1; config options 2server: 3 target-fetch-policy: "0 0 0 0 0" 4 harden-below-nxdomain: yes 5 qname-minimisation: yes 6 trust-anchor: ". IN DNSKEY 257 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3" 7 val-override-date: "20070916134226" 8 fake-sha1: yes 9 trust-anchor-signaling: no 10 11stub-zone: 12 name: "." 13 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 14stub-zone: 15 name: "anotherexample.local." 16 stub-addr: 10.20.30.40 17CONFIG_END 18 19SCENARIO_BEGIN Test stop cache search on nxdomain for QNAME minimised query 20 21; K.ROOT-SERVERS.NET. 22RANGE_BEGIN 0 100 23 ADDRESS 193.0.14.129 24ENTRY_BEGIN 25MATCH opcode qtype qname 26ADJUST copy_id 27REPLY QR NOERROR 28SECTION QUESTION 29. IN NS 30SECTION ANSWER 31. IN NS K.ROOT-SERVERS.NET. 32SECTION ADDITIONAL 33K.ROOT-SERVERS.NET. IN A 193.0.14.129 34ENTRY_END 35 36ENTRY_BEGIN 37MATCH opcode qtype qname 38ADJUST copy_id 39REPLY QR NOERROR 40SECTION QUESTION 41. IN DNSKEY 42SECTION ANSWER 43. 3600 IN DNSKEY 257 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30900 (ksk), size = 512b} 44. 3600 IN RRSIG DNSKEY 5 0 3600 20070926134150 20070829134150 30900 . BlVcSh8xSgm7ne+XVCJwNHQKjk5kTJgG4Fa3sOSfp3YUjb2YclmVWyIw7XEHl0/C6CN5gdy18idnM6vT6Hy42A== ;{id = 30900} 45ENTRY_END 46 47ENTRY_BEGIN 48MATCH opcode qtype qname 49ADJUST copy_id 50REPLY QR AA NXDOMAIN 51SECTION QUESTION 52local. IN A 53SECTION AUTHORITY 54. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010111601 1800 900 604800 86400 55. 86400 IN RRSIG SOA 5 0 86400 20070926134150 20070829134150 30900 . bOYbFZZp7vWWC2oxV+kph+YXjoQj2f6QJktlgmzRI7oReFX9jy/LibTPQi/sW0SGHpLaj3G5p4IfIlBibne4DA== ;{id = 30900} 56. 86400 IN NSEC ac. NS SOA RRSIG NSEC DNSKEY 57. 86400 IN RRSIG NSEC 5 0 86400 20070926134150 20070829134150 30900 . U+/m5+FmczzkosEx1aTP7MK/F3PpcKWct8CzM1jhjwNe2RlnW7qFe0IH8SLzD/elvxDTQMpJSMlKOhUUdapB8g== ;{id = 30900} 58lk. 86400 IN NSEC lr. NS DS RRSIG NSEC 59lk. 86400 IN RRSIG NSEC 5 1 86400 20070926134150 20070829134150 30900 . j6Pw5Eu9vGHDJcckTSWa8YD1b7FV7c/Z8aVkLfJCH+iPcaa40/LSp784+t2PnAAXL8fgriNL6jF/ve1rti3ANQ== ;{id = 30900} 60ENTRY_END 61RANGE_END 62 63RANGE_BEGIN 0 100 64 ADDRESS 10.20.30.40 65ENTRY_BEGIN 66MATCH opcode qtype qname 67ADJUST copy_id 68REPLY QR AA NOERROR 69SECTION QUESTION 70anotherexample.local. IN TXT 71SECTION ANSWER 72anotherexample.local. 86400 IN TXT "should not resolve this" 73ENTRY_END 74RANGE_END 75 76STEP 1 QUERY 77ENTRY_BEGIN 78REPLY RD 79SECTION QUESTION 80example.local. IN TXT 81ENTRY_END 82 83; recursion happens here. 84STEP 10 CHECK_ANSWER 85ENTRY_BEGIN 86MATCH all 87REPLY QR RD RA NXDOMAIN 88SECTION QUESTION 89example.local. IN TXT 90SECTION AUTHORITY 91. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010111601 1800 900 604800 86400 92ENTRY_END 93 94STEP 20 QUERY 95ENTRY_BEGIN 96REPLY RD 97SECTION QUESTION 98anotherexample.local. IN TXT 99ENTRY_END 100 101; query should be answered using NXDOMAIN for local in cache 102STEP 30 CHECK_ANSWER 103ENTRY_BEGIN 104MATCH all 105REPLY QR RD RA NXDOMAIN 106SECTION QUESTION 107anotherexample.local. IN TXT 108SECTION AUTHORITY 109. 86400 IN SOA a.root-servers.net. nstld.verisign-grs.com. 2010111601 1800 900 604800 86400 110ENTRY_END 111 112SCENARIO_END 113