1; config options 2server: 3 trust-anchor: "example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= )" 4 val-override-date: "20120420235959" 5 target-fetch-policy: "0 0 0 0 0" 6 fake-sha1: yes 7 trust-anchor-signaling: no 8 9stub-zone: 10 name: "." 11 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 12CONFIG_END 13 14SCENARIO_BEGIN Test validator NSEC3 B.3 referral optout with negative cache. 15 16; K.ROOT-SERVERS.NET. 17RANGE_BEGIN 0 100 18 ADDRESS 193.0.14.129 19ENTRY_BEGIN 20MATCH opcode qtype qname 21ADJUST copy_id 22REPLY QR NOERROR 23SECTION QUESTION 24. IN NS 25SECTION ANSWER 26. IN NS K.ROOT-SERVERS.NET. 27SECTION ADDITIONAL 28K.ROOT-SERVERS.NET. IN A 193.0.14.129 29ENTRY_END 30 31ENTRY_BEGIN 32MATCH opcode 33ADJUST copy_id copy_query 34REPLY QR NOERROR 35SECTION QUESTION 36. IN A 37SECTION AUTHORITY 38example. IN NS ns1.example. 39; leave out to make unbound take ns1 40;example. IN NS ns2.example. 41SECTION ADDITIONAL 42ns1.example. IN A 192.0.2.1 43; leave out to make unbound take ns1 44;ns2.example. IN A 192.0.2.2 45ENTRY_END 46RANGE_END 47 48; ns1.example. 49RANGE_BEGIN 0 100 50 ADDRESS 192.0.2.1 51ENTRY_BEGIN 52MATCH opcode qtype qname 53ADJUST copy_id copy_query 54REPLY QR REFUSED 55SECTION QUESTION 56example. IN NS 57SECTION ANSWER 58ENTRY_END 59 60; response to DNSKEY priming query 61 62ENTRY_BEGIN 63MATCH opcode qtype qname 64ADJUST copy_id 65REPLY QR NOERROR 66SECTION QUESTION 67example. IN DNSKEY 68SECTION ANSWER 69example. DNSKEY 256 3 7 AwEAAaetidLzsKWUt4swWR8yu0wPHPiUi8LU ( sAD0QPWU+wzt89epO6tHzkMBVDkC7qphQO2h TY4hHn9npWFRw5BYubE= ) 70example. DNSKEY 257 3 7 AwEAAcUlFV1vhmqx6NSOUOq2R/dsR7Xm3upJ ( j7IommWSpJABVfW8Q0rOvXdM6kzt+TAu92L9 AbsUdblMFin8CVF3n4s= ) 71example. RRSIG DNSKEY 7 1 3600 20150420235959 ( 20051021000000 12708 example. AuU4juU9RaxescSmStrQks3Gh9FblGBlVU31 uzMZ/U/FpsUb8aC6QZS+sTsJXnLnz7flGOsm MGQZf3bH+QsCtg== ) 72ENTRY_END 73 74ENTRY_BEGIN 75MATCH opcode qtype qname 76ADJUST copy_id 77REPLY QR AA DO NOERROR 78SECTION QUESTION 79mc.c.example. IN MX 80SECTION AUTHORITY 81c.example. NS ns1.c.example. 82c.example. NS ns2.c.example. 83 84;; NSEC3 RR that covers the "next closer" name (c.example) 85;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck 8635mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 8735mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 88 89;; NSEC3 RR that matches the closest encloser (example) 90;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom 910p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 920p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 93 94SECTION ADDITIONAL 95ns1.c.example. A 192.0.2.7 96ns2.c.example. A 192.0.2.8 97 98ENTRY_END 99 100 101; DS must be gotten from neg cache 102; ENTRY_BEGIN 103; MATCH opcode qtype qname 104; ADJUST copy_id 105; REPLY QR AA DO NOERROR 106; SECTION QUESTION 107; c.example. IN DS 108; SECTION AUTHORITY 109; ;; NSEC3 RR that covers the "next closer" name (c.example) 110; ;; H(c.example) = 4g6p9u5gvfshp30pqecj98b3maqbn1ck 111; 35mthgpgcu1qg68fab165klnsnk3dpvl.example. NSEC3 1 1 12 aabbccdd ( b4um86eghhds6nea196smvmlo4ors995 NS DS RRSIG ) 112; 35mthgpgcu1qg68fab165klnsnk3dpvl.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. g6jPUUpduAJKRljUsN8gB4UagAX0NxY9shwQ Aynzo8EUWH+z6hEIBlUTPGj15eZll6VhQqgZ XtAIR3chwgW+SA== ) 113; 114; ;; NSEC3 RR that matches the closest encloser (example) 115; ;; H(example) = 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom 116; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. NSEC3 1 1 12 aabbccdd ( 2t7b4g4vsa5smi47k61mv5bv1a22bojr MX DNSKEY NS SOA NSEC3PARAM RRSIG ) 117; 0p9mhaveqvm6t7vbl5lop2u3t2rp3tom.example. RRSIG NSEC3 7 2 3600 20150420235959 20051021000000 ( 40430 example. OSgWSm26B+cS+dDL8b5QrWr/dEWhtCsKlwKL IBHYH6blRxK9rC0bMJPwQ4mLIuw85H2EY762 BOCXJZMnpuwhpA== ) 118; ENTRY_END 119 120RANGE_END 121 122; ns1.c.example. 123RANGE_BEGIN 0 100 124 ADDRESS 192.0.2.7 125ENTRY_BEGIN 126MATCH opcode qtype qname 127ADJUST copy_id 128REPLY QR AA NOERROR 129SECTION QUESTION 130c.example. IN NS 131SECTION ANSWER 132c.example. NS ns1.c.example. 133c.example. NS ns2.c.example. 134SECTION ADDITIONAL 135ns1.c.example. A 192.0.2.7 136ns2.c.example. A 192.0.2.8 137ENTRY_END 138 139ENTRY_BEGIN 140MATCH opcode qtype qname 141ADJUST copy_id 142REPLY QR AA NOERROR 143SECTION QUESTION 144mc.c.example. IN MX 145SECTION ANSWER 146mc.c.example. IN MX 50 mx.c.example. 147SECTION AUTHORITY 148c.example. NS ns1.c.example. 149c.example. NS ns2.c.example. 150SECTION ADDITIONAL 151ns1.c.example. A 192.0.2.7 152ns2.c.example. A 192.0.2.8 153ENTRY_END 154RANGE_END 155 156; ns2.c.example. 157RANGE_BEGIN 0 100 158 ADDRESS 192.0.2.8 159ENTRY_BEGIN 160MATCH opcode qtype qname 161ADJUST copy_id 162REPLY QR AA NOERROR 163SECTION QUESTION 164c.example. IN NS 165SECTION ANSWER 166c.example. NS ns1.c.example. 167c.example. NS ns2.c.example. 168SECTION ADDITIONAL 169ns1.c.example. A 192.0.2.7 170ns2.c.example. A 192.0.2.8 171ENTRY_END 172 173ENTRY_BEGIN 174MATCH opcode qtype qname 175ADJUST copy_id 176REPLY QR AA NOERROR 177SECTION QUESTION 178mc.c.example. IN MX 179SECTION ANSWER 180mc.c.example. IN MX 50 mx.c.example. 181SECTION AUTHORITY 182c.example. NS ns1.c.example. 183c.example. NS ns2.c.example. 184SECTION ADDITIONAL 185ns1.c.example. A 192.0.2.7 186ns2.c.example. A 192.0.2.8 187ENTRY_END 188RANGE_END 189 190 191STEP 1 QUERY 192ENTRY_BEGIN 193REPLY RD DO 194SECTION QUESTION 195mc.c.example. IN MX 196ENTRY_END 197 198; recursion happens here. 199STEP 10 CHECK_ANSWER 200ENTRY_BEGIN 201MATCH all 202REPLY QR RD RA DO NOERROR 203SECTION QUESTION 204mc.c.example. IN MX 205SECTION ANSWER 206mc.c.example. IN MX 50 mx.c.example. 207SECTION AUTHORITY 208c.example. NS ns1.c.example. 209c.example. NS ns2.c.example. 210SECTION ADDITIONAL 211ns1.c.example. A 192.0.2.7 212ns2.c.example. A 192.0.2.8 213ENTRY_END 214 215SCENARIO_END 216