SECTION ANSWER 76 bla.example.com. IN A 10.20.30.140 77 SECTION AUTHORITY 78 SECTION ADDITIONAL 79 example.com. IN NS ns.eeeek.com. 80 example.com. IN NS ns2.eeeek.com. 81 ns.eeeek.com. IN A 55.44.33.22 82 ns2.eeeek.com. IN A 55.44.33.24 83ENTRY_END 84STEP 9 CHECK_ANSWER 85ENTRY_BEGIN 86 MATCH all 87 REPLY QR RD RA 88 SECTION QUESTION 89 bla.example.com. IN A 90 SECTION ANSWER 91 bla.example.com. IN A 10.20.30.140 92 SECTION AUTHORITY 93 SECTION ADDITIONAL 94ENTRY_END 95 96 97; original www.example.com query 98STEP 10 QUERY 99ENTRY_BEGIN 100 REPLY RD 101 SECTION QUESTION 102 www.example.com. IN A 103ENTRY_END 104; immediate answer without an OUT_QUERY happening (checked on exit) 105; also, the answer does not have AA set 106; NS rrset has not been updated from the additional seen before. 107STEP 11 CHECK_ANSWER 108ENTRY_BEGIN 109 MATCH all 110 REPLY QR RD RA 111 SECTION QUESTION 112 www.example.com. IN A 113 SECTION ANSWER 114 www.example.com. IN A 10.20.30.40 115 SECTION AUTHORITY 116 example.com. IN NS ns.example.com. 117 SECTION ADDITIONAL 118 ns.example.com. IN A 10.20.30.50 119ENTRY_END 120 121SCENARIO_END 122