unbound/testdata/dlv_insecure.rpl

   1 ; config options
   2 ; The island of trust is at example.com (the DLV repository)
   3 server:
   4         dlv-anchor: "example.com.    3600    IN      DS      2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
   5         val-override-date: "20070916134226"
   6         harden-referral-path: no
   7         target-fetch-policy: "0 0 0 0 0"
   8
   9 stub-zone:
  10         name: "."
  11         stub-addr: 193.0.14.129         # K.ROOT-SERVERS.NET.
  12 CONFIG_END
  13
  14 SCENARIO_BEGIN Test validator with insecure zone with no DLV
  15
  16 ; K.ROOT-SERVERS.NET.
  17 RANGE_BEGIN 0 100
  18         ADDRESS 193.0.14.129
  19 ENTRY_BEGIN
  20 MATCH opcode qtype qname
  21 ADJUST copy_id
  22 REPLY QR NOERROR
  23 SECTION QUESTION
  24 . IN NS
  25 SECTION ANSWER
  26 . IN NS K.ROOT-SERVERS.NET.
  27 SECTION ADDITIONAL
  28 K.ROOT-SERVERS.NET.     IN      A       193.0.14.129
  29 ENTRY_END
  30
  31 ENTRY_BEGIN
  32 MATCH opcode subdomain
  33 ADJUST copy_id copy_query
  34 REPLY QR NOERROR
  35 SECTION QUESTION
  36 com. IN A
  37 SECTION AUTHORITY
  38 com.    IN NS   a.gtld-servers.net.
  39 SECTION ADDITIONAL
  40 a.gtld-servers.net.     IN      A       192.5.6.30
  41 ENTRY_END
  42
  43 ENTRY_BEGIN
  44 MATCH opcode subdomain
  45 ADJUST copy_id copy_query
  46 REPLY QR NOERROR
  47 SECTION QUESTION
  48 net. IN A
  49 SECTION AUTHORITY
  50 net.    IN NS   a.gtld-servers.net.
  51 SECTION ADDITIONAL
  52 a.gtld-servers.net.     IN      A       192.5.6.30
  53 ENTRY_END
  54 RANGE_END
  55
  56 ; a.gtld-servers.net.
  57 RANGE_BEGIN 0 100
  58         ADDRESS 192.5.6.30
  59 ENTRY_BEGIN
  60 MATCH opcode qtype qname
  61 ADJUST copy_id
  62 REPLY QR NOERROR
  63 SECTION QUESTION
  64 com. IN NS
  65 SECTION ANSWER
  66 com.    IN NS   a.gtld-servers.net.
  67 SECTION ADDITIONAL
  68 a.gtld-servers.net.     IN      A       192.5.6.30
  69 ENTRY_END
  70
  71 ENTRY_BEGIN
  72 MATCH opcode qtype qname
  73 ADJUST copy_id
  74 REPLY QR NOERROR
  75 SECTION QUESTION
  76 net. IN NS
  77 SECTION ANSWER
  78 net.    IN NS   a.gtld-servers.net.
  79 SECTION ADDITIONAL
  80 a.gtld-servers.net.     IN      A       192.5.6.30
  81 ENTRY_END
  82
  83 ENTRY_BEGIN
  84 MATCH opcode subdomain
  85 ADJUST copy_id copy_query
  86 REPLY QR NOERROR
  87 SECTION QUESTION
  88 example.com. IN A
  89 SECTION AUTHORITY
  90 example.com.    IN NS   ns.example.com.
  91 SECTION ADDITIONAL
  92 ns.example.com.         IN      A       1.2.3.4
  93 ENTRY_END
  94
  95 ENTRY_BEGIN
  96 MATCH opcode subdomain
  97 ADJUST copy_id copy_query
  98 REPLY QR NOERROR
  99 SECTION QUESTION
 100 example.net. IN A
 101 SECTION AUTHORITY
 102 example.net.    IN NS   ns.example.net.
 103 SECTION ADDITIONAL
 104 ns.example.net.         IN      A       1.2.3.5
 105 ENTRY_END
 106 RANGE_END
 107
 108 ; ns.example.com.
 109 RANGE_BEGIN 0 100
 110         ADDRESS 1.2.3.4
 111 ENTRY_BEGIN
 112 MATCH opcode qtype qname
 113 ADJUST copy_id
 114 REPLY QR NOERROR
 115 SECTION QUESTION
 116 example.com. IN NS
 117 SECTION ANSWER
 118 example.com.    IN NS   ns.example.com.
 119 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
 120 SECTION ADDITIONAL
 121 ns.example.com.         IN      A       1.2.3.4
 122 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 123 ENTRY_END
 124
 125 ; response to DNSKEY priming query
 126 ENTRY_BEGIN
 127 MATCH opcode qtype qname
 128 ADJUST copy_id
 129 REPLY QR NOERROR
 130 SECTION QUESTION
 131 example.com. IN DNSKEY
 132 SECTION ANSWER
 133 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 134 example.com.    3600    IN      RRSIG   DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
 135 SECTION AUTHORITY
 136 example.com.    IN NS   ns.example.com.
 137 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
 138 SECTION ADDITIONAL
 139 ns.example.com.         IN      A       1.2.3.4
 140 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 141 ENTRY_END
 142
 143 ; DLV query
 144 ; could be picked out of the negative cache due to NS queries in between.
 145 ENTRY_BEGIN
 146 MATCH opcode qtype qname
 147 ADJUST copy_id
 148 REPLY QR NXDOMAIN
 149 SECTION QUESTION
 150 www.example.net.example.com. IN DLV
 151 SECTION ANSWER
 152 SECTION AUTHORITY
 153 example.com. IN SOA open.nlnetlabs.nl. hostmaster.nlnetlabs.nl. 2008081300 28800 7200 604800 3600
 154 example.com.    3600    IN      RRSIG   SOA 3 2 3600 20070926134150 20070829134150 2854 example.com. AKPJnPBqfJKxE4P2iVYkSRJno9HmiXJZtjdqE8oBeq9Lk9FytcMdcig= ;{id = 2854}
 155 example.com.    IN NS   ns.example.com.
 156 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
 157 example.com IN NSEC zazz.example.com. SOA NS RRSIG NSEC
 158 example.com.    3600    IN      RRSIG   NSEC 3 2 3600 20070926135752 20070829135752 2854 example.com. AAi21jQpno6gXnrPrtK0NvNgX9B8E9U5RvTd47QiCWLF7KdtKxB7Xz0= ;{id = 2854}
 159 SECTION ADDITIONAL
 160 ns.example.com.         IN      A       1.2.3.4
 161 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 162 ENTRY_END
 163
 164 ENTRY_BEGIN
 165 MATCH opcode qtype qname
 166 ADJUST copy_id
 167 REPLY QR NXDOMAIN
 168 SECTION QUESTION
 169 net.example.com. IN DLV
 170 SECTION ANSWER
 171 SECTION AUTHORITY
 172 example.com. IN SOA open.nlnetlabs.nl. hostmaster.nlnetlabs.nl. 2008081300 28800 7200 604800 3600
 173 example.com.    3600    IN      RRSIG   SOA 3 2 3600 20070926134150 20070829134150 2854 example.com. AKPJnPBqfJKxE4P2iVYkSRJno9HmiXJZtjdqE8oBeq9Lk9FytcMdcig= ;{id = 2854}
 174 example.com IN NSEC zazz.example.com. SOA NS RRSIG NSEC
 175 example.com.    3600    IN      RRSIG   NSEC 3 2 3600 20070926135752 20070829135752 2854 example.com. AAi21jQpno6gXnrPrtK0NvNgX9B8E9U5RvTd47QiCWLF7KdtKxB7Xz0= ;{id = 2854}
 176 ENTRY_END
 177
 178 ENTRY_BEGIN
 179 MATCH opcode qtype qname
 180 ADJUST copy_id
 181 REPLY QR NXDOMAIN
 182 SECTION QUESTION
 183 com.example.com. IN DLV
 184 SECTION ANSWER
 185 SECTION AUTHORITY
 186 example.com. IN SOA open.nlnetlabs.nl. hostmaster.nlnetlabs.nl. 2008081300 28800 7200 604800 3600
 187 example.com.    3600    IN      RRSIG   SOA 3 2 3600 20070926134150 20070829134150 2854 example.com. AKPJnPBqfJKxE4P2iVYkSRJno9HmiXJZtjdqE8oBeq9Lk9FytcMdcig= ;{id = 2854}
 188 example.com IN NSEC zazz.example.com. SOA NS RRSIG NSEC
 189 example.com.    3600    IN      RRSIG   NSEC 3 2 3600 20070926135752 20070829135752 2854 example.com. AAi21jQpno6gXnrPrtK0NvNgX9B8E9U5RvTd47QiCWLF7KdtKxB7Xz0= ;{id = 2854}
 190 ENTRY_END
 191
 192 RANGE_END
 193
 194 ; ns.example.net.
 195 RANGE_BEGIN 0 100
 196         ADDRESS 1.2.3.5
 197 ; NS query
 198 ENTRY_BEGIN
 199 MATCH opcode qtype qname
 200 ADJUST copy_id
 201 REPLY QR NOERROR
 202 SECTION QUESTION
 203 example.net. IN NS
 204 SECTION ANSWER
 205 example.net.    IN NS   ns.example.net.
 206 SECTION ADDITIONAL
 207 ns.example.net.         IN      A       1.2.3.5
 208 ENTRY_END
 209
 210 ; www.example.net query
 211 ENTRY_BEGIN
 212 MATCH opcode qtype qname
 213 ADJUST copy_id
 214 REPLY QR NOERROR
 215 SECTION QUESTION
 216 www.example.net. IN A
 217 SECTION ANSWER
 218 www.example.net.        3600    IN      A       10.20.30.40
 219 SECTION AUTHORITY
 220 example.net.    IN NS   ns.example.net.
 221 SECTION ADDITIONAL
 222 ns.example.net.         IN      A       1.2.3.5
 223 ENTRY_END
 224
 225
 226 RANGE_END
 227
 228 STEP 1 QUERY
 229 ENTRY_BEGIN
 230 REPLY RD DO
 231 SECTION QUESTION
 232 www.example.net. IN A
 233 ENTRY_END
 234
 235 ; recursion happens here.
 236 STEP 10 CHECK_ANSWER
 237 ENTRY_BEGIN
 238 MATCH all
 239 REPLY QR RD RA DO NOERROR
 240 SECTION QUESTION
 241 www.example.net. IN A
 242 SECTION ANSWER
 243 www.example.net.        3600    IN      A       10.20.30.40
 244 SECTION AUTHORITY
 245 example.net.    IN NS   ns.example.net.
 246 SECTION ADDITIONAL
 247 ns.example.net.         IN      A       1.2.3.5
 248 ENTRY_END
 249
 250 SCENARIO_END