1; test with real world Internet data 2; attempt to resolve www.nic.mx A leads to CNAME www.nicmexico.mx. 3; sub-tree nic.mx is not signed and nixmexico.mx is signed. 4; the answer must not have AD flag set! 5 6val-override-date: 20170124180319 7trust-anchor: ". 172800 IN DS 19036 8 2 49aac11d7b6f6446702e54a1607371607a1a41855200fd2ce1cdde32f24e8fb5" 8stub-addr: 2001:dc3::35 9stub-name: m.root-servers.net 10; we have added missing A/AAAA records for NS names too late 11; when validity of original RRSIGs expired 12; => we disable validation for mx. NS names to avoid need to resign whole test 13domain-insecure: mx-ns.mx. 14do-ip4: false 15CONFIG_END 16 17SCENARIO_BEGIN www.nic.mx. CNAME kresd issue #144 18 19; DNS root ; M.ROOT-SERVERS.NET. 20RANGE_BEGIN 0 100 21 ADDRESS 2001:dc3::35 22 23ENTRY_BEGIN 24MATCH opcode qtype qname 25ADJUST copy_id 26REPLY QR AA NOERROR 27SECTION QUESTION 28m.root-servers.net. IN AAAA 29SECTION ANSWER 30m.root-servers.net. 3600 IN AAAA 2001:dc3::35 31ENTRY_END 32 33ENTRY_BEGIN 34MATCH opcode qtype qname 35ADJUST copy_id 36REPLY QR AA NOERROR 37SECTION QUESTION 38m.root-servers.net. IN A 39SECTION ANSWER 40ENTRY_END 41 42ENTRY_BEGIN 43MATCH opcode qtype qname 44ADJUST copy_id 45REPLY QR AA NOERROR 46SECTION QUESTION 47net. IN NS 48SECTION ANSWER 49net. 3600 IN NS m.root-servers.net. 50SECTION ADDITIONAL 51m.root-servers.net. 3600 IN AAAA 2001:dc3::35 52ENTRY_END 53 54ENTRY_BEGIN 55MATCH opcode qtype qname 56ADJUST copy_id 57REPLY QR AA NOERROR 58SECTION QUESTION 59root-servers.net. IN NS 60SECTION ANSWER 61root-servers.net. 3600 IN NS m.root-servers.net. 62SECTION ADDITIONAL 63m.root-servers.net. 3600 IN AAAA 2001:dc3::35 64ENTRY_END 65 66ENTRY_BEGIN 67MATCH opcode qtype qname 68ADJUST copy_id 69REPLY QR AA NOERROR 70SECTION QUESTION 71net. IN DS 72SECTION ANSWER 73ENTRY_END 74 75ENTRY_BEGIN 76MATCH opcode qtype qname 77ADJUST copy_id 78REPLY QR AA DO NOERROR 79SECTION QUESTION 80. IN DNSKEY 81SECTION ANSWER 82. 16567 IN DNSKEY 257 3 8 AwEAAagAIKlVZrpC6Ia7gEzahOR+9W29euxhJhVVLOyQbSEW0O8gcCjF FVQUTf6v58fLjwBd0YI0EzrAcQqBGCzh/RStIoO8g0NfnfL2MTJRkxoX bfDaUeVPQuYEhg37NZWAJQ9VnMVDxP/VHL496M/QZxkjf5/Efucp2gaD X6RS6CXpoY68LsvPVjR0ZSwzz1apAzvN9dlzEheX7ICJBBtuA6G3LQpz W5hOA2hzCTMjJPJ8LbqF6dsV6DoBQzgul0sGIcGOYl7OyQdXfZ57relS Qageu+ipAdTTJ25AsRTAoub8ONGcLmqrAmRLKBP1dfwhYB4N7knNnulq QxA+Uk1ihz0= 83. 16567 IN DNSKEY 256 3 8 AwEAAYvgWbYkpeGgdPKaKTJU3Us4YSTRgy7+dzvfArIhi2tKoZ/WR1Df w883SOU6Uw7tpVRkLarN0oIMK/xbOBD1DcXnyfElBwKsz4sVVWmfyr/x +igD/UjrcJ5zEBUrUmVtHyjar7ccaVc1/3ntkhZjI1hcungAlOhPhHlk MeX+5Azx6GdX//An5OgrdyH3o/JmOPMDX1mt806JI/hf0EwAp1pBwo5e 8SrSuR1tD3sgNjr6IzCdrKSgqi92z49zcdis3EaY199WFW60DCS7ydu+ +T5Xa+GyOw1quagwf/JUC/mEpeBQYWrnpkBbpDB3sy4+P2i8iCvavehb RyVm9U0MlIc= 84. 16567 IN RRSIG DNSKEY 8 0 172800 20170201000000 20170111000000 19036 . Sh+EpofvZgk3J9szMD2B94FxFgyIUKz3hkbCjgWSTqPQyhqNgqVU8QlS EtOo8YLmS4AX98eit5Gmmb2ObpkGoXBmAzu5w/Qt5WsGsWzLQhYrsy9s lDmFQ2JKUoCyfdwqhlJ8VxjzdFdMUiVl+/GPnv4yjxjM8Ke3VAtBkn6n BO7JkcxxOfcgZdZ4MuvSr40K/SenZE+JlLLL1LF4TMCGqaZTTdOx6kFF KSSgy2AS884htWcK0tnwRc630g6nAI2wdvjlRLBeisbfXanI4v8iiPyT FnMmnV7wJGWJ4gtRJ0UH3u5RWXUPZ+s1tKytk3slXbLyQ9xkEDveuD+h b659gQ== 85ENTRY_END 86 87ENTRY_BEGIN 88MATCH opcode subdomain 89ADJUST copy_id copy_query 90REPLY QR DO NOERROR 91SECTION QUESTION 92mx. IN NS 93SECTION AUTHORITY 94mx. 172800 IN NS c.mx-ns.mx. 95mx. 172800 IN NS m.mx-ns.mx. 96mx. 172800 IN NS e.mx-ns.mx. 97mx. 172800 IN NS i.mx-ns.mx. 98mx. 172800 IN NS o.mx-ns.mx. 99mx. 172800 IN NS x.mx-ns.mx. 100mx. 86400 IN DS 55955 8 2 3d7f3313e86341ec23a02f8ed837572d62cf74bf175ac8b2f19b1e2b8930b0d5 101mx. 86400 IN RRSIG DS 8 1 86400 20170206050000 20170124040000 61045 . DYmv0z7EnlUOu081yDzeh3tourMFyYtBv7IKIiwPN5ZXuHmw0PvqT0oU//DomnA0NdfCRizOSmvDlZITNtlTffEA3mudnbPC+TEpdf1nffHLHQPnjcS0U+zfoBvRK0OHha3J7YgSXFQuCskJAg4P6ktPzgcd2ccv/FRlzzw4CrZOE3AtDWir31xt8c8DxZjysjIptblua7o9kwac+biWoszUl+sJBAXGbn0XXMloTAisYHyyZF9YeTRz3er8gyao8ynRe2KgUZPX4ieVQl+BsXDOmVRYLE8l4hLSRanjoWOR3gAqQUHJwn9xXxhGfApe5tUhaCE7v1EplCw9ykaKVA== 102SECTION ADDITIONAL 103c.mx-ns.mx. 172800 IN A 192.100.224.1 104e.mx-ns.mx. 172800 IN A 189.201.244.1 105i.mx-ns.mx. 172800 IN A 207.248.68.1 106m.mx-ns.mx. 172800 IN A 200.94.176.1 107o.mx-ns.mx. 172800 IN A 200.23.1.1 108x.mx-ns.mx. 172800 IN A 201.131.252.1 109c.mx-ns.mx. 172800 IN AAAA 2001:1258::1 110m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1 111; added AAAA records to stop resolver from asking for them later 112o.mx-ns.mx. 172800 IN AAAA 2001:1258::1 113i.mx-ns.mx. 172800 IN AAAA 2001:1258::1 114x.mx-ns.mx. 172800 IN AAAA 2001:1258::1 115e.mx-ns.mx. 172800 IN AAAA 2001:1258::1 116ENTRY_END 117; end of M.ROOT-SERVERS.NET. 118RANGE_END 119 120; ?.mx-ns.mx. 121RANGE_BEGIN 0 100 122 ADDRESS 192.100.224.1 123 ADDRESS 189.201.244.1 124 ADDRESS 207.248.68.1 125 ADDRESS 200.94.176.1 126 ADDRESS 200.23.1.1 127 ADDRESS 201.131.252.1 128 ADDRESS 2001:1258::1 129 ADDRESS 2001:13c7:7000::1 130 131ENTRY_BEGIN 132MATCH opcode qname qtype 133ADJUST copy_id 134REPLY QR NOERROR 135SECTION QUESTION 136mx-ns.mx. IN NS 137SECTION ANSWER 138mx-ns.mx. 172800 IN NS c.mx-ns.mx. 139mx-ns.mx. 172800 IN NS m.mx-ns.mx. 140mx-ns.mx. 172800 IN NS e.mx-ns.mx. 141mx-ns.mx. 172800 IN NS i.mx-ns.mx. 142mx-ns.mx. 172800 IN NS o.mx-ns.mx. 143mx-ns.mx. 172800 IN NS x.mx-ns.mx. 144SECTION ADDITIONAL 145c.mx-ns.mx. 172800 IN A 192.100.224.1 146e.mx-ns.mx. 172800 IN A 189.201.244.1 147i.mx-ns.mx. 172800 IN A 207.248.68.1 148m.mx-ns.mx. 172800 IN A 200.94.176.1 149o.mx-ns.mx. 172800 IN A 200.23.1.1 150x.mx-ns.mx. 172800 IN A 201.131.252.1 151o.mx-ns.mx. 172800 IN AAAA 2001:1258::1 152i.mx-ns.mx. 172800 IN AAAA 2001:1258::1 153x.mx-ns.mx. 172800 IN AAAA 2001:1258::1 154e.mx-ns.mx. 172800 IN AAAA 2001:1258::1 155c.mx-ns.mx. 172800 IN AAAA 2001:1258::1 156m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1 157ENTRY_END 158 159ENTRY_BEGIN 160MATCH opcode qname qtype 161ADJUST copy_id 162REPLY QR AA NOERROR 163SECTION QUESTION 164mx-ns.mx. IN DS 165SECTION ANSWER 166ENTRY_END 167 168ENTRY_BEGIN 169MATCH opcode qname qtype 170ADJUST copy_id 171REPLY QR AA NOERROR 172SECTION QUESTION 173i.mx-ns.mx. IN AAAA 174SECTION ANSWER 175ENTRY_END 176 177ENTRY_BEGIN 178MATCH opcode qname qtype 179ADJUST copy_id 180REPLY QR AA NOERROR 181SECTION QUESTION 182e.mx-ns.mx. IN AAAA 183SECTION ANSWER 184ENTRY_END 185 186ENTRY_BEGIN 187MATCH opcode qname qtype 188ADJUST copy_id 189REPLY QR AA NOERROR 190SECTION QUESTION 191x.mx-ns.mx. IN AAAA 192SECTION ANSWER 193ENTRY_END 194 195ENTRY_BEGIN 196MATCH opcode qname qtype 197ADJUST copy_id 198REPLY QR AA NOERROR 199SECTION QUESTION 200o.mx-ns.mx. IN AAAA 201SECTION ANSWER 202ENTRY_END 203 204ENTRY_BEGIN 205MATCH opcode qtype qname 206ADJUST copy_id 207REPLY QR AA RD NOERROR 208SECTION QUESTION 209mx. IN DNSKEY 210SECTION ANSWER 211mx. 86400 IN DNSKEY 257 3 8 AwEAAcokawGJMW4OI1eas0vAtfl0etrPSlqkh7n/JPpdMt5fplkWI0oo YS3kYBXYzMxXnpNOK57jp5JodELeZKDrHCrUhAzZiy5iJQDy9Qi85mSC KTHg32+JKjXiMEkTZUlOzNRrXC7apWfZbzbx98CnzkWw0Xj2wDIniptM jnwAJeb8L+Mm5AzZSkUugga/eDvpVsT5MZZnT/DuJdxS5olx+HyTKLct m/LDljtQKJya0UtXUKkVc5cv8y+ja5AivjXXrUmDcgd1P6bntcbjpcFY UuLZMsmyOZ2uViXNEhIdBcP+davulxW++DawqOtvnpuRxfLFsuYw/vDC ilfIGEdgz20= 212mx. 86400 IN DNSKEY 256 3 8 AwEAAcwqWcnh23qhQTbWsbOKbRI4btNQCYRa4ksadH8VjQ++VruqkhPu d7e/RsZMhevCWDJHrjfJ739NmiGIwS58uh1sVACfKRmxLP25/1V9frIi HBxkaVLXPAHm8+ApIhzUzaUTUrmSnDm0/wJryo34zETnA6J4czfzYDLX Vqh3KVtL 213mx. 86400 IN RRSIG DNSKEY 8 1 86400 20170223000000 20170124000000 48529 mx. BYGaUXiyB0vIi4sBwvUuL2Im+zcIpykZD96YdvA3Kpk7RlV3LcLD9L6B +HpwFWMRZ+vt09YW/jrzSR9mlXpZeWR6BhHoo9f2MGOO5dwejnUuipLD +t5wKi91XALmaRN4Z2ptdJ0wVMpfXlkfrNTB+RvYAqx/azDGw5Ewjh7C J5Y= 214mx. 86400 IN RRSIG DNSKEY 8 1 86400 20170303150000 20170102150000 55955 mx. SboaaGva7+GbfoNKa8Ov2GhSIvYStcBeudk0A0+53/LMs7sHuLegE9+P lTqih4sl/W1Yd4a4jWoVYGGYu8M4tb1fzaxvr5eTDwm3gKGirbTsQPFl Ih5gNnC6QJKYBhpN7w/Fn3JmJTBLwhd7tREygGqkNO/LdTwiHfbcIzkU 5UpD9A3/oeZoMQe71AvJstU5PIHxg3PU1CNU9YBcNhYzUfTfcr+hlbmA Nm6RaOBaWJwp4YzcS3uJcaXmpS1t/lbxWIgeOXRhql6ZHqCai0lSmNnm vAydmJI/cqXsJ23Pj22TD1QwDFKTp0u2oIiykeFzdbIG0s2thtmyY4km qh1Ulg== 215ENTRY_END 216 217; nix.mx 218ENTRY_BEGIN 219MATCH opcode qtype qname 220ADJUST copy_id 221REPLY QR AA DO NOERROR 222SECTION QUESTION 223nic.mx. IN NS 224SECTION ANSWER 225nic.mx. 172800 IN NS o.mx-ns.mx. 226nic.mx. 172800 IN NS m.mx-ns.mx. 227nic.mx. 172800 IN NS c.mx-ns.mx. 228nic.mx. 172800 IN NS x.mx-ns.mx. 229nic.mx. 172800 IN NS e.mx-ns.mx. 230nic.mx. 172800 IN NS i.mx-ns.mx. 231SECTION ADDITIONAL 232c.mx-ns.mx. 172800 IN A 192.100.224.1 233c.mx-ns.mx. 172800 IN AAAA 2001:1258::1 234e.mx-ns.mx. 172800 IN A 189.201.244.1 235i.mx-ns.mx. 172800 IN A 207.248.68.1 236m.mx-ns.mx. 172800 IN A 200.94.176.1 237m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1 238o.mx-ns.mx. 172800 IN A 200.23.1.1 239x.mx-ns.mx. 172800 IN A 201.131.252.1 240ENTRY_END 241 242ENTRY_BEGIN 243MATCH opcode qtype qname 244ADJUST copy_id 245REPLY QR AA DO NOERROR 246SECTION QUESTION 247nic.mx. IN DS 248SECTION AUTHORITY 249qpcf3eq45ur6ndho0ecuj1o25g7d48pi.mx. 1800 IN NSEC3 1 1 100 FBB1D947FF931FC5 QPDGRP34SI0F3CBG41HRN7G8TLFK6C7B NS SOA RRSIG DNSKEY NSEC3PARAM 250qpcf3eq45ur6ndho0ecuj1o25g7d48pi.mx. 1800 IN RRSIG NSEC3 8 2 1800 20170223000000 20170124000000 48529 mx. RI7Ezya54VVVcCiyH2rHBjRwWzsoe2A1vBcwzFUeiKFPsoOsCkvAfpvU uZ96IEa0Ni7ZksS2XFuV9TeQotk/HirhRGq2AauGtF4RLExmZnZouAjz tLZYXhr7mZAqfKLzZV5qNzlYSia3wF9m4wkz4eSBfeJ/6u2AoQP81C3Y Dls= 251mx. 1800 IN SOA m.mx-ns.mx. hostmaster.nic.mx. 1485251802 900 900 604800 1800 252mx. 1800 IN RRSIG SOA 8 1 86400 20170223000000 20170124000000 48529 mx. Gwjg+/GJUJj32FMa9HKESM7zsPFdVVEotOIyXKhZjOX139PhfbcOdfJr bfhDvVV8weMoLHhM0rVko0Sr+H8S3+R8wNOkvoFPqd3G5YV2azS52qOQ xPq1gVT0g3bWtmgF0KV2fGQ2Lcw7ynksenBmpQCggjbh/O98zwfRJkcc Huk= 2531e790cnnc0n6fmd7hhf7o1baus5muq9l.mx. 1800 IN NSEC3 1 1 100 FBB1D947FF931FC5 1EDMBBOCRH8AB8GRQF55CMJV2IS3U6E7 NS DS RRSIG 2541e790cnnc0n6fmd7hhf7o1baus5muq9l.mx. 1800 IN RRSIG NSEC3 8 2 1800 20170223000000 20170124000000 48529 mx. xP9wMq871/wi0N99DkUhXHB1VjyjG5zds0CHIdrm1MC0JPl2atB1nliC tYC/nMC6vHGRk7bcX0kFNDgi0duGuNwKEHyTp2gHBSoMefUtDfJbOoq8 4VSQvS0WaJlK1H3eV21AdhmpZEAe0YB6e7lU5plhqNMX5mxDD5d0ZVD8 TWI= 255ENTRY_END 256 257; this entry is the one which caused kresd to return AD flag despite of missing RRSIGs 258ENTRY_BEGIN 259MATCH opcode qtype qname 260ADJUST copy_id 261REPLY QR AA DO NOERROR 262SECTION QUESTION 263www.nic.mx. IN A 264SECTION ANSWER 265www.nic.mx. 300 IN CNAME www.nicmexico.mx. 266ENTRY_END 267 268ENTRY_BEGIN 269MATCH opcode qname 270ADJUST copy_id copy_query 271REPLY QR AA DO NOERROR 272SECTION QUESTION 273www.nic.mx. IN RRSIG 274SECTION AUTHORITY 275nic.mx. 1800 IN SOA m.mx-ns.mx. hostmaster.nic.mx. 2016101701 3600 900 604800 1800 276ENTRY_END 277 278; nixmexico.mx 279ENTRY_BEGIN 280MATCH opcode qtype qname 281ADJUST copy_id 282REPLY QR AA RD NOERROR 283SECTION QUESTION 284nicmexico.mx. IN NS 285SECTION ANSWER 286nicmexico.mx. 172800 IN NS o.mx-ns.mx. 287nicmexico.mx. 172800 IN NS m.mx-ns.mx. 288nicmexico.mx. 172800 IN NS e.mx-ns.mx. 289nicmexico.mx. 172800 IN NS x.mx-ns.mx. 290nicmexico.mx. 172800 IN NS i.mx-ns.mx. 291nicmexico.mx. 172800 IN NS c.mx-ns.mx. 292nicmexico.mx. 172800 IN RRSIG NS 7 2 172800 20170221235959 20161221161902 14618 nicmexico.mx. MMPJ1lltyGLyE+s+V7mFb3iJzWkKgnCRtBGgVqynFaKJBgEX+0NFy8Iq o8CKWlXGXitDilaE3xy6ynYnb8CeQuEeaKVLzikUwxu+bTR/tcX1fECp 2i9uDFTl/wrYSyNU4gEy/4Ueev5GsM8XQmK5j8xgUmwc+258eRBZ129O K1E= 293SECTION ADDITIONAL 294c.mx-ns.mx. 172800 IN A 192.100.224.1 295c.mx-ns.mx. 172800 IN AAAA 2001:1258::1 296e.mx-ns.mx. 172800 IN A 189.201.244.1 297i.mx-ns.mx. 172800 IN A 207.248.68.1 298m.mx-ns.mx. 172800 IN A 200.94.176.1 299m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1 300o.mx-ns.mx. 172800 IN A 200.23.1.1 301x.mx-ns.mx. 172800 IN A 201.131.252.1 302ENTRY_END 303 304ENTRY_BEGIN 305MATCH opcode qtype qname 306ADJUST copy_id 307REPLY QR AA DO 308SECTION QUESTION 309nicmexico.mx. IN DS 310SECTION ANSWER 311nicmexico.mx. 86400 IN DS 25953 7 1 3980E3CBB2DC1F0A39EE58454F218D695C6FCF2B 312nicmexico.mx. 86400 IN DS 25953 7 2 E390593C68F6C5BD1A38E3CF7D9643235AC9C09A1023EBEA8E6D56FC 9EF2AAA6 313nicmexico.mx. 86400 IN RRSIG DS 8 2 86400 20170223000000 20170124000000 48529 mx. kwiqOPNYD6k+CPGGewQ7YWnJqomLkr4wrIT96qnb11l1m+BBtCZnxh1X 9u1I4nQsLC9/gJh1sytYkMogObxd6CsMUwAn8lA7Pnlbz1upINis7oE5 2MoHjYDhhJnfSryTtiw5Xak+Bup3GGmi4KgNsitQXUK8rFg5xAwyjtb6 udg= 314ENTRY_END 315 316ENTRY_BEGIN 317MATCH opcode qtype qname 318ADJUST copy_id 319REPLY QR AA DO 320SECTION QUESTION 321nicmexico.mx. IN DNSKEY 322SECTION ANSWER 323nicmexico.mx. 172800 IN DNSKEY 257 3 7 AwEAAdU7ho1gF5Swo/P3EMrcm82fE3bSvXec/q4HvGndCS+iEhOVMQgx SmjhdnILgNE23x5v7iprrQdcrC6qG3h5pWromlJt4zqqWD91OuydXGpB vkx9o3gWo9wqr+2mX4cPKsKKhiyQ1EBEbaYZP1PqEWigdTuzVB2zGWAu yCNlbgHX8Q4pgU/P+jdTB0RFkQEa7BtIu/+7JYpB09REdjtn4AgdqaVK rq9gQRxAbpuQezw5vEnK/EFiH+FIa8FWctMhRkC2IdG5THpG8lzZry+Q 04Mih/r7tsY/RbA0asG4RVOFTtHCdjIZc4f4fxNIaR4B7IzBPIWN0d3/ ILI6sObAnJs= 324nicmexico.mx. 172800 IN DNSKEY 256 3 7 AwEAAdlPfZYpM3PWP1ub8MDc4fSBVu3f+lS3ojPAaKNEgXu0mzGP9BtS Rj7kAIR2BQN61sb6b2QIT2QnGSkOjfho0TLm1UjcAMjRC6A4bwVmwYgj OMXd56jRi1zeus3nBz661inwqSOOs4+72SiVLqmbzDV0uFHAZFrSIrS0 Fp5vDTS/ 325nicmexico.mx. 172800 IN DNSKEY 256 3 7 AwEAAbmZ5YmUhQKofswApd84tnITiUqh8kyN609rOanl3ga7WEjGs2bD D8RU/oOj31OzfnEFLSLH0fpIWCPWT+lvZ9HFOxAMavXnwncKsAVLNrv+ CuBGTiQ4wa2C/vQ7i/D1SbnXAUs/17Pu9onlAGeDoolgsUAgldfRwEGp tVfY8r71 326nicmexico.mx. 172800 IN RRSIG DNSKEY 7 2 172800 20170221235959 20161221161902 14618 nicmexico.mx. BTeItGos/TVLbiYrisWuJCFmdnA+p3yBHOMfUsvPAOvs5trTincG5wkY EHsq13Dvk9JNjSYh4HPlmlnsXDmUPXm6Z4bd1BXFVPiK3r4I1YGwwP/M ATNjw5V8w+my3PvOQdwyhWiF8dnd0EfeK3t+b/prwZiWs64ezaNiMxUk i5s= 327nicmexico.mx. 172800 IN RRSIG DNSKEY 7 2 172800 20170221235959 20161221161902 25953 nicmexico.mx. NPVmWrmIeGHYOjrfonov29kFG5gP2vaP0qE8sZplYt44MzgBnhLt+cZS sk6NNEhLPgYe4fiPxj3xzT+BjxTUCCQo3CT1KR4uaEIbepBmxDx8dMv6 4c1AO2wNnt8x/OBG+Nwg3gLaf4UtdJvOQsdpOsTzqKKo7WPKxeb462gw 4aZzYh4uhEjTFil8eGLXOlGe8CYThAdwxKbA6tEZxE5UEa2mIb2orSbz ro+ehp6imnn3YWtLWBtkWQqsSaqLug4HUrXgjbqNSZ+FCdO4WIxLgDsz k+jlA7tdkZknE43AQX/md6orKDalCb4OtrC0yrgYDtwVsgP1qZVAjJWW 09nUIg== 328ENTRY_END 329 330ENTRY_BEGIN 331MATCH opcode qtype qname 332ADJUST copy_id 333REPLY QR AA DO 334SECTION QUESTION 335www.nicmexico.mx. IN A 336SECTION ANSWER 337www.nicmexico.mx. 172800 IN A 200.94.180.55 338www.nicmexico.mx. 172800 IN A 200.94.180.54 339www.nicmexico.mx. 172800 IN A 200.94.180.57 340www.nicmexico.mx. 172800 IN A 200.94.180.56 341www.nicmexico.mx. 172800 IN RRSIG A 7 3 172800 20170221235959 20161221161902 14618 nicmexico.mx. s3THv+Ay2WrcOTG6bo+54Zc/rff/jhzcJKZ3ZRYMXhw3FToSvTOSqsIG 1gzW/Sk6r2oikHH3nNluaMTAXfCULu2mHiQVAuFlnajFSMPcm8KvEyV0 cCT7knkAFqb+ODkimPMufRHiOLbnhQk9/A25qK7J8rCB76IUmzk41hYR NBU= 342SECTION AUTHORITY 343nicmexico.mx. 172800 IN NS m.mx-ns.mx. 344nicmexico.mx. 172800 IN NS c.mx-ns.mx. 345nicmexico.mx. 172800 IN NS i.mx-ns.mx. 346nicmexico.mx. 172800 IN NS o.mx-ns.mx. 347nicmexico.mx. 172800 IN NS x.mx-ns.mx. 348nicmexico.mx. 172800 IN NS e.mx-ns.mx. 349nicmexico.mx. 172800 IN RRSIG NS 7 2 172800 20170221235959 20161221161902 14618 nicmexico.mx. MMPJ1lltyGLyE+s+V7mFb3iJzWkKgnCRtBGgVqynFaKJBgEX+0NFy8Iq o8CKWlXGXitDilaE3xy6ynYnb8CeQuEeaKVLzikUwxu+bTR/tcX1fECp 2i9uDFTl/wrYSyNU4gEy/4Ueev5GsM8XQmK5j8xgUmwc+258eRBZ129O K1E= 350SECTION ADDITIONAL 351c.mx-ns.mx. 172800 IN A 192.100.224.1 352e.mx-ns.mx. 172800 IN A 189.201.244.1 353i.mx-ns.mx. 172800 IN A 207.248.68.1 354m.mx-ns.mx. 172800 IN A 200.94.176.1 355o.mx-ns.mx. 172800 IN A 200.23.1.1 356x.mx-ns.mx. 172800 IN A 201.131.252.1 357c.mx-ns.mx. 172800 IN AAAA 2001:1258::1 358m.mx-ns.mx. 172800 IN AAAA 2001:13c7:7000::1 359ENTRY_END 360 361; end ?.mx-ns.mx. 362RANGE_END 363 364 365STEP 10 QUERY 366ENTRY_BEGIN 367REPLY RD DO 368SECTION QUESTION 369www.nic.mx. IN A 370ENTRY_END 371 372STEP 11 CHECK_ANSWER 373ENTRY_BEGIN 374MATCH rcode flags question answer 375REPLY QR RD RA DO NOERROR 376SECTION QUESTION 377www.nic.mx. IN A 378SECTION ANSWER 379www.nic.mx. 300 IN CNAME www.nicmexico.mx. 380www.nicmexico.mx. 171139 IN A 200.94.180.57 381www.nicmexico.mx. 171139 IN A 200.94.180.56 382www.nicmexico.mx. 171139 IN A 200.94.180.54 383www.nicmexico.mx. 171139 IN A 200.94.180.55 384www.nicmexico.mx. 171139 IN RRSIG A 7 3 172800 20170221235959 20161221161902 14618 nicmexico.mx. s3THv+Ay2WrcOTG6bo+54Zc/rff/jhzcJKZ3ZRYMXhw3FToSvTOSqsIG1gzW/Sk6r2oikHH3nNluaMTAXfCULu2mHiQVAuFlnajFSMPcm8KvEyV0cCT7knkAFqb+ODkimPMufRHiOLbnhQk9/A25qK7J8rCB76IUmzk41hYRNBU= 385ENTRY_END 386 387STEP 20 QUERY 388ENTRY_BEGIN 389REPLY RD DO 390SECTION QUESTION 391www.nicmexico.mx. IN A 392ENTRY_END 393 394STEP 21 CHECK_ANSWER 395ENTRY_BEGIN 396MATCH rcode flags question answer 397REPLY QR RD RA AD DO NOERROR 398SECTION QUESTION 399www.nicmexico.mx. IN A 400SECTION ANSWER 401www.nicmexico.mx. 170708 IN A 200.94.180.55 402www.nicmexico.mx. 170708 IN A 200.94.180.56 403www.nicmexico.mx. 170708 IN A 200.94.180.54 404www.nicmexico.mx. 170708 IN A 200.94.180.57 405www.nicmexico.mx. 172800 IN RRSIG A 7 3 172800 20170221235959 20161221161902 14618 nicmexico.mx. s3THv+Ay2WrcOTG6bo+54Zc/rff/jhzcJKZ3ZRYMXhw3FToSvTOSqsIG 1gzW/Sk6r2oikHH3nNluaMTAXfCULu2mHiQVAuFlnajFSMPcm8KvEyV0 cCT7knkAFqb+ODkimPMufRHiOLbnhQk9/A25qK7J8rCB76IUmzk41hYR NBU= 406ENTRY_END 407 408SCENARIO_END 409