1; config options 2server: 3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )" 4 val-override-date: "20120420235959" 5 target-fetch-policy: "0 0 0 0 0" 6 qname-minimisation: "no" 7 fake-sha1: yes 8 trust-anchor-signaling: no 9 minimal-responses: no 10 rrset-roundrobin: no 11 12stub-zone: 13 name: "." 14 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 15CONFIG_END 16 17SCENARIO_BEGIN Test validator NSEC3 B.3 referral optout with negative cache. 18 19; K.ROOT-SERVERS.NET. 20RANGE_BEGIN 0 100 21 ADDRESS 193.0.14.129 22ENTRY_BEGIN 23MATCH opcode qtype qname 24ADJUST copy_id 25REPLY QR NOERROR 26SECTION QUESTION 27. IN NS 28SECTION ANSWER 29. IN NS K.ROOT-SERVERS.NET. 30SECTION ADDITIONAL 31K.ROOT-SERVERS.NET. IN A 193.0.14.129 32ENTRY_END 33 34ENTRY_BEGIN 35MATCH opcode 36ADJUST copy_id copy_query 37REPLY QR NOERROR 38SECTION QUESTION 39. IN A 40SECTION AUTHORITY 41example. IN NS ns1.example. 42; leave out to make unbound take ns1 43;example. IN NS ns2.example. 44SECTION ADDITIONAL 45ns1.example. IN A 192.0.2.1 46; leave out to make unbound take ns1 47;ns2.example. IN A 192.0.2.2 48ENTRY_END 49RANGE_END 50 51; ns1.example. 52RANGE_BEGIN 0 100 53 ADDRESS 192.0.2.1 54ENTRY_BEGIN 55MATCH opcode qtype qname 56ADJUST copy_id copy_query 57REPLY QR REFUSED 58SECTION QUESTION 59example. IN NS 60SECTION ANSWER 61ENTRY_END 62 63; response to DNSKEY priming query 64 65ENTRY_BEGIN 66MATCH opcode qtype qname 67ADJUST copy_id 68REPLY QR NOERROR 69SECTION QUESTION 70example. IN DNSKEY 71SECTION ANSWER 72example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= ) 73example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= ) 74example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== ) 75ENTRY_END 76 77ENTRY_BEGIN 78MATCH opcode qtype qname 79ADJUST copy_id 80REPLY QR AA DO NOERROR 81SECTION QUESTION 82mc.c.example. IN MX 83SECTION AUTHORITY 84c.example. NS ns1.c.example. 85c.example. NS ns2.c.example. 86 87;; NSEC3 RR that covers the "next closer" name (c.example) 88;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck 8935mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 9035mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 91 92;; NSEC3 RR that matches the closest encloser (example) 93;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom 940p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 950p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 96 97SECTION ADDITIONAL 98ns1.c.example. A 192.0.2.7 99ns2.c.example. A 192.0.2.8 100 101ENTRY_END 102 103 104; DS must be gotten from neg cache 105; ENTRY_BEGIN 106; MATCH opcode qtype qname 107; ADJUST copy_id 108; REPLY QR AA DO NOERROR 109; SECTION QUESTION 110; c.example. IN DS 111; SECTION AUTHORITY 112; ;; NSEC3 RR that covers the "next closer" name (c.example) 113; ;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck 114; 35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 115; 35mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 116; 117; ;; NSEC3 RR that matches the closest encloser (example) 118; ;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom 119; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 120; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 121; ENTRY_END 122 123RANGE_END 124 125; ns1.c.example. 126RANGE_BEGIN 0 100 127 ADDRESS 192.0.2.7 128ENTRY_BEGIN 129MATCH opcode qtype qname 130ADJUST copy_id 131REPLY QR AA NOERROR 132SECTION QUESTION 133c.example. IN NS 134SECTION ANSWER 135c.example. NS ns1.c.example. 136c.example. NS ns2.c.example. 137SECTION ADDITIONAL 138ns1.c.example. A 192.0.2.7 139ns2.c.example. A 192.0.2.8 140ENTRY_END 141 142ENTRY_BEGIN 143MATCH opcode qtype qname 144ADJUST copy_id 145REPLY QR AA NOERROR 146SECTION QUESTION 147mc.c.example. IN MX 148SECTION ANSWER 149mc.c.example. IN MX 50 mx.c.example. 150SECTION AUTHORITY 151c.example. NS ns1.c.example. 152c.example. NS ns2.c.example. 153SECTION ADDITIONAL 154ns1.c.example. A 192.0.2.7 155ns2.c.example. A 192.0.2.8 156ENTRY_END 157RANGE_END 158 159; ns2.c.example. 160RANGE_BEGIN 0 100 161 ADDRESS 192.0.2.8 162ENTRY_BEGIN 163MATCH opcode qtype qname 164ADJUST copy_id 165REPLY QR AA NOERROR 166SECTION QUESTION 167c.example. IN NS 168SECTION ANSWER 169c.example. NS ns1.c.example. 170c.example. NS ns2.c.example. 171SECTION ADDITIONAL 172ns1.c.example. A 192.0.2.7 173ns2.c.example. A 192.0.2.8 174ENTRY_END 175 176ENTRY_BEGIN 177MATCH opcode qtype qname 178ADJUST copy_id 179REPLY QR AA NOERROR 180SECTION QUESTION 181mc.c.example. IN MX 182SECTION ANSWER 183mc.c.example. IN MX 50 mx.c.example. 184SECTION AUTHORITY 185c.example. NS ns1.c.example. 186c.example. NS ns2.c.example. 187SECTION ADDITIONAL 188ns1.c.example. A 192.0.2.7 189ns2.c.example. A 192.0.2.8 190ENTRY_END 191RANGE_END 192 193 194STEP 1 QUERY 195ENTRY_BEGIN 196REPLY RD DO 197SECTION QUESTION 198mc.c.example. IN MX 199ENTRY_END 200 201; recursion happens here. 202STEP 10 CHECK_ANSWER 203ENTRY_BEGIN 204MATCH all 205REPLY QR RD RA DO NOERROR 206SECTION QUESTION 207mc.c.example. IN MX 208SECTION ANSWER 209mc.c.example. IN MX 50 mx.c.example. 210SECTION AUTHORITY 211c.example. NS ns1.c.example. 212c.example. NS ns2.c.example. 213SECTION ADDITIONAL 214ns1.c.example. A 192.0.2.7 215ns2.c.example. A 192.0.2.8 216ENTRY_END 217 218SCENARIO_END 219