1; config options 2server: 3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )" 4 val-override-date: "20120420235959" 5 target-fetch-policy: "0 0 0 0 0" 6 7stub-zone: 8 name: "." 9 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 10CONFIG_END 11 12SCENARIO_BEGIN Test validator NSEC3 B.3 referral optout with negative cache. 13 14; K.ROOT-SERVERS.NET. 15RANGE_BEGIN 0 100 16 ADDRESS 193.0.14.129 17ENTRY_BEGIN 18MATCH opcode qtype qname 19ADJUST copy_id 20REPLY QR NOERROR 21SECTION QUESTION 22. IN NS 23SECTION ANSWER 24. IN NS K.ROOT-SERVERS.NET. 25SECTION ADDITIONAL 26K.ROOT-SERVERS.NET. IN A 193.0.14.129 27ENTRY_END 28 29ENTRY_BEGIN 30MATCH opcode 31ADJUST copy_id copy_query 32REPLY QR NOERROR 33SECTION QUESTION 34. IN A 35SECTION AUTHORITY 36example. IN NS ns1.example. 37; leave out to make unbound take ns1 38;example. IN NS ns2.example. 39SECTION ADDITIONAL 40ns1.example. IN A 192.0.2.1 41; leave out to make unbound take ns1 42;ns2.example. IN A 192.0.2.2 43ENTRY_END 44RANGE_END 45 46; ns1.example. 47RANGE_BEGIN 0 100 48 ADDRESS 192.0.2.1 49ENTRY_BEGIN 50MATCH opcode qtype qname 51ADJUST copy_id copy_query 52REPLY QR REFUSED 53SECTION QUESTION 54example. IN NS 55SECTION ANSWER 56ENTRY_END 57 58; response to DNSKEY priming query 59 60ENTRY_BEGIN 61MATCH opcode qtype qname 62ADJUST copy_id 63REPLY QR NOERROR 64SECTION QUESTION 65example. IN DNSKEY 66SECTION ANSWER 67example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= ) 68example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= ) 69example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== ) 70ENTRY_END 71 72ENTRY_BEGIN 73MATCH opcode qtype qname 74ADJUST copy_id 75REPLY QR AA DO NOERROR 76SECTION QUESTION 77mc.c.example. IN MX 78SECTION AUTHORITY 79c.example. NS ns1.c.example. 80c.example. NS ns2.c.example. 81 82;; NSEC3 RR that covers the "next closer" name (c.example) 83;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck 8435mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 8535mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 86 87;; NSEC3 RR that matches the closest encloser (example) 88;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom 890p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 900p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 91 92SECTION ADDITIONAL 93ns1.c.example. A 192.0.2.7 94ns2.c.example. A 192.0.2.8 95 96ENTRY_END 97 98 99; DS must be gotten from neg cache 100; ENTRY_BEGIN 101; MATCH opcode qtype qname 102; ADJUST copy_id 103; REPLY QR AA DO NOERROR 104; SECTION QUESTION 105; c.example. IN DS 106; SECTION AUTHORITY 107; ;; NSEC3 RR that covers the "next closer" name (c.example) 108; ;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck 109; 35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 110; 35mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 111; 112; ;; NSEC3 RR that matches the closest encloser (example) 113; ;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom 114; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 115; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 116; ENTRY_END 117 118RANGE_END 119 120; ns1.c.example. 121RANGE_BEGIN 0 100 122 ADDRESS 192.0.2.7 123ENTRY_BEGIN 124MATCH opcode qtype qname 125ADJUST copy_id 126REPLY QR AA NOERROR 127SECTION QUESTION 128c.example. IN NS 129SECTION ANSWER 130c.example. NS ns1.c.example. 131c.example. NS ns2.c.example. 132SECTION ADDITIONAL 133ns1.c.example. A 192.0.2.7 134ns2.c.example. A 192.0.2.8 135ENTRY_END 136 137ENTRY_BEGIN 138MATCH opcode qtype qname 139ADJUST copy_id 140REPLY QR AA NOERROR 141SECTION QUESTION 142mc.c.example. IN MX 143SECTION ANSWER 144mc.c.example. IN MX 50 mx.c.example. 145SECTION AUTHORITY 146c.example. NS ns1.c.example. 147c.example. NS ns2.c.example. 148SECTION ADDITIONAL 149ns1.c.example. A 192.0.2.7 150ns2.c.example. A 192.0.2.8 151ENTRY_END 152RANGE_END 153 154; ns2.c.example. 155RANGE_BEGIN 0 100 156 ADDRESS 192.0.2.8 157ENTRY_BEGIN 158MATCH opcode qtype qname 159ADJUST copy_id 160REPLY QR AA NOERROR 161SECTION QUESTION 162c.example. IN NS 163SECTION ANSWER 164c.example. NS ns1.c.example. 165c.example. NS ns2.c.example. 166SECTION ADDITIONAL 167ns1.c.example. A 192.0.2.7 168ns2.c.example. A 192.0.2.8 169ENTRY_END 170 171ENTRY_BEGIN 172MATCH opcode qtype qname 173ADJUST copy_id 174REPLY QR AA NOERROR 175SECTION QUESTION 176mc.c.example. IN MX 177SECTION ANSWER 178mc.c.example. IN MX 50 mx.c.example. 179SECTION AUTHORITY 180c.example. NS ns1.c.example. 181c.example. NS ns2.c.example. 182SECTION ADDITIONAL 183ns1.c.example. A 192.0.2.7 184ns2.c.example. A 192.0.2.8 185ENTRY_END 186RANGE_END 187 188 189STEP 1 QUERY 190ENTRY_BEGIN 191REPLY RD DO 192SECTION QUESTION 193mc.c.example. IN MX 194ENTRY_END 195 196; recursion happens here. 197STEP 10 CHECK_ANSWER 198ENTRY_BEGIN 199MATCH all 200REPLY QR RD RA DO NOERROR 201SECTION QUESTION 202mc.c.example. IN MX 203SECTION ANSWER 204mc.c.example. IN MX 50 mx.c.example. 205SECTION AUTHORITY 206c.example. NS ns1.c.example. 207c.example. NS ns2.c.example. 208SECTION ADDITIONAL 209ns1.c.example. A 192.0.2.7 210ns2.c.example. A 192.0.2.8 211ENTRY_END 212 213SCENARIO_END 214