[apple/network_cmds.git] / unbound / testdata / iter_ranoaa_lame.rpl

; config options
server:
	target-fetch-policy: "0 0 0 0 0"

stub-zone:
	name: "."
	stub-addr: 193.0.14.129 	# K.ROOT-SERVERS.NET.
CONFIG_END

SCENARIO_BEGIN Test detection of RA but no AA lameness
; in this scenario mistakenly, a recursive server is deployed, instead
; of an authoritative server. It gives answers from cache.
; However, unbound is doing recursion on behalf of its client, and does
; not trust the server to do so.

; K.ROOT-SERVERS.NET.
RANGE_BEGIN 0 100
	ADDRESS 193.0.14.129 
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
. IN NS
SECTION ANSWER
. IN NS	K.ROOT-SERVERS.NET.
SECTION ADDITIONAL
K.ROOT-SERVERS.NET.	IN	A	193.0.14.129
ENTRY_END

ENTRY_BEGIN
MATCH opcode subdomain
ADJUST copy_id copy_query
REPLY QR NOERROR
SECTION QUESTION
com. IN A
SECTION AUTHORITY
com.	IN NS	a.gtld-servers.net.
SECTION ADDITIONAL
a.gtld-servers.net.	IN 	A	192.5.6.30
ENTRY_END

ENTRY_BEGIN
MATCH opcode subdomain
ADJUST copy_id copy_query
REPLY QR NOERROR
SECTION QUESTION
net. IN A
SECTION AUTHORITY
net.	IN NS	e.gtld-servers.net.
SECTION ADDITIONAL
e.gtld-servers.net.	IN 	A	192.12.94.30
ENTRY_END
RANGE_END

; a.gtld-servers.net.
RANGE_BEGIN 0 100
	ADDRESS 192.5.6.30
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
com. IN NS
SECTION ANSWER
com.	IN NS	a.gtld-servers.net.
SECTION ADDITIONAL
a.gtld-servers.net.	IN 	A	192.5.6.30
ENTRY_END

ENTRY_BEGIN
MATCH opcode subdomain
ADJUST copy_id copy_query
REPLY QR NOERROR
SECTION QUESTION
example.com. IN A
SECTION AUTHORITY
example.com.	IN NS	ns.example.com.
example.com.	IN NS	ns.example.net.
SECTION ADDITIONAL
; this entry; glue will make unbound take this reference first.
; it is however, the lame server.
ns.example.com. IN A	1.2.3.55
ENTRY_END
RANGE_END

; e.gtld-servers.net.
RANGE_BEGIN 0 100
	ADDRESS 192.12.94.30
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
net. IN NS
SECTION ANSWER
net.	IN NS	e.gtld-servers.net.
SECTION ADDITIONAL
e.gtld-servers.net.	IN 	A	192.12.94.30
ENTRY_END

ENTRY_BEGIN
MATCH opcode subdomain
ADJUST copy_id copy_query
REPLY QR NOERROR
SECTION QUESTION
example.net. IN A
SECTION AUTHORITY
example.net.	IN NS	ns.example.net.
SECTION ADDITIONAL
ns.example.net.		IN 	A	1.2.3.44
ENTRY_END
RANGE_END

; ns.example.net.
RANGE_BEGIN 0 100
	ADDRESS 1.2.3.44
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
example.net. IN NS
SECTION ANSWER
example.net.	IN NS	ns.example.net.
SECTION ADDITIONAL
ns.example.net.		IN 	A	1.2.3.44
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
example.com. IN NS
SECTION ANSWER
example.com.	IN NS	ns.example.com.
example.com.	IN NS	ns.example.net.
SECTION ADDITIONAL
ns.example.net 	IN A 	1.2.3.44
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
ns.example.net. IN A
SECTION ANSWER
ns.example.net. IN A	1.2.3.44
SECTION AUTHORITY
example.net.	IN NS	ns.example.net.
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
ns.example.net. IN AAAA
SECTION AUTHORITY
example.net.	IN NS	ns.example.net.
SECTION ADDITIONAL
www.example.net. IN A	1.2.3.44
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
www.example.com. IN A
SECTION ANSWER
www.example.com. IN A	10.20.30.40
SECTION AUTHORITY
example.com.	IN NS	ns.example.com.
example.com.	IN NS	ns.example.net.
SECTION ADDITIONAL
ns.example.net 	IN A 	1.2.3.44
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
ns.example.com. IN AAAA
SECTION ANSWER
ENTRY_END

RANGE_END

; ns.example.com.
RANGE_BEGIN 0 100
	ADDRESS 1.2.3.55
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR AA NOERROR
SECTION QUESTION
example.com. IN NS
SECTION ANSWER
example.com.	IN NS	ns.example.com.
example.com.	IN NS	ns.example.net.
SECTION ADDITIONAL
ns.example.com. IN A	1.2.3.55
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
ns.example.com. IN A
SECTION ANSWER
ns.example.com. IN A	1.2.3.55
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
ns.example.com. IN AAAA
SECTION ANSWER
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR NOERROR
SECTION QUESTION
ns.example.net. IN AAAA
ENTRY_END

; the lame response.
ENTRY_BEGIN
MATCH opcode qtype qname
ADJUST copy_id
REPLY QR RA NOERROR
SECTION QUESTION
www.example.com. IN A
SECTION ANSWER
; the wrong answer.
www.example.com. IN A	10.20.30.50
SECTION AUTHORITY
example.com.	IN NS	ns.example.com.
example.com.	IN NS	ns.example.net.
SECTION ADDITIONAL
ns.example.com. IN A 	1.2.3.55
ENTRY_END
RANGE_END

STEP 1 QUERY
ENTRY_BEGIN
REPLY RD
SECTION QUESTION
www.example.com. IN A
ENTRY_END

; recursion happens here.
STEP 20 CHECK_ANSWER
ENTRY_BEGIN
MATCH all
REPLY QR RD RA NOERROR
SECTION QUESTION
www.example.com. IN A
SECTION ANSWER
www.example.com. IN A	10.20.30.40
SECTION AUTHORITY
example.com.	IN NS	ns.example.com.
example.com.	IN NS	ns.example.net.
; scrubbed off
;SECTION ADDITIONAL
;ns.example.net 	IN A 	1.2.3.44
ENTRY_END

; query still pending
STEP 30 QUERY
ENTRY_BEGIN
REPLY RD
SECTION QUESTION
ns.example.net. IN AAAA
ENTRY_END

; query still pending
STEP 40 CHECK_ANSWER
ENTRY_BEGIN
REPLY RD RA
SECTION QUESTION
ENTRY_END

SCENARIO_END
Commit	Line	Data
89c4ed63 A	1	; config options
	2	server:
	3	target-fetch-policy: "0 0 0 0 0"
	4
	5	stub-zone:
	6	name: "."
	7	stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET.
	8	CONFIG_END
	9
	10	SCENARIO_BEGIN Test detection of RA but no AA lameness
	11	; in this scenario mistakenly, a recursive server is deployed, instead
	12	; of an authoritative server. It gives answers from cache.
	13	; However, unbound is doing recursion on behalf of its client, and does
	14	; not trust the server to do so.
	15
	16	; K.ROOT-SERVERS.NET.
	17	RANGE_BEGIN 0 100
	18	ADDRESS 193.0.14.129
	19	ENTRY_BEGIN
	20	MATCH opcode qtype qname
	21	ADJUST copy_id
	22	REPLY QR NOERROR
	23	SECTION QUESTION
	24	. IN NS
	25	SECTION ANSWER
	26	. IN NS K.ROOT-SERVERS.NET.
	27	SECTION ADDITIONAL
	28	K.ROOT-SERVERS.NET. IN A 193.0.14.129
	29	ENTRY_END
	30
	31	ENTRY_BEGIN
	32	MATCH opcode subdomain
	33	ADJUST copy_id copy_query
	34	REPLY QR NOERROR
	35	SECTION QUESTION
	36	com. IN A
	37	SECTION AUTHORITY
	38	com. IN NS a.gtld-servers.net.
	39	SECTION ADDITIONAL
	40	a.gtld-servers.net. IN A 192.5.6.30
	41	ENTRY_END
	42
	43	ENTRY_BEGIN
	44	MATCH opcode subdomain
	45	ADJUST copy_id copy_query
	46	REPLY QR NOERROR
	47	SECTION QUESTION
	48	net. IN A
	49	SECTION AUTHORITY
	50	net. IN NS e.gtld-servers.net.
	51	SECTION ADDITIONAL
	52	e.gtld-servers.net. IN A 192.12.94.30
	53	ENTRY_END
	54	RANGE_END
	55
	56	; a.gtld-servers.net.
	57	RANGE_BEGIN 0 100
	58	ADDRESS 192.5.6.30
	59	ENTRY_BEGIN
	60	MATCH opcode qtype qname
	61	ADJUST copy_id
	62	REPLY QR NOERROR
	63	SECTION QUESTION
	64	com. IN NS
65	SECTION ANSWER
66	com. IN NS a.gtld-servers.net.
67	SECTION ADDITIONAL
68	a.gtld-servers.net. IN A 192.5.6.30
69	ENTRY_END
70
71	ENTRY_BEGIN
72	MATCH opcode subdomain
73	ADJUST copy_id copy_query
74	REPLY QR NOERROR
75	SECTION QUESTION
76	example.com. IN A
77	SECTION AUTHORITY
78	example.com. IN NS ns.example.com.
79	example.com. IN NS ns.example.net.
80	SECTION ADDITIONAL
81	; this entry; glue will make unbound take this reference first.
82	; it is however, the lame server.
83	ns.example.com. IN A 1.2.3.55
84	ENTRY_END
85	RANGE_END
86
87	; e.gtld-servers.net.
88	RANGE_BEGIN 0 100
89	ADDRESS 192.12.94.30
90	ENTRY_BEGIN
91	MATCH opcode qtype qname
92	ADJUST copy_id
93	REPLY QR NOERROR
94	SECTION QUESTION
95	net. IN NS
96	SECTION ANSWER
97	net. IN NS e.gtld-servers.net.
98	SECTION ADDITIONAL
99	e.gtld-servers.net. IN A 192.12.94.30
100	ENTRY_END
101
102	ENTRY_BEGIN
103	MATCH opcode subdomain
104	ADJUST copy_id copy_query
105	REPLY QR NOERROR
106	SECTION QUESTION
107	example.net. IN A
108	SECTION AUTHORITY
109	example.net. IN NS ns.example.net.
110	SECTION ADDITIONAL
111	ns.example.net. IN A 1.2.3.44
112	ENTRY_END
113	RANGE_END
114
115	; ns.example.net.
116	RANGE_BEGIN 0 100
117	ADDRESS 1.2.3.44
118	ENTRY_BEGIN
119	MATCH opcode qtype qname
120	ADJUST copy_id
121	REPLY QR NOERROR
122	SECTION QUESTION
123	example.net. IN NS
124	SECTION ANSWER
125	example.net. IN NS ns.example.net.
126	SECTION ADDITIONAL
127	ns.example.net. IN A 1.2.3.44
128	ENTRY_END
129
130	ENTRY_BEGIN
131	MATCH opcode qtype qname
132	ADJUST copy_id
133	REPLY QR AA NOERROR
134	SECTION QUESTION
135	example.com. IN NS
136	SECTION ANSWER
137	example.com. IN NS ns.example.com.
138	example.com. IN NS ns.example.net.
139	SECTION ADDITIONAL
140	ns.example.net IN A 1.2.3.44
141	ENTRY_END
142
143	ENTRY_BEGIN
144	MATCH opcode qtype qname
145	ADJUST copy_id
146	REPLY QR NOERROR
147	SECTION QUESTION
148	ns.example.net. IN A
149	SECTION ANSWER
150	ns.example.net. IN A 1.2.3.44
151	SECTION AUTHORITY
152	example.net. IN NS ns.example.net.
153	ENTRY_END
154
155	ENTRY_BEGIN
156	MATCH opcode qtype qname
157	ADJUST copy_id
158	REPLY QR NOERROR
159	SECTION QUESTION
160	ns.example.net. IN AAAA
161	SECTION AUTHORITY
162	example.net. IN NS ns.example.net.
163	SECTION ADDITIONAL
164	www.example.net. IN A 1.2.3.44
165	ENTRY_END
166
167	ENTRY_BEGIN
168	MATCH opcode qtype qname
169	ADJUST copy_id
170	REPLY QR AA NOERROR
171	SECTION QUESTION
172	www.example.com. IN A
173	SECTION ANSWER
174	www.example.com. IN A 10.20.30.40
175	SECTION AUTHORITY
176	example.com. IN NS ns.example.com.
177	example.com. IN NS ns.example.net.
178	SECTION ADDITIONAL
179	ns.example.net IN A 1.2.3.44
180	ENTRY_END
181
182	ENTRY_BEGIN
183	MATCH opcode qtype qname
184	ADJUST copy_id
185	REPLY QR NOERROR
186	SECTION QUESTION
187	ns.example.com. IN AAAA
188	SECTION ANSWER
189	ENTRY_END
190
191	RANGE_END
192
193	; ns.example.com.
194	RANGE_BEGIN 0 100
195	ADDRESS 1.2.3.55
196	ENTRY_BEGIN
197	MATCH opcode qtype qname
198	ADJUST copy_id
199	REPLY QR AA NOERROR
200	SECTION QUESTION
201	example.com. IN NS
202	SECTION ANSWER
203	example.com. IN NS ns.example.com.
204	example.com. IN NS ns.example.net.
205	SECTION ADDITIONAL
206	ns.example.com. IN A 1.2.3.55
207	ENTRY_END
208
209	ENTRY_BEGIN
210	MATCH opcode qtype qname
211	ADJUST copy_id
212	REPLY QR NOERROR
213	SECTION QUESTION
214	ns.example.com. IN A
215	SECTION ANSWER
216	ns.example.com. IN A 1.2.3.55
217	ENTRY_END
218
219	ENTRY_BEGIN
220	MATCH opcode qtype qname
221	ADJUST copy_id
222	REPLY QR NOERROR
223	SECTION QUESTION
224	ns.example.com. IN AAAA
225	SECTION ANSWER
226	ENTRY_END
227
228	ENTRY_BEGIN
229	MATCH opcode qtype qname
230	ADJUST copy_id
231	REPLY QR NOERROR
232	SECTION QUESTION
233	ns.example.net. IN AAAA
234	ENTRY_END
235
236	; the lame response.
237	ENTRY_BEGIN
238	MATCH opcode qtype qname
239	ADJUST copy_id
240	REPLY QR RA NOERROR
241	SECTION QUESTION
242	www.example.com. IN A
243	SECTION ANSWER
244	; the wrong answer.
245	www.example.com. IN A 10.20.30.50
246	SECTION AUTHORITY
247	example.com. IN NS ns.example.com.
248	example.com. IN NS ns.example.net.
249	SECTION ADDITIONAL
250	ns.example.com. IN A 1.2.3.55
251	ENTRY_END
252	RANGE_END
253
254	STEP 1 QUERY
255	ENTRY_BEGIN
256	REPLY RD
257	SECTION QUESTION
258	www.example.com. IN A
259	ENTRY_END
260
261	; recursion happens here.
262	STEP 20 CHECK_ANSWER
263	ENTRY_BEGIN
264	MATCH all
265	REPLY QR RD RA NOERROR
266	SECTION QUESTION
267	www.example.com. IN A
268	SECTION ANSWER
269	www.example.com. IN A 10.20.30.40
270	SECTION AUTHORITY
271	example.com. IN NS ns.example.com.
272	example.com. IN NS ns.example.net.
273	; scrubbed off
274	;SECTION ADDITIONAL
275	;ns.example.net IN A 1.2.3.44
276	ENTRY_END
277
278	; query still pending
279	STEP 30 QUERY
280	ENTRY_BEGIN
281	REPLY RD
282	SECTION QUESTION
283	ns.example.net. IN AAAA
284	ENTRY_END
285
286	; query still pending
287	STEP 40 CHECK_ANSWER
288	ENTRY_BEGIN
289	REPLY RD RA
290	SECTION QUESTION
291	ENTRY_END
292
293	SCENARIO_END