1; config options 2; The island of trust is at example.com 3server: 4 trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5 val-override-date: "20070916134226" 6 target-fetch-policy: "0 0 0 0 0" 7 fake-sha1: yes 8 trust-anchor-signaling: no 9 qname-minimisation: "no" 10 11stub-zone: 12 name: "." 13 stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 14CONFIG_END 15 16SCENARIO_BEGIN Test validator with blacklist for DNSKEY response 17; DNSKEY not for prime but further down the chain of trust 18; data response also needs a blacklist action. 19 20; K.ROOT-SERVERS.NET. 21RANGE_BEGIN 0 100 22 ADDRESS 193.0.14.129 23ENTRY_BEGIN 24MATCH opcode qtype qname 25ADJUST copy_id 26REPLY QR NOERROR 27SECTION QUESTION 28. IN NS 29SECTION ANSWER 30. IN NS K.ROOT-SERVERS.NET. 31SECTION ADDITIONAL 32K.ROOT-SERVERS.NET. IN A 193.0.14.129 33ENTRY_END 34 35ENTRY_BEGIN 36MATCH opcode subdomain 37ADJUST copy_id copy_query 38REPLY QR NOERROR 39SECTION QUESTION 40com. IN A 41SECTION AUTHORITY 42com. IN NS a.gtld-servers.net. 43SECTION ADDITIONAL 44a.gtld-servers.net. IN A 192.5.6.30 45ENTRY_END 46RANGE_END 47 48; a.gtld-servers.net. 49RANGE_BEGIN 0 100 50 ADDRESS 192.5.6.30 51ENTRY_BEGIN 52MATCH opcode qtype qname 53ADJUST copy_id 54REPLY QR NOERROR 55SECTION QUESTION 56com. IN NS 57SECTION ANSWER 58com. IN NS a.gtld-servers.net. 59SECTION ADDITIONAL 60a.gtld-servers.net. IN A 192.5.6.30 61ENTRY_END 62 63ENTRY_BEGIN 64MATCH opcode qtype qname 65ADJUST copy_id 66REPLY QR NOERROR 67SECTION QUESTION 68ns.blabla.com. IN A 69SECTION ANSWER 70ns.blabla.com. IN A 1.2.3.5 71ENTRY_END 72 73ENTRY_BEGIN 74MATCH opcode qtype qname 75ADJUST copy_id 76REPLY QR NOERROR 77SECTION QUESTION 78ns.blabla.com. IN AAAA 79SECTION AUTHORITY 80com. IN SOA com. com. 2009100100 28800 7200 604800 3600 81ENTRY_END 82 83ENTRY_BEGIN 84MATCH opcode qtype qname 85ADJUST copy_id 86REPLY QR NOERROR 87SECTION QUESTION 88ns.foo.com. IN A 89SECTION ANSWER 90ns.foo.com. IN A 1.2.4.7 91ENTRY_END 92 93ENTRY_BEGIN 94MATCH opcode qtype qname 95ADJUST copy_id 96REPLY QR NOERROR 97SECTION QUESTION 98ns.foo.com. IN AAAA 99SECTION AUTHORITY 100com. IN SOA com. com. 2009100100 28800 7200 604800 3600 101ENTRY_END 102 103ENTRY_BEGIN 104MATCH opcode subdomain 105ADJUST copy_id copy_query 106REPLY QR NOERROR 107SECTION QUESTION 108example.com. IN NS 109SECTION AUTHORITY 110example.com. IN NS ns.example.com. 111example.com. IN NS ns.blabla.com. 112SECTION ADDITIONAL 113ns.example.com. IN A 1.2.3.4 114; no ns.blabla.com, try that later 115ENTRY_END 116RANGE_END 117 118; ns.example.com. 119RANGE_BEGIN 0 100 120 ADDRESS 1.2.3.4 121ENTRY_BEGIN 122MATCH opcode qtype qname 123ADJUST copy_id 124REPLY QR NOERROR 125SECTION QUESTION 126example.com. IN NS 127SECTION ANSWER 128example.com. IN NS ns.example.com. 129example.com. IN NS ns.blabla.com. 130example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. AKJ3xUBdSrCiOFkYajsy93d+h06rewpbmBHItTkL8R/26rw57b1gCIg= ;{id = 2854} 131SECTION ADDITIONAL 132ns.example.com. IN A 1.2.3.4 133ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 134ENTRY_END 135 136ENTRY_BEGIN 137MATCH opcode qtype qname 138ADJUST copy_id 139REPLY QR NOERROR 140SECTION QUESTION 141ns.example.com. IN A 142SECTION ANSWER 143ns.example.com. IN A 1.2.3.4 144ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 145SECTION ADDITIONAL 146ENTRY_END 147 148ENTRY_BEGIN 149MATCH opcode qtype qname 150ADJUST copy_id 151REPLY QR NOERROR 152SECTION QUESTION 153ns.example.com. IN AAAA 154SECTION ANSWER 155SECTION ADDITIONAL 156ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 157ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. ACFVLLBtuSX/1z3461tbOwDz9zTHe5S9DbVtwnSO1f2x06fYbMpzSDE= ;{id = 2854} 158ENTRY_END 159 160; response to DNSKEY priming query 161ENTRY_BEGIN 162MATCH opcode qtype qname 163ADJUST copy_id 164REPLY QR NOERROR 165SECTION QUESTION 166example.com. IN DNSKEY 167SECTION ANSWER 168example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 169; make priming query succeed 170example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 171;example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20030926134150 20030829134150 2854 example.com. AG21xE8CFQzTq6XtHErg28b9EAmqPsoYCUcFPEAoAjFybM6AY4/bMOo= ;{id = 2854} 172SECTION AUTHORITY 173;example.com. IN NS ns.example.com. 174;example.com. IN NS ns.blabla.com. 175;example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACiWu7zjBHqgEX3iUoOF7rfpOmIAHj1npKQ+XDIaNlmdkfJxoCwFl04= ;{id = 2854} 176SECTION ADDITIONAL 177;ns.example.com. IN A 1.2.3.4 178;ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. ACmAsKTf7hqDaYK8CQ7FL1cGYPW+blTCnzZGkExFtEUAGrHeze87o+A= ;{id = 2854} 179ENTRY_END 180 181ENTRY_BEGIN 182MATCH opcode qtype qname 183ADJUST copy_id 184REPLY QR NOERROR 185SECTION QUESTION 186www.example.com. IN A 187SECTION ANSWER 188www.example.com. IN A 10.20.30.40 189www.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGj9kE8oW3OhOLhkmJ3HBaNIOpvGf3S8zSd5gWmhpxAMc5hh6cxZfpQ= ;{id = 2854} 190SECTION AUTHORITY 191example.com. IN NS ns.example.com. 192example.com. IN NS ns.blabla.com. 193example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACHETweBNPgbmRoNRdKvxuw4X9qNUUTEpSuwV+HhuiBE83gbB98asAc= ;{id = 2854} 194SECTION ADDITIONAL 195ns.example.com. IN A 1.2.3.4 196ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGvu9A/nGsbatxJCmnObioIhKg2Tm0Apr0eo+DO1kIDrAHco/bt/EdY= ;{id = 2854} 197ENTRY_END 198 199; DS request 200ENTRY_BEGIN 201MATCH opcode qtype qname 202ADJUST copy_id 203REPLY QR AA NOERROR 204SECTION QUESTION 205sub.example.com. IN DS 206SECTION ANSWER 207sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 208sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 209;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854} 210ENTRY_END 211 212ENTRY_BEGIN 213MATCH opcode subdomain 214ADJUST copy_id copy_query 215REPLY QR AA NOERROR 216SECTION QUESTION 217sub.example.com. IN NS 218SECTION AUTHORITY 219sub.example.com. IN NS ns.sub.example.com. 220sub.example.com. IN NS ns.foo.com. 221sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 222sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 223;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854} 224SECTION ADDITIONAL 225ns.sub.example.com. IN A 1.2.4.6 226ENTRY_END 227 228RANGE_END 229 230; ns.blabla.com. 231RANGE_BEGIN 0 100 232 ADDRESS 1.2.3.5 233ENTRY_BEGIN 234MATCH opcode qtype qname 235ADJUST copy_id 236REPLY QR NOERROR 237SECTION QUESTION 238example.com. IN NS 239SECTION ANSWER 240example.com. IN NS ns.example.com. 241example.com. IN NS ns.blabla.com. 242example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 243SECTION ADDITIONAL 244ns.example.com. IN A 1.2.3.4 245ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 246ENTRY_END 247 248ENTRY_BEGIN 249MATCH opcode qtype qname 250ADJUST copy_id 251REPLY QR NOERROR 252SECTION QUESTION 253ns.example.com. IN A 254SECTION ANSWER 255ns.example.com. IN A 1.2.3.4 256ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 257SECTION ADDITIONAL 258ENTRY_END 259 260ENTRY_BEGIN 261MATCH opcode qtype qname 262ADJUST copy_id 263REPLY QR NOERROR 264SECTION QUESTION 265ns.example.com. IN AAAA 266SECTION ANSWER 267SECTION ADDITIONAL 268ns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 269ns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. ABhDNtJramb2a4R1SK5gb/CTYJybQts6mZ++z3kLiwsrUSZInA4ikeQ= ;{id = 2854} 270ENTRY_END 271 272; response to DNSKEY priming query 273ENTRY_BEGIN 274MATCH opcode qtype qname 275ADJUST copy_id 276REPLY QR NOERROR 277SECTION QUESTION 278example.com. IN DNSKEY 279SECTION ANSWER 280example.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 281example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 282SECTION AUTHORITY 283example.com. IN NS ns.example.com. 284example.com. IN NS ns.blabla.com. 285example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 286SECTION ADDITIONAL 287ns.example.com. IN A 1.2.3.4 288ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 289ENTRY_END 290 291ENTRY_BEGIN 292MATCH opcode qtype qname 293ADJUST copy_id 294REPLY QR NOERROR 295SECTION QUESTION 296www.example.com. IN A 297SECTION ANSWER 298www.example.com. IN A 10.20.30.40 299ns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 300SECTION AUTHORITY 301example.com. IN NS ns.example.com. 302example.com. IN NS ns.blabla.com. 303example.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 304SECTION ADDITIONAL 305ns.example.com. IN A 1.2.3.4 306www.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 307ENTRY_END 308 309; DS request 310ENTRY_BEGIN 311MATCH opcode qtype qname 312ADJUST copy_id 313REPLY QR AA NOERROR 314SECTION QUESTION 315sub.example.com. IN DS 316SECTION ANSWER 317sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 318sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 319ENTRY_END 320 321ENTRY_BEGIN 322MATCH opcode subdomain 323ADJUST copy_id copy_query 324REPLY QR AA NOERROR 325SECTION QUESTION 326sub.example.com. IN NS 327SECTION AUTHORITY 328sub.example.com. IN NS ns.sub.example.com. 329sub.example.com. IN NS ns.foo.com. 330sub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 331sub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 332SECTION ADDITIONAL 333ns.sub.example.com. IN A 1.2.4.6 334ENTRY_END 335 336RANGE_END 337 338; ns.sub.example.com. 339RANGE_BEGIN 0 100 340 ADDRESS 1.2.4.6 341ENTRY_BEGIN 342MATCH opcode qtype qname 343ADJUST copy_id 344REPLY QR AA NOERROR 345SECTION QUESTION 346sub.example.com. IN DNSKEY 347SECTION ANSWER 348sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 349sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. g+YoDwrCF75YCFyqYoxlF+/mNfcscnuZ6LfmfBgPLohlvCCC7jYj/wkc2fxAl3MEK0CriWkHp1hw0QQYkmbbKw== ;{id = 30899} 350ENTRY_END 351 352ENTRY_BEGIN 353MATCH opcode qtype qname 354ADJUST copy_id 355REPLY QR AA NOERROR 356SECTION QUESTION 357sub.example.com. IN NS 358SECTION ANSWER 359sub.example.com. IN NS ns.sub.example.com. 360sub.example.com. IN NS ns.foo.com. 361sub.example.com. 3600 IN RRSIG NS 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. VCDq+gfZHuziE81Uypxm2va4eXCtoD8F8YKkwNo8laMNUcXh/hvGdbHKXMMghwuJXgxLh89Diu5kywBVwb/AIg== ;{id = 30899} 362SECTION ADDITIONAL 363ns.sub.example.com. IN A 1.2.4.6 364ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899} 365ENTRY_END 366 367ENTRY_BEGIN 368MATCH opcode qtype qname 369ADJUST copy_id 370REPLY QR AA NOERROR 371SECTION QUESTION 372ns.sub.example.com. IN A 373SECTION ANSWER 374ns.sub.example.com. IN A 1.2.4.6 375ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899} 376ENTRY_END 377 378ENTRY_BEGIN 379MATCH opcode qtype qname 380ADJUST copy_id 381REPLY QR AA NOERROR 382SECTION QUESTION 383ns.sub.example.com. IN AAAA 384SECTION AUTHORITY 385ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 386ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. eVe3iQS2/a1Y57AA2QSlMU/z31xaJ2mwUU36PZh8vlv6shPpQywAT70JdX6+ZsuliRpsbY6crkVXTXJ2qpKTiQ== ;{id = 30899} 387sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 388sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. vEX2n1CksMr5jPq9d2BQJMIDwxaXdWlY5mYg+PBmOFI4xngFMKTsXa/+SfJy2SiqAgHTDI6joIo30AdQJsjdHA== ;{id = 30899} 389ENTRY_END 390 391ENTRY_BEGIN 392MATCH opcode qtype qname 393ADJUST copy_id 394REPLY QR AA NOERROR 395SECTION QUESTION 396www.sub.example.com. IN A 397SECTION ANSWER 398www.sub.example.com. IN A 10.20.30.40 399www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. dBK6JOkKlp2G+f7mhInKnQM6DUBnEziTS+KpXzQ/5HT8/h9XkryOt4vAJKGCz0Ew3qRqjLgylsbGrcuxmIO9jA== ;{id = 30899} 400ENTRY_END 401 402RANGE_END 403 404; ns.foo.com. 405RANGE_BEGIN 0 100 406 ADDRESS 1.2.4.7 407ENTRY_BEGIN 408MATCH opcode qtype qname 409ADJUST copy_id 410REPLY QR AA NOERROR 411SECTION QUESTION 412sub.example.com. IN DNSKEY 413SECTION ANSWER 414sub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 415sub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899} 416ENTRY_END 417 418ENTRY_BEGIN 419MATCH opcode qtype qname 420ADJUST copy_id 421REPLY QR AA NOERROR 422SECTION QUESTION 423sub.example.com. IN NS 424SECTION ANSWER 425sub.example.com. IN NS ns.sub.example.com. 426sub.example.com. IN NS ns.foo.com. 427sub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899} 428SECTION ADDITIONAL 429ns.sub.example.com. IN A 1.2.4.6 430ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 431ENTRY_END 432 433ENTRY_BEGIN 434MATCH opcode qtype qname 435ADJUST copy_id 436REPLY QR AA NOERROR 437SECTION QUESTION 438ns.sub.example.com. IN A 439SECTION ANSWER 440ns.sub.example.com. IN A 1.2.4.6 441ns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 442ENTRY_END 443 444ENTRY_BEGIN 445MATCH opcode qtype qname 446ADJUST copy_id 447REPLY QR AA NOERROR 448SECTION QUESTION 449ns.sub.example.com. IN AAAA 450SECTION AUTHORITY 451ns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 452ns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899} 453sub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 454sub.example.com. 3600 IN RRSIG SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899} 455ENTRY_END 456 457ENTRY_BEGIN 458MATCH opcode qtype qname 459ADJUST copy_id 460REPLY QR AA NOERROR 461SECTION QUESTION 462www.sub.example.com. IN A 463SECTION ANSWER 464www.sub.example.com. IN A 10.20.30.40 465www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 466ENTRY_END 467 468RANGE_END 469 470STEP 1 QUERY 471ENTRY_BEGIN 472REPLY RD DO 473SECTION QUESTION 474www.sub.example.com. IN A 475ENTRY_END 476 477; recursion happens here. 478STEP 10 CHECK_ANSWER 479ENTRY_BEGIN 480MATCH all 481REPLY QR RD RA AD DO NOERROR 482SECTION QUESTION 483www.sub.example.com. IN A 484SECTION ANSWER 485www.sub.example.com. IN A 10.20.30.40 486www.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 487ENTRY_END 488 489; remove pending ns.blabla.com AAAA msg 490STEP 30 QUERY 491ENTRY_BEGIN 492REPLY RD DO CD 493SECTION QUESTION 494ns.blabla.com. IN AAAA 495ENTRY_END 496 497; recursion happens here. 498STEP 40 CHECK_ANSWER 499ENTRY_BEGIN 500MATCH all 501REPLY QR RD CD RA DO NOERROR 502SECTION QUESTION 503ns.blabla.com. IN AAAA 504SECTION ANSWER 505SECTION AUTHORITY 506com. IN SOA com. com. 2009100100 28800 7200 604800 3600 507ENTRY_END 508 509SCENARIO_END 510