unbound/testdata/black_key_entry.rpl

   1 ; config options
   2 ; The island of trust is at example.com
   3 server:
   4         trust-anchor: "example.com.    3600    IN      DS      2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
   5         val-override-date: "20070916134226"
   6         target-fetch-policy: "0 0 0 0 0"
   7
   8 stub-zone:
   9         name: "."
  10         stub-addr: 193.0.14.129         # K.ROOT-SERVERS.NET.
  11 CONFIG_END
  12
  13 SCENARIO_BEGIN Test validator with blacked key entry and further queries
  14 ; DNSKEY not for prime but further down the chain of trust
  15 ; the blacklist action does not help.
  16 ; the further queries should not generate traffic to the authority any more.
  17 ; until the key entry expires.
  18
  19 ; K.ROOT-SERVERS.NET.
  20 RANGE_BEGIN 0 100
  21         ADDRESS 193.0.14.129
  22 ENTRY_BEGIN
  23 MATCH opcode qtype qname
  24 ADJUST copy_id
  25 REPLY QR NOERROR
  26 SECTION QUESTION
  27 . IN NS
  28 SECTION ANSWER
  29 . IN NS K.ROOT-SERVERS.NET.
  30 SECTION ADDITIONAL
  31 K.ROOT-SERVERS.NET.     IN      A       193.0.14.129
  32 ENTRY_END
  33
  34 ENTRY_BEGIN
  35 MATCH opcode subdomain
  36 ADJUST copy_id copy_query
  37 REPLY QR NOERROR
  38 SECTION QUESTION
  39 com. IN A
  40 SECTION AUTHORITY
  41 com.    IN NS   a.gtld-servers.net.
  42 SECTION ADDITIONAL
  43 a.gtld-servers.net.     IN      A       192.5.6.30
  44 ENTRY_END
  45 RANGE_END
  46
  47 ; a.gtld-servers.net.
  48 RANGE_BEGIN 0 100
  49         ADDRESS 192.5.6.30
  50 ENTRY_BEGIN
  51 MATCH opcode qtype qname
  52 ADJUST copy_id
  53 REPLY QR NOERROR
  54 SECTION QUESTION
  55 com. IN NS
  56 SECTION ANSWER
  57 com.    IN NS   a.gtld-servers.net.
  58 SECTION ADDITIONAL
  59 a.gtld-servers.net.     IN      A       192.5.6.30
  60 ENTRY_END
  61
  62 ENTRY_BEGIN
  63 MATCH opcode qtype qname
  64 ADJUST copy_id
  65 REPLY QR NOERROR
  66 SECTION QUESTION
  67 ns.blabla.com. IN A
  68 SECTION ANSWER
  69 ns.blabla.com. IN A 1.2.3.5
  70 ENTRY_END
  71
  72 ENTRY_BEGIN
  73 MATCH opcode qtype qname
  74 ADJUST copy_id
  75 REPLY QR NOERROR
  76 SECTION QUESTION
  77 ns.blabla.com. IN AAAA
  78 SECTION AUTHORITY
  79 com. IN SOA com. com. 2009100100 28800 7200 604800 3600
  80 ENTRY_END
  81
  82 ENTRY_BEGIN
  83 MATCH opcode qtype qname
  84 ADJUST copy_id
  85 REPLY QR NOERROR
  86 SECTION QUESTION
  87 ns.foo.com. IN A
  88 SECTION ANSWER
  89 ns.foo.com. IN A 1.2.4.7
  90 ENTRY_END
  91
  92 ENTRY_BEGIN
  93 MATCH opcode qtype qname
  94 ADJUST copy_id
  95 REPLY QR NOERROR
  96 SECTION QUESTION
  97 ns.foo.com. IN AAAA
  98 SECTION AUTHORITY
  99 com. IN SOA com. com. 2009100100 28800 7200 604800 3600
 100 ENTRY_END
 101
 102 ENTRY_BEGIN
 103 MATCH opcode subdomain
 104 ADJUST copy_id copy_query
 105 REPLY QR NOERROR
 106 SECTION QUESTION
 107 example.com. IN NS
 108 SECTION AUTHORITY
 109 example.com.    IN NS   ns.example.com.
 110 example.com.    IN NS   ns.blabla.com.
 111 SECTION ADDITIONAL
 112 ns.example.com.         IN      A       1.2.3.4
 113 ENTRY_END
 114 RANGE_END
 115
 116 ; ns.example.com.
 117 RANGE_BEGIN 0 100
 118         ADDRESS 1.2.3.4
 119 ENTRY_BEGIN
 120 MATCH opcode qtype qname
 121 ADJUST copy_id
 122 REPLY QR NOERROR
 123 SECTION QUESTION
 124 example.com. IN NS
 125 SECTION ANSWER
 126 example.com.    IN NS   ns.example.com.
 127 example.com.    IN NS   ns.blabla.com.
 128 example.com.    3600    IN      RRSIG   NS 3 2 3600 20030926134150 20030829134150 2854 example.com. AKJ3xUBdSrCiOFkYajsy93d+h06rewpbmBHItTkL8R/26rw57b1gCIg= ;{id = 2854}
 129 SECTION ADDITIONAL
 130 ns.example.com.         IN      A       1.2.3.4
 131 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854}
 132 ENTRY_END
 133
 134 ENTRY_BEGIN
 135 MATCH opcode qtype qname
 136 ADJUST copy_id
 137 REPLY QR NOERROR
 138 SECTION QUESTION
 139 ns.example.com. IN A
 140 SECTION ANSWER
 141 ns.example.com.         IN      A       1.2.3.4
 142 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854}
 143 SECTION ADDITIONAL
 144 ENTRY_END
 145
 146 ENTRY_BEGIN
 147 MATCH opcode qtype qname
 148 ADJUST copy_id
 149 REPLY QR NOERROR
 150 SECTION QUESTION
 151 ns.example.com. IN AAAA
 152 SECTION ANSWER
 153 SECTION ADDITIONAL
 154 ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A
 155 ns.example.com. 3600    IN      RRSIG   NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. ACFVLLBtuSX/1z3461tbOwDz9zTHe5S9DbVtwnSO1f2x06fYbMpzSDE= ;{id = 2854}
 156 ENTRY_END
 157
 158 ; response to DNSKEY priming query
 159 ENTRY_BEGIN
 160 MATCH opcode qtype qname
 161 ADJUST copy_id
 162 REPLY QR NOERROR
 163 SECTION QUESTION
 164 example.com. IN DNSKEY
 165 SECTION ANSWER
 166 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 167 ; make priming query succeed
 168 example.com.    3600    IN      RRSIG   DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
 169 ;example.com.   3600    IN      RRSIG   DNSKEY 3 2 3600 20030926134150 20030829134150 2854 example.com. AG21xE8CFQzTq6XtHErg28b9EAmqPsoYCUcFPEAoAjFybM6AY4/bMOo= ;{id = 2854}
 170 SECTION AUTHORITY
 171 ;example.com.    IN NS   ns.example.com.
 172 ;example.com.    IN NS   ns.blabla.com.
 173 ;example.com.   3600    IN      RRSIG   NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACiWu7zjBHqgEX3iUoOF7rfpOmIAHj1npKQ+XDIaNlmdkfJxoCwFl04= ;{id = 2854}
 174 SECTION ADDITIONAL
 175 ;ns.example.com.                IN      A       1.2.3.4
 176 ;ns.example.com.        3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. ACmAsKTf7hqDaYK8CQ7FL1cGYPW+blTCnzZGkExFtEUAGrHeze87o+A= ;{id = 2854}
 177 ENTRY_END
 178
 179 ENTRY_BEGIN
 180 MATCH opcode qtype qname
 181 ADJUST copy_id
 182 REPLY QR NOERROR
 183 SECTION QUESTION
 184 www.example.com. IN A
 185 SECTION ANSWER
 186 www.example.com. IN A   10.20.30.40
 187 www.example.com.        3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGj9kE8oW3OhOLhkmJ3HBaNIOpvGf3S8zSd5gWmhpxAMc5hh6cxZfpQ= ;{id = 2854}
 188 SECTION AUTHORITY
 189 example.com.    IN NS   ns.example.com.
 190 example.com.    IN NS   ns.blabla.com.
 191 example.com.    3600    IN      RRSIG   NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACHETweBNPgbmRoNRdKvxuw4X9qNUUTEpSuwV+HhuiBE83gbB98asAc= ;{id = 2854}
 192 SECTION ADDITIONAL
 193 ns.example.com.         IN      A       1.2.3.4
 194 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGvu9A/nGsbatxJCmnObioIhKg2Tm0Apr0eo+DO1kIDrAHco/bt/EdY= ;{id = 2854}
 195 ENTRY_END
 196
 197 ; DS request
 198 ENTRY_BEGIN
 199 MATCH opcode qtype qname
 200 ADJUST copy_id
 201 REPLY QR AA NOERROR
 202 SECTION QUESTION
 203 sub.example.com. IN DS
 204 SECTION ANSWER
 205 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 206 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 207 ;sub.example.com.       3600    IN      RRSIG   DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854}
 208 ENTRY_END
 209
 210 ENTRY_BEGIN
 211 MATCH opcode subdomain
 212 ADJUST copy_id copy_query
 213 REPLY QR AA NOERROR
 214 SECTION QUESTION
 215 sub.example.com. IN NS
 216 SECTION AUTHORITY
 217 sub.example.com. IN NS ns.sub.example.com.
 218 ;sub.example.com. IN NS ns.foo.com.
 219 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 220 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 221 ;sub.example.com.       3600    IN      RRSIG   DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854}
 222 SECTION ADDITIONAL
 223 ns.sub.example.com. IN A 1.2.4.6
 224 ENTRY_END
 225
 226 RANGE_END
 227
 228 ; ns.blabla.com.
 229 RANGE_BEGIN 0 100
 230         ADDRESS 1.2.3.5
 231 ENTRY_BEGIN
 232 MATCH opcode qtype qname
 233 ADJUST copy_id
 234 REPLY QR NOERROR
 235 SECTION QUESTION
 236 example.com. IN NS
 237 SECTION ANSWER
 238 example.com.    IN NS   ns.example.com.
 239 example.com.    IN NS   ns.blabla.com.
 240 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
 241 SECTION ADDITIONAL
 242 ns.example.com.         IN      A       1.2.3.4
 243 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 244 ENTRY_END
 245
 246 ENTRY_BEGIN
 247 MATCH opcode qtype qname
 248 ADJUST copy_id
 249 REPLY QR NOERROR
 250 SECTION QUESTION
 251 ns.example.com. IN A
 252 SECTION ANSWER
 253 ns.example.com.         IN      A       1.2.3.4
 254 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 255 SECTION ADDITIONAL
 256 ENTRY_END
 257
 258 ENTRY_BEGIN
 259 MATCH opcode qtype qname
 260 ADJUST copy_id
 261 REPLY QR NOERROR
 262 SECTION QUESTION
 263 ns.example.com. IN AAAA
 264 SECTION ANSWER
 265 SECTION ADDITIONAL
 266 ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A
 267 ns.example.com. 3600    IN      RRSIG   NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. ABhDNtJramb2a4R1SK5gb/CTYJybQts6mZ++z3kLiwsrUSZInA4ikeQ= ;{id = 2854}
 268 ENTRY_END
 269
 270 ; response to DNSKEY priming query
 271 ENTRY_BEGIN
 272 MATCH opcode qtype qname
 273 ADJUST copy_id
 274 REPLY QR NOERROR
 275 SECTION QUESTION
 276 example.com. IN DNSKEY
 277 SECTION ANSWER
 278 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 279 example.com.    3600    IN      RRSIG   DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
 280 SECTION AUTHORITY
 281 example.com.    IN NS   ns.example.com.
 282 example.com.    IN NS   ns.blabla.com.
 283 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
 284 SECTION ADDITIONAL
 285 ns.example.com.         IN      A       1.2.3.4
 286 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 287 ENTRY_END
 288
 289 ENTRY_BEGIN
 290 MATCH opcode qtype qname
 291 ADJUST copy_id
 292 REPLY QR NOERROR
 293 SECTION QUESTION
 294 www.example.com. IN A
 295 SECTION ANSWER
 296 www.example.com. IN A   10.20.30.40
 297 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854}
 298 SECTION AUTHORITY
 299 example.com.    IN NS   ns.example.com.
 300 example.com.    IN NS   ns.blabla.com.
 301 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
 302 SECTION ADDITIONAL
 303 ns.example.com.         IN      A       1.2.3.4
 304 www.example.com.        3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854}
 305 ENTRY_END
 306
 307 ; DS request
 308 ENTRY_BEGIN
 309 MATCH opcode qtype qname
 310 ADJUST copy_id
 311 REPLY QR AA NOERROR
 312 SECTION QUESTION
 313 sub.example.com. IN DS
 314 SECTION ANSWER
 315 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 316 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 317 ENTRY_END
 318
 319 ENTRY_BEGIN
 320 MATCH opcode subdomain
 321 ADJUST copy_id copy_query
 322 REPLY QR AA NOERROR
 323 SECTION QUESTION
 324 sub.example.com. IN NS
 325 SECTION AUTHORITY
 326 sub.example.com. IN NS ns.sub.example.com.
 327 ;sub.example.com. IN NS ns.foo.com.
 328 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 329 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 330 SECTION ADDITIONAL
 331 ns.sub.example.com. IN A 1.2.4.6
 332 ENTRY_END
 333
 334 RANGE_END
 335
 336 ; ns.sub.example.com.
 337 RANGE_BEGIN 0 100
 338         ADDRESS 1.2.4.6
 339 ENTRY_BEGIN
 340 MATCH opcode qtype qname
 341 ADJUST copy_id
 342 REPLY QR AA NOERROR
 343 SECTION QUESTION
 344 sub.example.com. IN DNSKEY
 345 SECTION ANSWER
 346 sub.example.com.        3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 347 sub.example.com.        3600    IN      RRSIG   DNSKEY 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. g+YoDwrCF75YCFyqYoxlF+/mNfcscnuZ6LfmfBgPLohlvCCC7jYj/wkc2fxAl3MEK0CriWkHp1hw0QQYkmbbKw== ;{id = 30899}
 348 ENTRY_END
 349
 350 ENTRY_BEGIN
 351 MATCH opcode qtype qname
 352 ADJUST copy_id
 353 REPLY QR AA NOERROR
 354 SECTION QUESTION
 355 sub.example.com. IN NS
 356 SECTION ANSWER
 357 sub.example.com. IN NS ns.sub.example.com.
 358 ;sub.example.com. IN NS ns.foo.com.
 359 sub.example.com.        3600    IN      RRSIG   NS 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. VCDq+gfZHuziE81Uypxm2va4eXCtoD8F8YKkwNo8laMNUcXh/hvGdbHKXMMghwuJXgxLh89Diu5kywBVwb/AIg== ;{id = 30899}
 360 SECTION ADDITIONAL
 361 ns.sub.example.com. IN A 1.2.4.6
 362 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899}
 363 ENTRY_END
 364
 365 ENTRY_BEGIN
 366 MATCH opcode qtype qname
 367 ADJUST copy_id
 368 REPLY QR AA NOERROR
 369 SECTION QUESTION
 370 ns.sub.example.com. IN A
 371 SECTION ANSWER
 372 ns.sub.example.com. IN A 1.2.4.6
 373 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899}
 374 ENTRY_END
 375
 376 ENTRY_BEGIN
 377 MATCH opcode qtype qname
 378 ADJUST copy_id
 379 REPLY QR AA NOERROR
 380 SECTION QUESTION
 381 ns.sub.example.com. IN AAAA
 382 SECTION AUTHORITY
 383 ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A
 384 ns.sub.example.com.     3600    IN      RRSIG   NSEC 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. eVe3iQS2/a1Y57AA2QSlMU/z31xaJ2mwUU36PZh8vlv6shPpQywAT70JdX6+ZsuliRpsbY6crkVXTXJ2qpKTiQ== ;{id = 30899}
 385 sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5
 386 sub.example.com.        3600    IN      RRSIG   SOA 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. vEX2n1CksMr5jPq9d2BQJMIDwxaXdWlY5mYg+PBmOFI4xngFMKTsXa/+SfJy2SiqAgHTDI6joIo30AdQJsjdHA== ;{id = 30899}
 387 ENTRY_END
 388
 389 ENTRY_BEGIN
 390 MATCH opcode qtype qname
 391 ADJUST copy_id
 392 REPLY QR AA NOERROR
 393 SECTION QUESTION
 394 www.sub.example.com. IN A
 395 SECTION ANSWER
 396 www.sub.example.com. IN A 10.20.30.40
 397 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. dBK6JOkKlp2G+f7mhInKnQM6DUBnEziTS+KpXzQ/5HT8/h9XkryOt4vAJKGCz0Ew3qRqjLgylsbGrcuxmIO9jA== ;{id = 30899}
 398 ENTRY_END
 399
 400 RANGE_END
 401
 402 ; ns.foo.com.
 403 RANGE_BEGIN 0 100
 404         ADDRESS 1.2.4.7
 405 ENTRY_BEGIN
 406 MATCH opcode qtype qname
 407 ADJUST copy_id
 408 REPLY QR AA NOERROR
 409 SECTION QUESTION
 410 sub.example.com. IN DNSKEY
 411 SECTION ANSWER
 412 sub.example.com.        3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 413 sub.example.com.        3600    IN      RRSIG   DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899}
 414 ENTRY_END
 415
 416 ENTRY_BEGIN
 417 MATCH opcode qtype qname
 418 ADJUST copy_id
 419 REPLY QR AA NOERROR
 420 SECTION QUESTION
 421 sub.example.com. IN NS
 422 SECTION ANSWER
 423 sub.example.com. IN NS ns.sub.example.com.
 424 ;sub.example.com. IN NS ns.foo.com.
 425 sub.example.com.        3600    IN      RRSIG   NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899}
 426 SECTION ADDITIONAL
 427 ns.sub.example.com. IN A 1.2.4.6
 428 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
 429 ENTRY_END
 430
 431 ENTRY_BEGIN
 432 MATCH opcode qtype qname
 433 ADJUST copy_id
 434 REPLY QR AA NOERROR
 435 SECTION QUESTION
 436 ns.sub.example.com. IN A
 437 SECTION ANSWER
 438 ns.sub.example.com. IN A 1.2.4.6
 439 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
 440 ENTRY_END
 441
 442 ENTRY_BEGIN
 443 MATCH opcode qtype qname
 444 ADJUST copy_id
 445 REPLY QR AA NOERROR
 446 SECTION QUESTION
 447 ns.sub.example.com. IN AAAA
 448 SECTION AUTHORITY
 449 ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A
 450 ns.sub.example.com.     3600    IN      RRSIG   NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899}
 451 sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5
 452 sub.example.com.        3600    IN      RRSIG   SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899}
 453 ENTRY_END
 454
 455 ENTRY_BEGIN
 456 MATCH opcode qtype qname
 457 ADJUST copy_id
 458 REPLY QR AA NOERROR
 459 SECTION QUESTION
 460 www.sub.example.com. IN A
 461 SECTION ANSWER
 462 www.sub.example.com. IN A 10.20.30.40
 463 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899}
 464 ENTRY_END
 465 RANGE_END
 466
 467 ; ns.sub.example.com.
 468 ; This is for after, so only new queries, no requeries allowed.
 469 RANGE_BEGIN 100 200
 470         ADDRESS 1.2.4.6
 471
 472 ENTRY_BEGIN
 473 MATCH opcode qtype qname
 474 ADJUST copy_id
 475 REPLY QR AA NOERROR
 476 SECTION QUESTION
 477 ftp.sub.example.com. IN A
 478 SECTION ANSWER
 479 ftp.sub.example.com. IN A 10.20.30.46
 480 ftp.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. nbxk6SiooKsUeVm/ZGskrxKwhOSWdJt9ly9X6Hqji4DKpBskM6bqulmTt/xZ/3G4ZOguYBeiTp8qwlWjl7VoSQ== ;{id = 30899}
 481 ENTRY_END
 482
 483 RANGE_END
 484
 485 ; ns.sub.example.com.
 486 ; fixed version
 487 RANGE_BEGIN 200 300
 488         ADDRESS 1.2.4.6
 489 ENTRY_BEGIN
 490 MATCH opcode qtype qname
 491 ADJUST copy_id
 492 REPLY QR AA NOERROR
 493 SECTION QUESTION
 494 sub.example.com. IN DNSKEY
 495 SECTION ANSWER
 496 sub.example.com.        3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 497 sub.example.com.        3600    IN      RRSIG   DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899}
 498 ENTRY_END
 499
 500 ENTRY_BEGIN
 501 MATCH opcode qtype qname
 502 ADJUST copy_id
 503 REPLY QR AA NOERROR
 504 SECTION QUESTION
 505 sub.example.com. IN NS
 506 SECTION ANSWER
 507 sub.example.com. IN NS ns.sub.example.com.
 508 ;sub.example.com. IN NS ns.foo.com.
 509 sub.example.com.        3600    IN      RRSIG   NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899}
 510 SECTION ADDITIONAL
 511 ns.sub.example.com. IN A 1.2.4.6
 512 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
 513 ENTRY_END
 514
 515 ENTRY_BEGIN
 516 MATCH opcode qtype qname
 517 ADJUST copy_id
 518 REPLY QR AA NOERROR
 519 SECTION QUESTION
 520 ns.sub.example.com. IN A
 521 SECTION ANSWER
 522 ns.sub.example.com. IN A 1.2.4.6
 523 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
 524 ENTRY_END
 525
 526 ENTRY_BEGIN
 527 MATCH opcode qtype qname
 528 ADJUST copy_id
 529 REPLY QR AA NOERROR
 530 SECTION QUESTION
 531 ns.sub.example.com. IN AAAA
 532 SECTION AUTHORITY
 533 ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A
 534 ns.sub.example.com.     3600    IN      RRSIG   NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899}
 535 sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5
 536 sub.example.com.        3600    IN      RRSIG   SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899}
 537 ENTRY_END
 538
 539 ENTRY_BEGIN
 540 MATCH opcode qtype qname
 541 ADJUST copy_id
 542 REPLY QR AA NOERROR
 543 SECTION QUESTION
 544 www.sub.example.com. IN A
 545 SECTION ANSWER
 546 www.sub.example.com. IN A 10.20.30.40
 547 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899}
 548 ENTRY_END
 549 RANGE_END
 550
 551 STEP 1 QUERY
 552 ENTRY_BEGIN
 553 REPLY RD DO
 554 SECTION QUESTION
 555 www.sub.example.com. IN A
 556 ENTRY_END
 557
 558 ; recursion happens here.
 559 STEP 10 CHECK_ANSWER
 560 ENTRY_BEGIN
 561 MATCH all
 562 REPLY QR RD RA DO SERVFAIL
 563 SECTION QUESTION
 564 www.sub.example.com. IN A
 565 SECTION ANSWER
 566 ENTRY_END
 567
 568 ; no more outgoing traffic possible.
 569 STEP 110 QUERY
 570 ENTRY_BEGIN
 571 REPLY RD DO
 572 SECTION QUESTION
 573 ftp.sub.example.com. IN A
 574 ENTRY_END
 575
 576 STEP 120 CHECK_ANSWER
 577 ENTRY_BEGIN
 578 MATCH all
 579 REPLY QR RD RA DO SERVFAIL
 580 SECTION QUESTION
 581 ftp.sub.example.com. IN A
 582 SECTION ANSWER
 583 ENTRY_END
 584
 585 ; wait for timeout seconds.
 586 STEP 130 TIME_PASSES ELAPSE 901
 587
 588 STEP 210 QUERY
 589 ENTRY_BEGIN
 590 REPLY RD DO
 591 SECTION QUESTION
 592 www.sub.example.com. IN A
 593 ENTRY_END
 594
 595 ; recursion happens here.
 596 STEP 220 CHECK_ANSWER
 597 ENTRY_BEGIN
 598 MATCH all
 599 REPLY QR RD RA AD DO NOERROR
 600 SECTION QUESTION
 601 www.sub.example.com. IN A
 602 SECTION ANSWER
 603 www.sub.example.com. IN A 10.20.30.40
 604 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899}
 605 ENTRY_END
 606
 607
 608 SCENARIO_END