1; config options 2server: 3 target-fetch-policy: "0 0 0 0 0" 4 harden-below-nxdomain: yes 5 trust-anchor: ". IN DNSKEY 257 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3" 6 val-override-date: "20070916134226" 7 8stub-zone: 9 name: "." 10 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 11CONFIG_END 12 13SCENARIO_BEGIN Test stop cache search on nxdomain 14 15; K.ROOT-SERVERS.NET. 16RANGE_BEGIN 0 100 17 ADDRESS 193.0.14.129 18ENTRY_BEGIN 19MATCH opcode qtype qname 20ADJUST copy_id 21REPLY QR NOERROR 22SECTION QUESTION 23. IN NS 24SECTION ANSWER 25. IN NS K.ROOT-SERVERS.NET. 26SECTION ADDITIONAL 27K.ROOT-SERVERS.NET. IN A 193.0.14.129 28ENTRY_END 29 30ENTRY_BEGIN 31MATCH opcode qtype qname 32ADJUST copy_id 33REPLY QR NOERROR 34SECTION QUESTION 35. IN DNSKEY 36SECTION ANSWER 37. 3600 IN DNSKEY 257 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30900 (ksk), size = 512b} 38. 3600 IN RRSIG DNSKEY 5 0 3600 20070926134150 20070829134150 30900 . BlVcSh8xSgm7ne+XVCJwNHQKjk5kTJgG4Fa3sOSfp3YUjb2YclmVWyIw7XEHl0/C6CN5gdy18idnM6vT6Hy42A== ;{id = 30900} 39ENTRY_END 40 41ENTRY_BEGIN 42MATCH opcode qtype qname 43ADJUST copy_id 44REPLY QR AA NXDOMAIN 45SECTION QUESTION 46example.local. IN A 47SECTION AUTHORITY 48. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010111601 1800 900 604800 86400 49. 86400 IN RRSIG SOA 5 0 86400 20070926134150 20070829134150 30900 . bOYbFZZp7vWWC2oxV+kph+YXjoQj2f6QJktlgmzRI7oReFX9jy/LibTPQi/sW0SGHpLaj3G5p4IfIlBibne4DA== ;{id = 30900} 50. 86400 IN NSEC ac. NS SOA RRSIG NSEC DNSKEY 51. 86400 IN RRSIG NSEC 5 0 86400 20070926134150 20070829134150 30900 . U+/m5+FmczzkosEx1aTP7MK/F3PpcKWct8CzM1jhjwNe2RlnW7qFe0IH8SLzD/elvxDTQMpJSMlKOhUUdapB8g== ;{id = 30900} 52lk. 86400 IN NSEC lr. NS DS RRSIG NSEC 53lk. 86400 IN RRSIG NSEC 5 1 86400 20070926134150 20070829134150 30900 . j6Pw5Eu9vGHDJcckTSWa8YD1b7FV7c/Z8aVkLfJCH+iPcaa40/LSp784+t2PnAAXL8fgriNL6jF/ve1rti3ANQ== ;{id = 30900} 54ENTRY_END 55RANGE_END 56 57STEP 1 QUERY 58ENTRY_BEGIN 59REPLY RD 60SECTION QUESTION 61example.local. IN A 62ENTRY_END 63 64; recursion happens here. 65STEP 10 CHECK_ANSWER 66ENTRY_BEGIN 67MATCH all 68REPLY QR RD RA NXDOMAIN 69SECTION QUESTION 70example.local. IN A 71SECTION AUTHORITY 72. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010111601 1800 900 604800 86400 73ENTRY_END 74 75STEP 20 QUERY 76ENTRY_BEGIN 77REPLY RD 78SECTION QUESTION 79foo.example.local. IN A 80ENTRY_END 81 82; this query does not get sent to K-ROOT. 83STEP 30 CHECK_ANSWER 84ENTRY_BEGIN 85MATCH all 86REPLY QR RD RA NXDOMAIN 87SECTION QUESTION 88foo.example.local. IN A 89SECTION AUTHORITY 90. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010111601 1800 900 604800 86400 91ENTRY_END 92 93SCENARIO_END 94