xref: /netbsd-src/external/mpl/bind/dist/bin/tests/system/dnssec/ns2/example.db.in (revision 9fd8799cb5ceb66c69f2eb1a6d26a1d587ba1f1e)
1; Copyright (C) Internet Systems Consortium, Inc. ("ISC")
2;
3; This Source Code Form is subject to the terms of the Mozilla Public
4; License, v. 2.0. If a copy of the MPL was not distributed with this
5; file, You can obtain one at http://mozilla.org/MPL/2.0/.
6;
7; See the COPYRIGHT file distributed with this work for additional
8; information regarding copyright ownership.
9
10$TTL 300	; 5 minutes
11@			IN SOA	mname1. . (
12				2000042407 ; serial
13				20         ; refresh (20 seconds)
14				20         ; retry (20 seconds)
15				1814400    ; expire (3 weeks)
16				3600       ; minimum (1 hour)
17				)
18			NS	ns2
19			NS	ns3
20ns2			A	10.53.0.2
21ns3			A	10.53.0.3
22
23a			A	10.0.0.1
24b			A	10.0.0.2
25d			A	10.0.0.4
26
27; Used for testing ANY queries
28foo			TXT	"testing"
29foo			A	10.0.1.0
30
31bad-cname		CNAME   a
32bad-dname		DNAME   @
33
34; Used for testing CNAME queries
35cname1			CNAME	cname1-target
36cname1-target		TXT	"testing cname"
37
38cname2			CNAME	cname2-target
39cname2-target		TXT	"testing cname"
40
41; Used for testing DNAME queries
42dname1			DNAME	dname1-target
43foo.dname1-target	TXT	"testing dname"
44
45dname2			DNAME	dname2-target
46foo.dname2-target	TXT	"testing dname"
47
48; A secure subdomain
49secure			NS	ns3.secure
50ns3.secure		A	10.53.0.3
51
52; An insecure subdomain
53insecure		NS	ns.insecure
54ns.insecure		A	10.53.0.3
55
56; A secure subdomain we're going to inject bogus data into
57bogus			NS	ns.bogus
58ns.bogus		A	10.53.0.3
59
60; A subdomain with a corrupt DS
61badds			NS	ns.badds
62ns.badds		A	10.53.0.3
63
64; A dynamic secure subdomain
65dynamic			NS	dynamic
66dynamic			A	10.53.0.3
67
68; A insecure subdomain
69mustbesecure		NS	ns.mustbesecure
70ns.mustbesecure		A	10.53.0.3
71
72; A subdomain with expired signatures
73expired			NS	ns.expired
74ns.expired		A	10.53.0.3
75
76; A rfc2535 signed zone w/ CNAME
77rfc2535			NS	ns.rfc2535
78ns.rfc2535		A	10.53.0.3
79
80z			A	10.0.0.26
81
82keyless			NS	ns.keyless
83ns.keyless		A	10.53.0.3
84
85nsec3			NS	ns.nsec3
86ns.nsec3		A	10.53.0.3
87
88optout			NS	ns.optout
89ns.optout		A	10.53.0.3
90
91nsec3-unknown		NS	ns.nsec3-unknown
92ns.nsec3-unknown	A	10.53.0.3
93
94optout-unknown		NS	ns.optout-unknown
95ns.optout-unknown	A	10.53.0.3
96
97dnskey-unknown		NS	ns.dnskey-unknown
98ns.dnskey-unknown	A	10.53.0.3
99
100dnskey-unsupported	NS	ns.dnskey-unsupported
101ns.dnskey-unsupported	A	10.53.0.3
102
103dnskey-nsec3-unknown	NS	ns.dnskey-nsec3-unknown
104ns.dnskey-nsec3-unknown	A	10.53.0.3
105
106multiple		NS	ns.multiple
107ns.multiple		A	10.53.0.3
108
109*.wild			A	10.0.0.27
110
111rsasha256		NS	ns.rsasha256
112ns.rsasha256		A	10.53.0.3
113
114rsasha512		NS	ns.rsasha512
115ns.rsasha512		A	10.53.0.3
116
117kskonly			NS	ns.kskonly
118ns.kskonly		A	10.53.0.3
119
120update-nsec3		NS	ns.update-nsec3
121ns.update-nsec3		A	10.53.0.3
122
123auto-nsec		NS	ns.auto-nsec
124ns.auto-nsec		A	10.53.0.3
125
126auto-nsec3		NS	ns.auto-nsec3
127ns.auto-nsec3		A	10.53.0.3
128
129
130below-cname		CNAME	some.where.else.
131
132insecure.below-cname	NS	ns.insecure.below-cname
133ns.insecure.below-cname	A	10.53.0.3
134
135secure.below-cname	NS	ns.secure.below-cname
136ns.secure.below-cname	A	10.53.0.3
137
138ttlpatch		NS	ns.ttlpatch
139ns.ttlpatch		A	10.53.0.3
140
141split-dnssec		NS	ns.split-dnssec
142ns.split-dnssec		A	10.53.0.3
143
144split-smart		NS	ns.split-smart
145ns.split-smart		A	10.53.0.3
146
147upper			NS	ns.upper
148ns.upper		A	10.53.0.3
149
150LOWER			NS	NS.LOWER
151NS.LOWER		A	10.53.0.3
152
153expiring                 NS      ns.expiring
154ns.expiring              A       10.53.0.3
155
156future			NS	ns.future
157ns.future		A	10.53.0.3
158
159managed-future		NS	ns.managed-future
160ns.managed-future	A	10.53.0.3
161
162revkey			NS	ns.revkey
163ns.revkey		A	10.53.0.3
164
165dname-at-apex-nsec3	NS	ns3
166