1; config options 2server: 3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )" 4 val-override-date: "20120420235959" 5 target-fetch-policy: "0 0 0 0 0" 6 qname-minimisation: "no" 7 fake-sha1: yes 8 trust-anchor-signaling: no 9 minimal-responses: no 10 rrset-roundrobin: no 11 12stub-zone: 13 name: "." 14 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 15CONFIG_END 16 17SCENARIO_BEGIN Test validator NSEC3 B.3 referral to optout unsigned zone. 18 19; K.ROOT-SERVERS.NET. 20RANGE_BEGIN 0 100 21 ADDRESS 193.0.14.129 22ENTRY_BEGIN 23MATCH opcode qtype qname 24ADJUST copy_id 25REPLY QR NOERROR 26SECTION QUESTION 27. IN NS 28SECTION ANSWER 29. IN NS K.ROOT-SERVERS.NET. 30SECTION ADDITIONAL 31K.ROOT-SERVERS.NET. IN A 193.0.14.129 32ENTRY_END 33 34ENTRY_BEGIN 35MATCH opcode 36ADJUST copy_id copy_query 37REPLY QR NOERROR 38SECTION QUESTION 39. IN A 40SECTION AUTHORITY 41example. IN NS ns1.example. 42; leave out to make unbound take ns1 43;example. IN NS ns2.example. 44SECTION ADDITIONAL 45ns1.example. IN A 192.0.2.1 46; leave out to make unbound take ns1 47;ns2.example. IN A 192.0.2.2 48ENTRY_END 49RANGE_END 50 51; ns1.example. 52RANGE_BEGIN 0 100 53 ADDRESS 192.0.2.1 54ENTRY_BEGIN 55MATCH opcode qtype qname 56ADJUST copy_id copy_query 57REPLY QR REFUSED 58SECTION QUESTION 59example. IN NS 60SECTION ANSWER 61ENTRY_END 62 63; response to DNSKEY priming query 64 65ENTRY_BEGIN 66MATCH opcode qtype qname 67ADJUST copy_id 68REPLY QR NOERROR 69SECTION QUESTION 70example. IN DNSKEY 71SECTION ANSWER 72example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= ) 73example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= ) 74example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== ) 75ENTRY_END 76 77ENTRY_BEGIN 78MATCH opcode qtype qname 79ADJUST copy_id 80REPLY QR AA DO NOERROR 81SECTION QUESTION 82mc.c.example. IN MX 83SECTION AUTHORITY 84c.example. NS ns1.c.example. 85c.example. NS ns2.c.example. 86 87;; NSEC3 RR that covers the "next closer" name (c.example) 88;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck 8935mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 9035mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 91 92;; NSEC3 RR that matches the closest encloser (example) 93;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom 940p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 950p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 96 97SECTION ADDITIONAL 98ns1.c.example. A 192.0.2.7 99ns2.c.example. A 192.0.2.8 100 101ENTRY_END 102 103ENTRY_BEGIN 104MATCH opcode qtype qname 105ADJUST copy_id 106REPLY QR AA DO NOERROR 107SECTION QUESTION 108c.example. IN DS 109SECTION AUTHORITY 110;; NSEC3 RR that covers the "next closer" name (c.example) 111;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck 11235mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 11335mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 114 115;; NSEC3 RR that matches the closest encloser (example) 116;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom 1170p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 1180p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 119ENTRY_END 120 121RANGE_END 122 123; ns1.c.example. 124RANGE_BEGIN 0 100 125 ADDRESS 192.0.2.7 126ENTRY_BEGIN 127MATCH opcode qtype qname 128ADJUST copy_id 129REPLY QR AA NOERROR 130SECTION QUESTION 131c.example. IN NS 132SECTION ANSWER 133c.example. NS ns1.c.example. 134c.example. NS ns2.c.example. 135SECTION ADDITIONAL 136ns1.c.example. A 192.0.2.7 137ns2.c.example. A 192.0.2.8 138ENTRY_END 139 140ENTRY_BEGIN 141MATCH opcode qtype qname 142ADJUST copy_id 143REPLY QR AA NOERROR 144SECTION QUESTION 145mc.c.example. IN MX 146SECTION ANSWER 147mc.c.example. IN MX 50 mx.c.example. 148SECTION AUTHORITY 149c.example. NS ns1.c.example. 150c.example. NS ns2.c.example. 151SECTION ADDITIONAL 152ns1.c.example. A 192.0.2.7 153ns2.c.example. A 192.0.2.8 154ENTRY_END 155RANGE_END 156 157; ns2.c.example. 158RANGE_BEGIN 0 100 159 ADDRESS 192.0.2.8 160ENTRY_BEGIN 161MATCH opcode qtype qname 162ADJUST copy_id 163REPLY QR AA NOERROR 164SECTION QUESTION 165c.example. IN NS 166SECTION ANSWER 167c.example. NS ns1.c.example. 168c.example. NS ns2.c.example. 169SECTION ADDITIONAL 170ns1.c.example. A 192.0.2.7 171ns2.c.example. A 192.0.2.8 172ENTRY_END 173 174ENTRY_BEGIN 175MATCH opcode qtype qname 176ADJUST copy_id 177REPLY QR AA NOERROR 178SECTION QUESTION 179mc.c.example. IN MX 180SECTION ANSWER 181mc.c.example. IN MX 50 mx.c.example. 182SECTION AUTHORITY 183c.example. NS ns1.c.example. 184c.example. NS ns2.c.example. 185SECTION ADDITIONAL 186ns1.c.example. A 192.0.2.7 187ns2.c.example. A 192.0.2.8 188ENTRY_END 189RANGE_END 190 191 192STEP 1 QUERY 193ENTRY_BEGIN 194REPLY RD DO 195SECTION QUESTION 196mc.c.example. IN MX 197ENTRY_END 198 199; recursion happens here. 200STEP 10 CHECK_ANSWER 201ENTRY_BEGIN 202MATCH all 203REPLY QR RD RA DO NOERROR 204SECTION QUESTION 205mc.c.example. IN MX 206SECTION ANSWER 207mc.c.example. IN MX 50 mx.c.example. 208SECTION AUTHORITY 209c.example. NS ns1.c.example. 210c.example. NS ns2.c.example. 211SECTION ADDITIONAL 212ns1.c.example. A 192.0.2.7 213ns2.c.example. A 192.0.2.8 214ENTRY_END 215 216SCENARIO_END 217