1; config options 2server: 3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )" 4 val-override-date: "20120420235959" 5 target-fetch-policy: "0 0 0 0 0" 6 7stub-zone: 8 name: "." 9 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 10CONFIG_END 11 12SCENARIO_BEGIN Test validator NSEC3 B.2 no data. 13 14; K.ROOT-SERVERS.NET. 15RANGE_BEGIN 0 100 16 ADDRESS 193.0.14.129 17ENTRY_BEGIN 18MATCH opcode qtype qname 19ADJUST copy_id 20REPLY QR NOERROR 21SECTION QUESTION 22. IN NS 23SECTION ANSWER 24. IN NS K.ROOT-SERVERS.NET. 25SECTION ADDITIONAL 26K.ROOT-SERVERS.NET. IN A 193.0.14.129 27ENTRY_END 28 29ENTRY_BEGIN 30MATCH opcode 31ADJUST copy_id copy_query 32REPLY QR NOERROR 33SECTION QUESTION 34. IN A 35SECTION AUTHORITY 36example. IN NS ns1.example. 37; leave out to make unbound take ns1 38;example. IN NS ns2.example. 39SECTION ADDITIONAL 40ns1.example. IN A 192.0.2.1 41; leave out to make unbound take ns1 42;ns2.example. IN A 192.0.2.2 43ENTRY_END 44RANGE_END 45 46; ns1.example. 47RANGE_BEGIN 0 100 48 ADDRESS 192.0.2.1 49ENTRY_BEGIN 50MATCH opcode qtype qname 51ADJUST copy_id copy_query 52REPLY QR REFUSED 53SECTION QUESTION 54example. IN NS 55SECTION ANSWER 56ENTRY_END 57 58; response to DNSKEY priming query 59 60ENTRY_BEGIN 61MATCH opcode qtype qname 62ADJUST copy_id 63REPLY QR NOERROR 64SECTION QUESTION 65example. IN DNSKEY 66SECTION ANSWER 67example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= ) 68example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= ) 69example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== ) 70ENTRY_END 71 72ENTRY_BEGIN 73MATCH opcode qtype qname 74ADJUST copy_id 75REPLY QR AA DO NOERROR 76SECTION QUESTION 77ns1.example. IN MX 78SECTION AUTHORITY 79example. SOA ns1.example. bugs.x.w.example. 1 3600 300 ( 3600000 3600 ) 80example. RRSIG SOA 7 1 3600 20150420235959 20051021000000 ( 40430 example. Hu25UIyNPmvPIVBrldN+9Mlp9Zql39qaUd8i q4ZLlYWfUUbbAS41pG+68z81q1xhkYAcEyHd VI2LmKusbZsT0Q== ) 81 82;; NSEC3 RR matches the QNAME and shows that the MX type bit is not set. 832t7b4g4vsa5smi47k61mv5bv1a22bojr.example. NSEC3 1 1 12 aabbccdd ( 2vptu5timamqttgl4luu9kg21e0aor3s A RRSIG ) 842t7b4g4vsa5smi47k61mv5bv1a22bojr.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OmBvJ1Vgg1hCKMXHFiNeIYHK9XVW0iLDLwJN 4TFoNxZuP03gAXEI634YwOc4YBNITrj413iq NI6mRk/r1dOSUw== ) 85 86SECTION ADDITIONAL 87ENTRY_END 88 89RANGE_END 90 91STEP 1 QUERY 92ENTRY_BEGIN 93REPLY RD DO 94SECTION QUESTION 95ns1.example. IN MX 96ENTRY_END 97 98; recursion happens here. 99STEP 10 CHECK_ANSWER 100ENTRY_BEGIN 101MATCH all 102REPLY QR RD RA AD DO NOERROR 103SECTION QUESTION 104ns1.example. IN MX 105SECTION ANSWER 106SECTION AUTHORITY 107example. SOA ns1.example. bugs.x.w.example. 1 3600 300 ( 3600000 3600 ) 108example. RRSIG SOA 7 1 3600 20150420235959 20051021000000 ( 40430 example. Hu25UIyNPmvPIVBrldN+9Mlp9Zql39qaUd8i q4ZLlYWfUUbbAS41pG+68z81q1xhkYAcEyHd VI2LmKusbZsT0Q== ) 1092t7b4g4vsa5smi47k61mv5bv1a22bojr.example. NSEC3 1 1 12 aabbccdd ( 2vptu5timamqttgl4luu9kg21e0aor3s A RRSIG ) 1102t7b4g4vsa5smi47k61mv5bv1a22bojr.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OmBvJ1Vgg1hCKMXHFiNeIYHK9XVW0iLDLwJN 4TFoNxZuP03gAXEI634YwOc4YBNITrj413iq NI6mRk/r1dOSUw== ) 111SECTION ADDITIONAL 112ENTRY_END 113 114SCENARIO_END 115