]> git.saurik.com Git - apple/network_cmds.git/blame - unbound/testdata/black_ds.rpl
network_cmds-596.100.2.tar.gz
[apple/network_cmds.git] / unbound / testdata / black_ds.rpl
CommitLineData
89c4ed63
A
1; config options
2; The island of trust is at example.com
3server:
4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
5 val-override-date: "20070916134226"
6 target-fetch-policy: "0 0 0 0 0"
7
8stub-zone:
9 name: "."
10 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
11CONFIG_END
12
13SCENARIO_BEGIN Test validator with blacklist for DS response
14
15; K.ROOT-SERVERS.NET.
16RANGE_BEGIN 0 100
17 ADDRESS 193.0.14.129
18ENTRY_BEGIN
19MATCH opcode qtype qname
20ADJUST copy_id
21REPLY QR NOERROR
22SECTION QUESTION
23. IN NS
24SECTION ANSWER
25. IN NS K.ROOT-SERVERS.NET.
26SECTION ADDITIONAL
27K.ROOT-SERVERS.NET. IN A 193.0.14.129
28ENTRY_END
29
30ENTRY_BEGIN
31MATCH opcode subdomain
32ADJUST copy_id copy_query
33REPLY QR NOERROR
34SECTION QUESTION
35com. IN A
36SECTION AUTHORITY
37com. IN NS a.gtld-servers.net.
38SECTION ADDITIONAL
39a.gtld-servers.net. IN A 192.5.6.30
40ENTRY_END
41RANGE_END
42
43; a.gtld-servers.net.
44RANGE_BEGIN 0 100
45 ADDRESS 192.5.6.30
46ENTRY_BEGIN
47MATCH opcode qtype qname
48ADJUST copy_id
49REPLY QR NOERROR
50SECTION QUESTION
51com. IN NS
52SECTION ANSWER
53com. IN NS a.gtld-servers.net.
54SECTION ADDITIONAL
55a.gtld-servers.net. IN A 192.5.6.30
56ENTRY_END
57
58ENTRY_BEGIN
59MATCH opcode qtype qname
60ADJUST copy_id
61REPLY QR NOERROR
62SECTION QUESTION
63ns.blabla.com. IN A
64SECTION ANSWER
65ns.blabla.com. IN A 1.2.3.5
66ENTRY_END
67
68ENTRY_BEGIN
69MATCH opcode qtype qname
70ADJUST copy_id
71REPLY QR NOERROR
72SECTION QUESTION
73ns.blabla.com. IN AAAA
74SECTION AUTHORITY
75com. IN SOA com. com. 2009100100 28800 7200 604800 3600
76ENTRY_END
77
78ENTRY_BEGIN
79MATCH opcode subdomain
80ADJUST copy_id copy_query
81REPLY QR NOERROR
82SECTION QUESTION
83example.com. IN NS
84SECTION AUTHORITY
85example.com. IN NS ns.example.com.
86example.com. IN NS ns.blabla.com.
87SECTION ADDITIONAL
88ns.example.com. IN A 1.2.3.4
89; no ns.blabla.com, try that later
90ENTRY_END
91RANGE_END
92
93; ns.example.com.
94RANGE_BEGIN 0 100
95 ADDRESS 1.2.3.4
96ENTRY_BEGIN
97MATCH opcode qtype qname
98ADJUST copy_id
99REPLY QR NOERROR
100SECTION QUESTION
101example.com. IN NS
102SECTION ANSWER
103example.com. IN NS ns.example.com.
104example.com. IN NS ns.blabla.com.
105example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. AKJ3xUBdSrCiOFkYajsy93d+h06rewpbmBHItTkL8R/26rw57b1gCIg= ;{id = 2854}
106SECTION ADDITIONAL
107ns.example.com. IN A 1.2.3.4
108ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854}
109ENTRY_END
110
111ENTRY_BEGIN
112MATCH opcode qtype qname
113ADJUST copy_id
114REPLY QR NOERROR
115SECTION QUESTION
116ns.example.com. IN A
117SECTION ANSWER
118ns.example.com. IN A 1.2.3.4
119ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854}
120SECTION ADDITIONAL
121ENTRY_END
122
123ENTRY_BEGIN
124MATCH opcode qtype qname
125ADJUST copy_id
126REPLY QR NOERROR
127SECTION QUESTION
128ns.example.com. IN AAAA
129SECTION ANSWER
130SECTION ADDITIONAL
131ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A
132ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. ACFVLLBtuSX/1z3461tbOwDz9zTHe5S9DbVtwnSO1f2x06fYbMpzSDE= ;{id = 2854}
133ENTRY_END
134
135; response to DNSKEY priming query
136ENTRY_BEGIN
137MATCH opcode qtype qname
138ADJUST copy_id
139REPLY QR NOERROR
140SECTION QUESTION
141example.com. IN DNSKEY
142SECTION ANSWER
143example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
144; make priming query succeed
145example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
146;example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20030926134150 20030829134150 2854 example.com. AG21xE8CFQzTq6XtHErg28b9EAmqPsoYCUcFPEAoAjFybM6AY4/bMOo= ;{id = 2854}
147SECTION AUTHORITY
148;example.com. IN NS ns.example.com.
149;example.com. IN NS ns.blabla.com.
150;example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACiWu7zjBHqgEX3iUoOF7rfpOmIAHj1npKQ+XDIaNlmdkfJxoCwFl04= ;{id = 2854}
151SECTION ADDITIONAL
152;ns.example.com. IN A 1.2.3.4
153;ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. ACmAsKTf7hqDaYK8CQ7FL1cGYPW+blTCnzZGkExFtEUAGrHeze87o+A= ;{id = 2854}
154ENTRY_END
155
156ENTRY_BEGIN
157MATCH opcode qtype qname
158ADJUST copy_id
159REPLY QR NOERROR
160SECTION QUESTION
161www.example.com. IN A
162SECTION ANSWER
163www.example.com. IN A 10.20.30.40
164www.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGj9kE8oW3OhOLhkmJ3HBaNIOpvGf3S8zSd5gWmhpxAMc5hh6cxZfpQ= ;{id = 2854}
165SECTION AUTHORITY
166example.com. IN NS ns.example.com.
167example.com. IN NS ns.blabla.com.
168example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACHETweBNPgbmRoNRdKvxuw4X9qNUUTEpSuwV+HhuiBE83gbB98asAc= ;{id = 2854}
169SECTION ADDITIONAL
170ns.example.com. IN A 1.2.3.4
171ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGvu9A/nGsbatxJCmnObioIhKg2Tm0Apr0eo+DO1kIDrAHco/bt/EdY= ;{id = 2854}
172ENTRY_END
173
174; DS request
175ENTRY_BEGIN
176MATCH opcode qtype qname
177ADJUST copy_id
178REPLY QR AA NOERROR
179SECTION QUESTION
180sub.example.com. IN DS
181SECTION ANSWER
182sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
183sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854}
184ENTRY_END
185
186ENTRY_BEGIN
187MATCH opcode subdomain
188ADJUST copy_id copy_query
189REPLY QR AA NOERROR
190SECTION QUESTION
191sub.example.com. IN NS
192SECTION AUTHORITY
193sub.example.com. IN NS ns.sub.example.com.
194sub.example.com. IN NS ns.foo.com.
195sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
196sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854}
197SECTION ADDITIONAL
198ns.sub.example.com. IN A 1.2.4.6
199ENTRY_END
200
201RANGE_END
202
203; ns.blabla.com.
204RANGE_BEGIN 0 100
205 ADDRESS 1.2.3.5
206ENTRY_BEGIN
207MATCH opcode qtype qname
208ADJUST copy_id
209REPLY QR NOERROR
210SECTION QUESTION
211example.com. IN NS
212SECTION ANSWER
213example.com. IN NS ns.example.com.
214example.com. IN NS ns.blabla.com.
215example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
216SECTION ADDITIONAL
217ns.example.com. IN A 1.2.3.4
218ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
219ENTRY_END
220
221ENTRY_BEGIN
222MATCH opcode qtype qname
223ADJUST copy_id
224REPLY QR NOERROR
225SECTION QUESTION
226ns.example.com. IN A
227SECTION ANSWER
228ns.example.com. IN A 1.2.3.4
229ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
230SECTION ADDITIONAL
231ENTRY_END
232
233ENTRY_BEGIN
234MATCH opcode qtype qname
235ADJUST copy_id
236REPLY QR NOERROR
237SECTION QUESTION
238ns.example.com. IN AAAA
239SECTION ANSWER
240SECTION ADDITIONAL
241ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A
242ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. ABhDNtJramb2a4R1SK5gb/CTYJybQts6mZ++z3kLiwsrUSZInA4ikeQ= ;{id = 2854}
243ENTRY_END
244
245; response to DNSKEY priming query
246ENTRY_BEGIN
247MATCH opcode qtype qname
248ADJUST copy_id
249REPLY QR NOERROR
250SECTION QUESTION
251example.com. IN DNSKEY
252SECTION ANSWER
253example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
254example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
255SECTION AUTHORITY
256example.com. IN NS ns.example.com.
257example.com. IN NS ns.blabla.com.
258example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
259SECTION ADDITIONAL
260ns.example.com. IN A 1.2.3.4
261ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
262ENTRY_END
263
264ENTRY_BEGIN
265MATCH opcode qtype qname
266ADJUST copy_id
267REPLY QR NOERROR
268SECTION QUESTION
269www.example.com. IN A
270SECTION ANSWER
271www.example.com. IN A 10.20.30.40
272ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854}
273SECTION AUTHORITY
274example.com. IN NS ns.example.com.
275example.com. IN NS ns.blabla.com.
276example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
277SECTION ADDITIONAL
278ns.example.com. IN A 1.2.3.4
279www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854}
280ENTRY_END
281
282; DS request
283ENTRY_BEGIN
284MATCH opcode qtype qname
285ADJUST copy_id
286REPLY QR AA NOERROR
287SECTION QUESTION
288sub.example.com. IN DS
289SECTION ANSWER
290sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
291sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
292ENTRY_END
293
294ENTRY_BEGIN
295MATCH opcode subdomain
296ADJUST copy_id copy_query
297REPLY QR AA NOERROR
298SECTION QUESTION
299sub.example.com. IN NS
300SECTION AUTHORITY
301sub.example.com. IN NS ns.sub.example.com.
302sub.example.com. IN NS ns.foo.com.
303sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
304sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
305SECTION ADDITIONAL
306ns.sub.example.com. IN A 1.2.4.6
307ENTRY_END
308
309RANGE_END
310
311; ns.sub.example.com.
312RANGE_BEGIN 0 100
313 ADDRESS 1.2.4.6
314ENTRY_BEGIN
315MATCH opcode qtype qname
316ADJUST copy_id
317REPLY QR AA NOERROR
318SECTION QUESTION
319sub.example.com. IN DNSKEY
320SECTION ANSWER
321sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
322sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899}
323ENTRY_END
324
325ENTRY_BEGIN
326MATCH opcode qtype qname
327ADJUST copy_id
328REPLY QR AA NOERROR
329SECTION QUESTION
330sub.example.com. IN NS
331SECTION ANSWER
332sub.example.com. IN NS ns.sub.example.com.
333sub.example.com. IN NS ns.foo.com.
334sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899}
335SECTION ADDITIONAL
336ns.sub.example.com. IN A 1.2.4.6
337ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
338ENTRY_END
339
340ENTRY_BEGIN
341MATCH opcode qtype qname
342ADJUST copy_id
343REPLY QR AA NOERROR
344SECTION QUESTION
345ns.sub.example.com. IN A
346SECTION ANSWER
347ns.sub.example.com. IN A 1.2.4.6
348ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
349ENTRY_END
350
351ENTRY_BEGIN
352MATCH opcode qtype qname
353ADJUST copy_id
354REPLY QR AA NOERROR
355SECTION QUESTION
356ns.sub.example.com. IN AAAA
357SECTION AUTHORITY
358ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A
359ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899}
360sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5
361sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899}
362ENTRY_END
363
364ENTRY_BEGIN
365MATCH opcode qtype qname
366ADJUST copy_id
367REPLY QR AA NOERROR
368SECTION QUESTION
369www.sub.example.com. IN A
370SECTION ANSWER
371www.sub.example.com. IN A 10.20.30.40
372www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899}
373ENTRY_END
374
375RANGE_END
376
377STEP 1 QUERY
378ENTRY_BEGIN
379REPLY RD DO
380SECTION QUESTION
381www.sub.example.com. IN A
382ENTRY_END
383
384; recursion happens here.
385STEP 10 CHECK_ANSWER
386ENTRY_BEGIN
387MATCH all
388REPLY QR RD RA AD DO NOERROR
389SECTION QUESTION
390www.sub.example.com. IN A
391SECTION ANSWER
392www.sub.example.com. IN A 10.20.30.40
393www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899}
394ENTRY_END
395
396; remove pending ns.blabla.com AAAA msg
397STEP 30 QUERY
398ENTRY_BEGIN
399REPLY RD DO CD
400SECTION QUESTION
401ns.blabla.com. IN AAAA
402ENTRY_END
403
404; recursion happens here.
405STEP 40 CHECK_ANSWER
406ENTRY_BEGIN
407MATCH all
408REPLY QR RD CD RA DO NOERROR
409SECTION QUESTION
410ns.blabla.com. IN AAAA
411SECTION ANSWER
412SECTION AUTHORITY
413com. IN SOA com. com. 2009100100 28800 7200 604800 3600
414ENTRY_END
415
416SCENARIO_END