unbound/testdata/black_ds_entry.rpl

   1 ; config options
   2 ; The island of trust is at example.com
   3 server:
   4         trust-anchor: "example.com.    3600    IN      DS      2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b"
   5         val-override-date: "20070916134226"
   6         target-fetch-policy: "0 0 0 0 0"
   7
   8 stub-zone:
   9         name: "."
  10         stub-addr: 193.0.14.129         # K.ROOT-SERVERS.NET.
  11 CONFIG_END
  12
  13 SCENARIO_BEGIN Test validator with blacked key entry for DS and further queries
  14 ; a DS record fails.
  15 ; the blacklist action does not help.
  16 ; the further queries should not generate traffic to the authority any more.
  17 ; until the key entry expires.
  18
  19 ; K.ROOT-SERVERS.NET.
  20 RANGE_BEGIN 0 100
  21         ADDRESS 193.0.14.129
  22 ENTRY_BEGIN
  23 MATCH opcode qtype qname
  24 ADJUST copy_id
  25 REPLY QR NOERROR
  26 SECTION QUESTION
  27 . IN NS
  28 SECTION ANSWER
  29 . IN NS K.ROOT-SERVERS.NET.
  30 SECTION ADDITIONAL
  31 K.ROOT-SERVERS.NET.     IN      A       193.0.14.129
  32 ENTRY_END
  33
  34 ENTRY_BEGIN
  35 MATCH opcode subdomain
  36 ADJUST copy_id copy_query
  37 REPLY QR NOERROR
  38 SECTION QUESTION
  39 com. IN A
  40 SECTION AUTHORITY
  41 com.    IN NS   a.gtld-servers.net.
  42 SECTION ADDITIONAL
  43 a.gtld-servers.net.     IN      A       192.5.6.30
  44 ENTRY_END
  45 RANGE_END
  46
  47 ; a.gtld-servers.net.
  48 RANGE_BEGIN 0 100
  49         ADDRESS 192.5.6.30
  50 ENTRY_BEGIN
  51 MATCH opcode qtype qname
  52 ADJUST copy_id
  53 REPLY QR NOERROR
  54 SECTION QUESTION
  55 com. IN NS
  56 SECTION ANSWER
  57 com.    IN NS   a.gtld-servers.net.
  58 SECTION ADDITIONAL
  59 a.gtld-servers.net.     IN      A       192.5.6.30
  60 ENTRY_END
  61
  62 ENTRY_BEGIN
  63 MATCH opcode qtype qname
  64 ADJUST copy_id
  65 REPLY QR NOERROR
  66 SECTION QUESTION
  67 ns.blabla.com. IN A
  68 SECTION ANSWER
  69 ns.blabla.com. IN A 1.2.3.5
  70 ENTRY_END
  71
  72 ENTRY_BEGIN
  73 MATCH opcode qtype qname
  74 ADJUST copy_id
  75 REPLY QR NOERROR
  76 SECTION QUESTION
  77 ns.blabla.com. IN AAAA
  78 SECTION AUTHORITY
  79 com. IN SOA com. com. 2009100100 28800 7200 604800 3600
  80 ENTRY_END
  81
  82 ENTRY_BEGIN
  83 MATCH opcode qtype qname
  84 ADJUST copy_id
  85 REPLY QR NOERROR
  86 SECTION QUESTION
  87 ns.foo.com. IN A
  88 SECTION ANSWER
  89 ns.foo.com. IN A 1.2.4.7
  90 ENTRY_END
  91
  92 ENTRY_BEGIN
  93 MATCH opcode qtype qname
  94 ADJUST copy_id
  95 REPLY QR NOERROR
  96 SECTION QUESTION
  97 ns.foo.com. IN AAAA
  98 SECTION AUTHORITY
  99 com. IN SOA com. com. 2009100100 28800 7200 604800 3600
 100 ENTRY_END
 101
 102 ENTRY_BEGIN
 103 MATCH opcode subdomain
 104 ADJUST copy_id copy_query
 105 REPLY QR NOERROR
 106 SECTION QUESTION
 107 example.com. IN NS
 108 SECTION AUTHORITY
 109 example.com.    IN NS   ns.example.com.
 110 ;example.com.   IN NS   ns.blabla.com.
 111 SECTION ADDITIONAL
 112 ns.example.com.         IN      A       1.2.3.4
 113 ENTRY_END
 114 RANGE_END
 115
 116 ; ns.example.com.
 117 RANGE_BEGIN 0 100
 118         ADDRESS 1.2.3.4
 119 ENTRY_BEGIN
 120 MATCH opcode qtype qname
 121 ADJUST copy_id
 122 REPLY QR NOERROR
 123 SECTION QUESTION
 124 example.com. IN NS
 125 SECTION ANSWER
 126 example.com.    IN NS   ns.example.com.
 127 ;example.com.    IN NS   ns.blabla.com.
 128 example.com.    3600    IN      RRSIG   NS 3 2 3600 20030926134150 20030829134150 2854 example.com. AKJ3xUBdSrCiOFkYajsy93d+h06rewpbmBHItTkL8R/26rw57b1gCIg= ;{id = 2854}
 129 SECTION ADDITIONAL
 130 ns.example.com.         IN      A       1.2.3.4
 131 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854}
 132 ENTRY_END
 133
 134 ENTRY_BEGIN
 135 MATCH opcode qtype qname
 136 ADJUST copy_id
 137 REPLY QR NOERROR
 138 SECTION QUESTION
 139 ns.example.com. IN A
 140 SECTION ANSWER
 141 ns.example.com.         IN      A       1.2.3.4
 142 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854}
 143 SECTION ADDITIONAL
 144 ENTRY_END
 145
 146 ENTRY_BEGIN
 147 MATCH opcode qtype qname
 148 ADJUST copy_id
 149 REPLY QR NOERROR
 150 SECTION QUESTION
 151 ns.example.com. IN AAAA
 152 SECTION ANSWER
 153 SECTION ADDITIONAL
 154 ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A
 155 ns.example.com. 3600    IN      RRSIG   NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. ACFVLLBtuSX/1z3461tbOwDz9zTHe5S9DbVtwnSO1f2x06fYbMpzSDE= ;{id = 2854}
 156 ENTRY_END
 157
 158 ; response to DNSKEY priming query
 159 ENTRY_BEGIN
 160 MATCH opcode qtype qname
 161 ADJUST copy_id
 162 REPLY QR NOERROR
 163 SECTION QUESTION
 164 example.com. IN DNSKEY
 165 SECTION ANSWER
 166 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 167 ; make priming query succeed
 168 example.com.    3600    IN      RRSIG   DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
 169 ;example.com.   3600    IN      RRSIG   DNSKEY 3 2 3600 20030926134150 20030829134150 2854 example.com. AG21xE8CFQzTq6XtHErg28b9EAmqPsoYCUcFPEAoAjFybM6AY4/bMOo= ;{id = 2854}
 170 SECTION AUTHORITY
 171 ;example.com.    IN NS   ns.example.com.
 172 ;example.com.    IN NS   ns.blabla.com.
 173 ;example.com.   3600    IN      RRSIG   NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACiWu7zjBHqgEX3iUoOF7rfpOmIAHj1npKQ+XDIaNlmdkfJxoCwFl04= ;{id = 2854}
 174 SECTION ADDITIONAL
 175 ;ns.example.com.                IN      A       1.2.3.4
 176 ;ns.example.com.        3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. ACmAsKTf7hqDaYK8CQ7FL1cGYPW+blTCnzZGkExFtEUAGrHeze87o+A= ;{id = 2854}
 177 ENTRY_END
 178
 179 ENTRY_BEGIN
 180 MATCH opcode qtype qname
 181 ADJUST copy_id
 182 REPLY QR NOERROR
 183 SECTION QUESTION
 184 www.example.com. IN A
 185 SECTION ANSWER
 186 www.example.com. IN A   10.20.30.40
 187 www.example.com.        3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGj9kE8oW3OhOLhkmJ3HBaNIOpvGf3S8zSd5gWmhpxAMc5hh6cxZfpQ= ;{id = 2854}
 188 SECTION AUTHORITY
 189 example.com.    IN NS   ns.example.com.
 190 ;example.com.    IN NS   ns.blabla.com.
 191 example.com.    3600    IN      RRSIG   NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACHETweBNPgbmRoNRdKvxuw4X9qNUUTEpSuwV+HhuiBE83gbB98asAc= ;{id = 2854}
 192 SECTION ADDITIONAL
 193 ns.example.com.         IN      A       1.2.3.4
 194 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGvu9A/nGsbatxJCmnObioIhKg2Tm0Apr0eo+DO1kIDrAHco/bt/EdY= ;{id = 2854}
 195 ENTRY_END
 196
 197 ; DS request
 198 ENTRY_BEGIN
 199 MATCH opcode qtype qname
 200 ADJUST copy_id
 201 REPLY QR AA NOERROR
 202 SECTION QUESTION
 203 sub.example.com. IN DS
 204 SECTION ANSWER
 205 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 206 ;sub.example.com.       3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 207 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854}
 208 ENTRY_END
 209
 210 ENTRY_BEGIN
 211 MATCH opcode subdomain
 212 ADJUST copy_id copy_query
 213 REPLY QR AA NOERROR
 214 SECTION QUESTION
 215 sub.example.com. IN NS
 216 SECTION AUTHORITY
 217 sub.example.com. IN NS ns.sub.example.com.
 218 ;sub.example.com. IN NS ns.foo.com.
 219 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 220 ;sub.example.com.       3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 221 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854}
 222 SECTION ADDITIONAL
 223 ns.sub.example.com. IN A 1.2.4.6
 224 ENTRY_END
 225
 226 RANGE_END
 227
 228 ; ns.blabla.com.
 229 RANGE_BEGIN 0 100
 230         ADDRESS 1.2.3.5
 231 ENTRY_BEGIN
 232 MATCH opcode qtype qname
 233 ADJUST copy_id
 234 REPLY QR NOERROR
 235 SECTION QUESTION
 236 example.com. IN NS
 237 SECTION ANSWER
 238 example.com.    IN NS   ns.example.com.
 239 example.com.    IN NS   ns.blabla.com.
 240 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
 241 SECTION ADDITIONAL
 242 ns.example.com.         IN      A       1.2.3.4
 243 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 244 ENTRY_END
 245
 246 ENTRY_BEGIN
 247 MATCH opcode qtype qname
 248 ADJUST copy_id
 249 REPLY QR NOERROR
 250 SECTION QUESTION
 251 ns.example.com. IN A
 252 SECTION ANSWER
 253 ns.example.com.         IN      A       1.2.3.4
 254 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 255 SECTION ADDITIONAL
 256 ENTRY_END
 257
 258 ENTRY_BEGIN
 259 MATCH opcode qtype qname
 260 ADJUST copy_id
 261 REPLY QR NOERROR
 262 SECTION QUESTION
 263 ns.example.com. IN AAAA
 264 SECTION ANSWER
 265 SECTION ADDITIONAL
 266 ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A
 267 ns.example.com. 3600    IN      RRSIG   NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. ABhDNtJramb2a4R1SK5gb/CTYJybQts6mZ++z3kLiwsrUSZInA4ikeQ= ;{id = 2854}
 268 ENTRY_END
 269
 270 ; response to DNSKEY priming query
 271 ENTRY_BEGIN
 272 MATCH opcode qtype qname
 273 ADJUST copy_id
 274 REPLY QR NOERROR
 275 SECTION QUESTION
 276 example.com. IN DNSKEY
 277 SECTION ANSWER
 278 example.com.    3600    IN      DNSKEY  256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b}
 279 example.com.    3600    IN      RRSIG   DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854}
 280 SECTION AUTHORITY
 281 example.com.    IN NS   ns.example.com.
 282 example.com.    IN NS   ns.blabla.com.
 283 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
 284 SECTION ADDITIONAL
 285 ns.example.com.         IN      A       1.2.3.4
 286 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854}
 287 ENTRY_END
 288
 289 ENTRY_BEGIN
 290 MATCH opcode qtype qname
 291 ADJUST copy_id
 292 REPLY QR NOERROR
 293 SECTION QUESTION
 294 www.example.com. IN A
 295 SECTION ANSWER
 296 www.example.com. IN A   10.20.30.40
 297 ns.example.com. 3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854}
 298 SECTION AUTHORITY
 299 example.com.    IN NS   ns.example.com.
 300 example.com.    IN NS   ns.blabla.com.
 301 example.com.    3600    IN      RRSIG   NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854}
 302 SECTION ADDITIONAL
 303 ns.example.com.         IN      A       1.2.3.4
 304 www.example.com.        3600    IN      RRSIG   A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854}
 305 ENTRY_END
 306
 307 ; DS request
 308 ENTRY_BEGIN
 309 MATCH opcode qtype qname
 310 ADJUST copy_id
 311 REPLY QR AA NOERROR
 312 SECTION QUESTION
 313 sub.example.com. IN DS
 314 SECTION ANSWER
 315 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 316 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 317 ENTRY_END
 318
 319 ENTRY_BEGIN
 320 MATCH opcode subdomain
 321 ADJUST copy_id copy_query
 322 REPLY QR AA NOERROR
 323 SECTION QUESTION
 324 sub.example.com. IN NS
 325 SECTION AUTHORITY
 326 sub.example.com. IN NS ns.sub.example.com.
 327 ;sub.example.com. IN NS ns.foo.com.
 328 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 329 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 330 SECTION ADDITIONAL
 331 ns.sub.example.com. IN A 1.2.4.6
 332 ENTRY_END
 333
 334 RANGE_END
 335
 336 ; ns.sub.example.com.
 337 RANGE_BEGIN 0 100
 338         ADDRESS 1.2.4.6
 339 ENTRY_BEGIN
 340 MATCH opcode qtype qname
 341 ADJUST copy_id
 342 REPLY QR AA NOERROR
 343 SECTION QUESTION
 344 sub.example.com. IN DNSKEY
 345 SECTION ANSWER
 346 sub.example.com.        3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 347 sub.example.com.        3600    IN      RRSIG   DNSKEY 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. g+YoDwrCF75YCFyqYoxlF+/mNfcscnuZ6LfmfBgPLohlvCCC7jYj/wkc2fxAl3MEK0CriWkHp1hw0QQYkmbbKw== ;{id = 30899}
 348 ENTRY_END
 349
 350 ENTRY_BEGIN
 351 MATCH opcode qtype qname
 352 ADJUST copy_id
 353 REPLY QR AA NOERROR
 354 SECTION QUESTION
 355 sub.example.com. IN NS
 356 SECTION ANSWER
 357 sub.example.com. IN NS ns.sub.example.com.
 358 ;sub.example.com. IN NS ns.foo.com.
 359 sub.example.com.        3600    IN      RRSIG   NS 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. VCDq+gfZHuziE81Uypxm2va4eXCtoD8F8YKkwNo8laMNUcXh/hvGdbHKXMMghwuJXgxLh89Diu5kywBVwb/AIg== ;{id = 30899}
 360 SECTION ADDITIONAL
 361 ns.sub.example.com. IN A 1.2.4.6
 362 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899}
 363 ENTRY_END
 364
 365 ENTRY_BEGIN
 366 MATCH opcode qtype qname
 367 ADJUST copy_id
 368 REPLY QR AA NOERROR
 369 SECTION QUESTION
 370 ns.sub.example.com. IN A
 371 SECTION ANSWER
 372 ns.sub.example.com. IN A 1.2.4.6
 373 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899}
 374 ENTRY_END
 375
 376 ENTRY_BEGIN
 377 MATCH opcode qtype qname
 378 ADJUST copy_id
 379 REPLY QR AA NOERROR
 380 SECTION QUESTION
 381 ns.sub.example.com. IN AAAA
 382 SECTION AUTHORITY
 383 ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A
 384 ns.sub.example.com.     3600    IN      RRSIG   NSEC 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. eVe3iQS2/a1Y57AA2QSlMU/z31xaJ2mwUU36PZh8vlv6shPpQywAT70JdX6+ZsuliRpsbY6crkVXTXJ2qpKTiQ== ;{id = 30899}
 385 sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5
 386 sub.example.com.        3600    IN      RRSIG   SOA 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. vEX2n1CksMr5jPq9d2BQJMIDwxaXdWlY5mYg+PBmOFI4xngFMKTsXa/+SfJy2SiqAgHTDI6joIo30AdQJsjdHA== ;{id = 30899}
 387 ENTRY_END
 388
 389 ENTRY_BEGIN
 390 MATCH opcode qtype qname
 391 ADJUST copy_id
 392 REPLY QR AA NOERROR
 393 SECTION QUESTION
 394 www.sub.example.com. IN A
 395 SECTION ANSWER
 396 www.sub.example.com. IN A 10.20.30.40
 397 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. dBK6JOkKlp2G+f7mhInKnQM6DUBnEziTS+KpXzQ/5HT8/h9XkryOt4vAJKGCz0Ew3qRqjLgylsbGrcuxmIO9jA== ;{id = 30899}
 398 ENTRY_END
 399
 400 RANGE_END
 401
 402 ; ns.foo.com.
 403 RANGE_BEGIN 0 100
 404         ADDRESS 1.2.4.7
 405 ENTRY_BEGIN
 406 MATCH opcode qtype qname
 407 ADJUST copy_id
 408 REPLY QR AA NOERROR
 409 SECTION QUESTION
 410 sub.example.com. IN DNSKEY
 411 SECTION ANSWER
 412 sub.example.com.        3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 413 sub.example.com.        3600    IN      RRSIG   DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899}
 414 ENTRY_END
 415
 416 ENTRY_BEGIN
 417 MATCH opcode qtype qname
 418 ADJUST copy_id
 419 REPLY QR AA NOERROR
 420 SECTION QUESTION
 421 sub.example.com. IN NS
 422 SECTION ANSWER
 423 sub.example.com. IN NS ns.sub.example.com.
 424 ;sub.example.com. IN NS ns.foo.com.
 425 sub.example.com.        3600    IN      RRSIG   NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899}
 426 SECTION ADDITIONAL
 427 ns.sub.example.com. IN A 1.2.4.6
 428 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
 429 ENTRY_END
 430
 431 ENTRY_BEGIN
 432 MATCH opcode qtype qname
 433 ADJUST copy_id
 434 REPLY QR AA NOERROR
 435 SECTION QUESTION
 436 ns.sub.example.com. IN A
 437 SECTION ANSWER
 438 ns.sub.example.com. IN A 1.2.4.6
 439 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
 440 ENTRY_END
 441
 442 ENTRY_BEGIN
 443 MATCH opcode qtype qname
 444 ADJUST copy_id
 445 REPLY QR AA NOERROR
 446 SECTION QUESTION
 447 ns.sub.example.com. IN AAAA
 448 SECTION AUTHORITY
 449 ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A
 450 ns.sub.example.com.     3600    IN      RRSIG   NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899}
 451 sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5
 452 sub.example.com.        3600    IN      RRSIG   SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899}
 453 ENTRY_END
 454
 455 ENTRY_BEGIN
 456 MATCH opcode qtype qname
 457 ADJUST copy_id
 458 REPLY QR AA NOERROR
 459 SECTION QUESTION
 460 www.sub.example.com. IN A
 461 SECTION ANSWER
 462 www.sub.example.com. IN A 10.20.30.40
 463 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899}
 464 ENTRY_END
 465 RANGE_END
 466
 467 ; ns.sub.example.com.
 468 ; This is for after, so only new queries, no requeries allowed.
 469 RANGE_BEGIN 100 200
 470         ADDRESS 1.2.4.6
 471
 472 ENTRY_BEGIN
 473 MATCH opcode qtype qname
 474 ADJUST copy_id
 475 REPLY QR AA NOERROR
 476 SECTION QUESTION
 477 ftp.sub.example.com. IN A
 478 SECTION ANSWER
 479 ftp.sub.example.com. IN A 10.20.30.46
 480 ftp.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. nbxk6SiooKsUeVm/ZGskrxKwhOSWdJt9ly9X6Hqji4DKpBskM6bqulmTt/xZ/3G4ZOguYBeiTp8qwlWjl7VoSQ== ;{id = 30899}
 481 ENTRY_END
 482
 483 RANGE_END
 484
 485 ; ns.example.com.
 486 ; fixed version
 487 RANGE_BEGIN 200 300
 488         ADDRESS 1.2.3.4
 489 ; DS request
 490 ENTRY_BEGIN
 491 MATCH opcode qtype qname
 492 ADJUST copy_id
 493 REPLY QR AA NOERROR
 494 SECTION QUESTION
 495 sub.example.com. IN DS
 496 SECTION ANSWER
 497 sub.example.com.        3600    IN      DS      30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3
 498 sub.example.com.        3600    IN      RRSIG   DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854}
 499 ENTRY_END
 500
 501 RANGE_END
 502
 503 ; ns.sub.example.com.
 504 ; fixed version
 505 RANGE_BEGIN 200 300
 506         ADDRESS 1.2.4.6
 507 ENTRY_BEGIN
 508 MATCH opcode qtype qname
 509 ADJUST copy_id
 510 REPLY QR AA NOERROR
 511 SECTION QUESTION
 512 sub.example.com. IN DNSKEY
 513 SECTION ANSWER
 514 sub.example.com.        3600    IN      DNSKEY  256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b}
 515 sub.example.com.        3600    IN      RRSIG   DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899}
 516 ENTRY_END
 517
 518 ENTRY_BEGIN
 519 MATCH opcode qtype qname
 520 ADJUST copy_id
 521 REPLY QR AA NOERROR
 522 SECTION QUESTION
 523 sub.example.com. IN NS
 524 SECTION ANSWER
 525 sub.example.com. IN NS ns.sub.example.com.
 526 ;sub.example.com. IN NS ns.foo.com.
 527 sub.example.com.        3600    IN      RRSIG   NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899}
 528 SECTION ADDITIONAL
 529 ns.sub.example.com. IN A 1.2.4.6
 530 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
 531 ENTRY_END
 532
 533 ENTRY_BEGIN
 534 MATCH opcode qtype qname
 535 ADJUST copy_id
 536 REPLY QR AA NOERROR
 537 SECTION QUESTION
 538 ns.sub.example.com. IN A
 539 SECTION ANSWER
 540 ns.sub.example.com. IN A 1.2.4.6
 541 ns.sub.example.com.     3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899}
 542 ENTRY_END
 543
 544 ENTRY_BEGIN
 545 MATCH opcode qtype qname
 546 ADJUST copy_id
 547 REPLY QR AA NOERROR
 548 SECTION QUESTION
 549 ns.sub.example.com. IN AAAA
 550 SECTION AUTHORITY
 551 ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A
 552 ns.sub.example.com.     3600    IN      RRSIG   NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899}
 553 sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5
 554 sub.example.com.        3600    IN      RRSIG   SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899}
 555 ENTRY_END
 556
 557 ENTRY_BEGIN
 558 MATCH opcode qtype qname
 559 ADJUST copy_id
 560 REPLY QR AA NOERROR
 561 SECTION QUESTION
 562 www.sub.example.com. IN A
 563 SECTION ANSWER
 564 www.sub.example.com. IN A 10.20.30.40
 565 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899}
 566 ENTRY_END
 567 RANGE_END
 568
 569 STEP 1 QUERY
 570 ENTRY_BEGIN
 571 REPLY RD DO
 572 SECTION QUESTION
 573 www.sub.example.com. IN A
 574 ENTRY_END
 575
 576 ; recursion happens here.
 577 STEP 10 CHECK_ANSWER
 578 ENTRY_BEGIN
 579 MATCH all
 580 REPLY QR RD RA DO SERVFAIL
 581 SECTION QUESTION
 582 www.sub.example.com. IN A
 583 SECTION ANSWER
 584 ENTRY_END
 585
 586 ; no more outgoing traffic possible.
 587 STEP 110 QUERY
 588 ENTRY_BEGIN
 589 REPLY RD DO
 590 SECTION QUESTION
 591 ftp.sub.example.com. IN A
 592 ENTRY_END
 593
 594 STEP 120 CHECK_ANSWER
 595 ENTRY_BEGIN
 596 MATCH all
 597 REPLY QR RD RA DO SERVFAIL
 598 SECTION QUESTION
 599 ftp.sub.example.com. IN A
 600 SECTION ANSWER
 601 ENTRY_END
 602
 603 ; wait for timeout seconds.
 604 STEP 130 TIME_PASSES ELAPSE 901
 605
 606 STEP 210 QUERY
 607 ENTRY_BEGIN
 608 REPLY RD DO
 609 SECTION QUESTION
 610 www.sub.example.com. IN A
 611 ENTRY_END
 612
 613 ; recursion happens here.
 614 STEP 220 CHECK_ANSWER
 615 ENTRY_BEGIN
 616 MATCH all
 617 REPLY QR RD RA AD DO NOERROR
 618 SECTION QUESTION
 619 www.sub.example.com. IN A
 620 SECTION ANSWER
 621 www.sub.example.com. IN A 10.20.30.40
 622 www.sub.example.com.    3600    IN      RRSIG   A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899}
 623 ENTRY_END
 624
 625
 626 SCENARIO_END