unbound/testdata/val_fwdds.rpl

   1 ; config options
   2 ; The island of trust is at example.com
   3 server:
   4         trust-anchor: "example.com.    3600    IN      DS      2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
   5         val-override-date: "20070916134226"
   6         target-fetch-policy: "0 0 0 0 0"
   7
   8 stub-zone:
   9         name: "."
  10         stub-addr: 193.0.14.129         # K.ROOT-SERVERS.NET.
  11 forward-zone:
  12         name: "sub.example.com"
  13         forward-addr: 1.2.3.6
  14 CONFIG_END
  15
  16 SCENARIO_BEGIN Test forward-zone with DS query
  17 ; The fwd zone is linked validly with a DS to the public internet zone.
  18 ; unbound just has to be able to ask the DS from the right server (not
  19 ; from the fwd).
  20 ; Here the fwd is not even recursive, just the plain server for sub.example.com
  21
  22 ; K.ROOT-SERVERS.NET.
  23 RANGE_BEGIN 0 100
  24         ADDRESS 193.0.14.129
  25 ENTRY_BEGIN
  26 MATCH opcode qtype qname
  27 ADJUST copy_id
  28 REPLY QR NOERROR
  29 SECTION QUESTION
  30 . IN NS
  31 SECTION ANSWER
  32 . IN NS K.ROOT-SERVERS.NET.
  33 SECTION ADDITIONAL
  34 K.ROOT-SERVERS.NET.     IN      A       193.0.14.129
  35 ENTRY_END
  36
  37 ENTRY_BEGIN
  38 MATCH opcode subdomain
  39 ADJUST copy_id copy_query
  40 REPLY QR NOERROR
  41 SECTION QUESTION
  42 com. IN NS
  43 SECTION AUTHORITY
  44 com.    IN NS   a.gtld-servers.net.
  45 SECTION ADDITIONAL
  46 a.gtld-servers.net.     IN      A       192.5.6.30
  47 ENTRY_END
  48 RANGE_END
  49
  50 ; a.gtld-servers.net.
  51 RANGE_BEGIN 0 100
  52         ADDRESS 192.5.6.30
  53 ENTRY_BEGIN
  54 MATCH opcode qtype qname
  55 ADJUST copy_id
  56 REPLY QR NOERROR
  57 SECTION QUESTION
  58 com. IN NS
  59 SECTION ANSWER
  60 com.    IN NS   a.gtld-servers.net.
  61 SECTION ADDITIONAL
  62 a.gtld-servers.net.     IN      A       192.5.6.30
  63 ENTRY_END
  64
  65 ENTRY_BEGIN
  66 MATCH opcode subdomain
  67 ADJUST copy_id copy_query
  68 REPLY QR NOERROR
  69 SECTION QUESTION
  70 example.com. IN A
  71 SECTION AUTHORITY
  72 example.com.    IN NS   ns.example.com.
  73 SECTION ADDITIONAL
  74 ns.example.com.         IN      A       1.2.3.4
  75 ENTRY_END
  76 RANGE_END
  77
  78 ; ns.example.com.
  79 RANGE_BEGIN 0 100
  80         ADDRESS 1.2.3.4
  81 ENTRY_BEGIN
  82 MATCH opcode qtype qname
  83 ADJUST copy_id
  84 REPLY QR NOERROR
  85 SECTION QUESTION
  86 example.com. IN NS
  87 SECTION ANSWER
  88 example.com.    IN NS   ns.example.com.
  89 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
  90 SECTION ADDITIONAL
  91 ns.example.com.         IN      A       1.2.3.4
  92 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
  93 ENTRY_END
  94
  95 ; response to DNSKEY priming query
  96 ENTRY_BEGIN
  97 MATCH opcode qtype qname
  98 ADJUST copy_id
  99 REPLY QR NOERROR
 100 SECTION QUESTION
 101 example.com. IN DNSKEY
 102 SECTION ANSWER
 103 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 104 example.com. 3600    IN      RRSIG   DNSKEY DSA 2 3600 20070926134150 20070829134150 2854 example.com. MCwCFBQRtlR4BEv9ohi+PGFjp+AHsJuHAhRCvz0shggvnvI88DFnBDCczHUcVA== ;{id = 2854}
 105 SECTION AUTHORITY
 106 example.com.    IN NS   ns.example.com.
 107 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCN+qHdJxoI/2tNKwsb08pra/G7aAIUAWA5sDdJTbrXA1/3OaesGBAO3sI= ;{id = 2854}
 108 SECTION ADDITIONAL
 109 ns.example.com.         IN      A       1.2.3.4
 110 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 111 ENTRY_END
 112
 113 ; response for DS of sub.example.com.
 114 ENTRY_BEGIN
 115 MATCH opcode qtype qname
 116 ADJUST copy_id
 117 REPLY QR NOERROR
 118 SECTION QUESTION
 119 sub.example.com. IN DS
 120 SECTION ANSWER
 121 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 122 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. MCwCFCW3ix0GD4BSvNLWIbROCJt5DAW9AhRt/kg9kBKJ20UBUdumrBUHqnskdA== ;{id = 2854}
 123 SECTION AUTHORITY
 124 SECTION ADDITIONAL
 125 ENTRY_END
 126
 127 ; response for delegation to sub.example.com.
 128 ENTRY_BEGIN
 129 MATCH opcode subdomain
 130 ADJUST copy_id copy_query
 131 REPLY QR NOERROR
 132 SECTION QUESTION
 133 sub.example.com. IN A
 134 SECTION ANSWER
 135 SECTION AUTHORITY
 136 sub.example.com. IN     NS ns.sub.example.com.
 137 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 138 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. MCwCFCW3ix0GD4BSvNLWIbROCJt5DAW9AhRt/kg9kBKJ20UBUdumrBUHqnskdA== ;{id = 2854}
 139 SECTION ADDITIONAL
 140 ns.sub.example.com. IN A 1.2.3.6
 141 ENTRY_END
 142
 143 RANGE_END
 144
 145 ; ns.sub.example.com.
 146 RANGE_BEGIN 0 100
 147         ADDRESS 1.2.3.6
 148 ENTRY_BEGIN
 149 MATCH opcode qtype qname
 150 ADJUST copy_id
 151 REPLY QR NOERROR
 152 SECTION QUESTION
 153 sub.example.com. IN NS
 154 SECTION ANSWER
 155 sub.example.com. IN     NS ns.sub.example.com.
 156 sub.example.com.        3600    IN      RRSIG   NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. wcpHeBILHfo8C9uxMhcW03gcURZeUffiKdSTb50ZjzTHgMNhRyMfpcvSpXEd9548A9UTmWKeLZChfr5Z/glONw== ;{id = 30899}
 157 SECTION ADDITIONAL
 158 ns.sub.example.com. IN A 1.2.3.6
 159 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. UF7shD/gt1FOp2UHgLTNbPzVykklSXFMEtJ1xD+Hholwf/PIzd7zoaIttIYibNa4fUXCqMg22H9P7MRhfmFe6g== ;{id = 30899}
 160 ENTRY_END
 161
 162 ; response to DNSKEY priming query
 163 ; sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 164 ENTRY_BEGIN
 165 MATCH opcode qtype qname
 166 ADJUST copy_id
 167 REPLY QR NOERROR
 168 SECTION QUESTION
 169 sub.example.com. IN DNSKEY
 170 SECTION ANSWER
 171 sub.example.com.        3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 172 sub.example.com.        3600    IN      RRSIG   DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899}
 173 SECTION AUTHORITY
 174 sub.example.com. IN     NS ns.sub.example.com.
 175 sub.example.com.        3600    IN      RRSIG   NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. wcpHeBILHfo8C9uxMhcW03gcURZeUffiKdSTb50ZjzTHgMNhRyMfpcvSpXEd9548A9UTmWKeLZChfr5Z/glONw== ;{id = 30899}
 176 SECTION ADDITIONAL
 177 ns.sub.example.com. IN A 1.2.3.6
 178 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. UF7shD/gt1FOp2UHgLTNbPzVykklSXFMEtJ1xD+Hholwf/PIzd7zoaIttIYibNa4fUXCqMg22H9P7MRhfmFe6g== ;{id = 30899}
 179 ENTRY_END
 180
 181 ; response for qtype DS.  This is not available here.
 182 ENTRY_BEGIN
 183 MATCH opcode qtype qname
 184 ADJUST copy_id
 185 REPLY QR SERVFAIL
 186 SECTION QUESTION
 187 sub.example.com. IN DS
 188 SECTION ANSWER
 189 SECTION AUTHORITY
 190 SECTION ADDITIONAL
 191 ENTRY_END
 192
 193 ; response to query of interest
 194 ENTRY_BEGIN
 195 MATCH opcode qtype qname
 196 ADJUST copy_id
 197 REPLY QR NOERROR
 198 SECTION QUESTION
 199 www.sub.example.com. IN A
 200 SECTION ANSWER
 201 www.sub.example.com. IN A       11.11.11.11
 202 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. 0DqqRfRtm7VSEQ4mmBbzrKRqQAay3JAE8DPDGmjtokrrjN9F1G/HxozDV7bjdIh2EChlQea8FPwf/GepJMUVxg== ;{id = 30899}
 203 SECTION AUTHORITY
 204 SECTION ADDITIONAL
 205 ENTRY_END
 206 RANGE_END
 207
 208 STEP 1 QUERY
 209 ENTRY_BEGIN
 210 REPLY RD DO
 211 SECTION QUESTION
 212 www.sub.example.com. IN A
 213 ENTRY_END
 214
 215 ; recursion happens here.
 216 STEP 10 CHECK_ANSWER
 217 ENTRY_BEGIN
 218 MATCH all
 219 REPLY QR RD RA AD DO NOERROR
 220 SECTION QUESTION
 221 www.sub.example.com. IN A
 222 SECTION ANSWER
 223 www.sub.example.com.    3600    IN      A       11.11.11.11
 224 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. 0DqqRfRtm7VSEQ4mmBbzrKRqQAay3JAE8DPDGmjtokrrjN9F1G/HxozDV7bjdIh2EChlQea8FPwf/GepJMUVxg== ;{id = 30899}
 225 SECTION AUTHORITY
 226 SECTION ADDITIONAL
 227 ENTRY_END
 228
 229 SCENARIO_END