1eaad808eSchristos; config options 2eaad808eSchristos; The island of trust is at example.com 3eaad808eSchristosserver: 4eaad808eSchristos trust-anchor: "example.com. 3600 IN DS 2854 3 1 46e4ffc6e9a4793b488954bd3f0cc6af0dfb201b" 5eaad808eSchristos val-override-date: "20070916134226" 6eaad808eSchristos target-fetch-policy: "0 0 0 0 0" 7762909a6Schristos fake-sha1: yes 8762909a6Schristos trust-anchor-signaling: no 9*d6959bcfSchristos qname-minimisation: "no" 10eaad808eSchristos 11eaad808eSchristosstub-zone: 12eaad808eSchristos name: "." 13eaad808eSchristos stub-addr: 193.0.14.129 # K.ROOT-SERVERS.NET. 14eaad808eSchristosCONFIG_END 15eaad808eSchristos 16eaad808eSchristosSCENARIO_BEGIN Test validator with blacklist for DNSKEY response 17eaad808eSchristos; DNSKEY not for prime but further down the chain of trust 18eaad808eSchristos; data response also needs a blacklist action. 19eaad808eSchristos 20eaad808eSchristos; K.ROOT-SERVERS.NET. 21eaad808eSchristosRANGE_BEGIN 0 100 22eaad808eSchristos ADDRESS 193.0.14.129 23eaad808eSchristosENTRY_BEGIN 24eaad808eSchristosMATCH opcode qtype qname 25eaad808eSchristosADJUST copy_id 26eaad808eSchristosREPLY QR NOERROR 27eaad808eSchristosSECTION QUESTION 28eaad808eSchristos. IN NS 29eaad808eSchristosSECTION ANSWER 30eaad808eSchristos. IN NS K.ROOT-SERVERS.NET. 31eaad808eSchristosSECTION ADDITIONAL 32eaad808eSchristosK.ROOT-SERVERS.NET. IN A 193.0.14.129 33eaad808eSchristosENTRY_END 34eaad808eSchristos 35eaad808eSchristosENTRY_BEGIN 36eaad808eSchristosMATCH opcode subdomain 37eaad808eSchristosADJUST copy_id copy_query 38eaad808eSchristosREPLY QR NOERROR 39eaad808eSchristosSECTION QUESTION 40eaad808eSchristoscom. IN A 41eaad808eSchristosSECTION AUTHORITY 42eaad808eSchristoscom. IN NS a.gtld-servers.net. 43eaad808eSchristosSECTION ADDITIONAL 44eaad808eSchristosa.gtld-servers.net. IN A 192.5.6.30 45eaad808eSchristosENTRY_END 46eaad808eSchristosRANGE_END 47eaad808eSchristos 48eaad808eSchristos; a.gtld-servers.net. 49eaad808eSchristosRANGE_BEGIN 0 100 50eaad808eSchristos ADDRESS 192.5.6.30 51eaad808eSchristosENTRY_BEGIN 52eaad808eSchristosMATCH opcode qtype qname 53eaad808eSchristosADJUST copy_id 54eaad808eSchristosREPLY QR NOERROR 55eaad808eSchristosSECTION QUESTION 56eaad808eSchristoscom. IN NS 57eaad808eSchristosSECTION ANSWER 58eaad808eSchristoscom. IN NS a.gtld-servers.net. 59eaad808eSchristosSECTION ADDITIONAL 60eaad808eSchristosa.gtld-servers.net. IN A 192.5.6.30 61eaad808eSchristosENTRY_END 62eaad808eSchristos 63eaad808eSchristosENTRY_BEGIN 64eaad808eSchristosMATCH opcode qtype qname 65eaad808eSchristosADJUST copy_id 66eaad808eSchristosREPLY QR NOERROR 67eaad808eSchristosSECTION QUESTION 68eaad808eSchristosns.blabla.com. IN A 69eaad808eSchristosSECTION ANSWER 70eaad808eSchristosns.blabla.com. IN A 1.2.3.5 71eaad808eSchristosENTRY_END 72eaad808eSchristos 73eaad808eSchristosENTRY_BEGIN 74eaad808eSchristosMATCH opcode qtype qname 75eaad808eSchristosADJUST copy_id 76eaad808eSchristosREPLY QR NOERROR 77eaad808eSchristosSECTION QUESTION 78eaad808eSchristosns.blabla.com. IN AAAA 79eaad808eSchristosSECTION AUTHORITY 80eaad808eSchristoscom. IN SOA com. com. 2009100100 28800 7200 604800 3600 81eaad808eSchristosENTRY_END 82eaad808eSchristos 83eaad808eSchristosENTRY_BEGIN 84eaad808eSchristosMATCH opcode qtype qname 85eaad808eSchristosADJUST copy_id 86eaad808eSchristosREPLY QR NOERROR 87eaad808eSchristosSECTION QUESTION 88eaad808eSchristosns.foo.com. IN A 89eaad808eSchristosSECTION ANSWER 90eaad808eSchristosns.foo.com. IN A 1.2.4.7 91eaad808eSchristosENTRY_END 92eaad808eSchristos 93eaad808eSchristosENTRY_BEGIN 94eaad808eSchristosMATCH opcode qtype qname 95eaad808eSchristosADJUST copy_id 96eaad808eSchristosREPLY QR NOERROR 97eaad808eSchristosSECTION QUESTION 98eaad808eSchristosns.foo.com. IN AAAA 99eaad808eSchristosSECTION AUTHORITY 100eaad808eSchristoscom. IN SOA com. com. 2009100100 28800 7200 604800 3600 101eaad808eSchristosENTRY_END 102eaad808eSchristos 103eaad808eSchristosENTRY_BEGIN 104eaad808eSchristosMATCH opcode subdomain 105eaad808eSchristosADJUST copy_id copy_query 106eaad808eSchristosREPLY QR NOERROR 107eaad808eSchristosSECTION QUESTION 108eaad808eSchristosexample.com. IN NS 109eaad808eSchristosSECTION AUTHORITY 110eaad808eSchristosexample.com. IN NS ns.example.com. 111eaad808eSchristosexample.com. IN NS ns.blabla.com. 112eaad808eSchristosSECTION ADDITIONAL 113eaad808eSchristosns.example.com. IN A 1.2.3.4 114eaad808eSchristos; no ns.blabla.com, try that later 115eaad808eSchristosENTRY_END 116eaad808eSchristosRANGE_END 117eaad808eSchristos 118eaad808eSchristos; ns.example.com. 119eaad808eSchristosRANGE_BEGIN 0 100 120eaad808eSchristos ADDRESS 1.2.3.4 121eaad808eSchristosENTRY_BEGIN 122eaad808eSchristosMATCH opcode qtype qname 123eaad808eSchristosADJUST copy_id 124eaad808eSchristosREPLY QR NOERROR 125eaad808eSchristosSECTION QUESTION 126eaad808eSchristosexample.com. IN NS 127eaad808eSchristosSECTION ANSWER 128eaad808eSchristosexample.com. IN NS ns.example.com. 129eaad808eSchristosexample.com. IN NS ns.blabla.com. 130eaad808eSchristosexample.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. AKJ3xUBdSrCiOFkYajsy93d+h06rewpbmBHItTkL8R/26rw57b1gCIg= ;{id = 2854} 131eaad808eSchristosSECTION ADDITIONAL 132eaad808eSchristosns.example.com. IN A 1.2.3.4 133eaad808eSchristosns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 134eaad808eSchristosENTRY_END 135eaad808eSchristos 136eaad808eSchristosENTRY_BEGIN 137eaad808eSchristosMATCH opcode qtype qname 138eaad808eSchristosADJUST copy_id 139eaad808eSchristosREPLY QR NOERROR 140eaad808eSchristosSECTION QUESTION 141eaad808eSchristosns.example.com. IN A 142eaad808eSchristosSECTION ANSWER 143eaad808eSchristosns.example.com. IN A 1.2.3.4 144eaad808eSchristosns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AHNj99mBmP4np19V01nSq990ZIFlIiLWoeHijm/HcOG/o8+DuIp4fL8= ;{id = 2854} 145eaad808eSchristosSECTION ADDITIONAL 146eaad808eSchristosENTRY_END 147eaad808eSchristos 148eaad808eSchristosENTRY_BEGIN 149eaad808eSchristosMATCH opcode qtype qname 150eaad808eSchristosADJUST copy_id 151eaad808eSchristosREPLY QR NOERROR 152eaad808eSchristosSECTION QUESTION 153eaad808eSchristosns.example.com. IN AAAA 154eaad808eSchristosSECTION ANSWER 155eaad808eSchristosSECTION ADDITIONAL 156eaad808eSchristosns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 157eaad808eSchristosns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20030926134150 20030829134150 2854 example.com. ACFVLLBtuSX/1z3461tbOwDz9zTHe5S9DbVtwnSO1f2x06fYbMpzSDE= ;{id = 2854} 158eaad808eSchristosENTRY_END 159eaad808eSchristos 160eaad808eSchristos; response to DNSKEY priming query 161eaad808eSchristosENTRY_BEGIN 162eaad808eSchristosMATCH opcode qtype qname 163eaad808eSchristosADJUST copy_id 164eaad808eSchristosREPLY QR NOERROR 165eaad808eSchristosSECTION QUESTION 166eaad808eSchristosexample.com. IN DNSKEY 167eaad808eSchristosSECTION ANSWER 168eaad808eSchristosexample.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 169eaad808eSchristos; make priming query succeed 170eaad808eSchristosexample.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 171eaad808eSchristos;example.com. 3600 IN RRSIG DNSKEY 3 2 3600 20030926134150 20030829134150 2854 example.com. AG21xE8CFQzTq6XtHErg28b9EAmqPsoYCUcFPEAoAjFybM6AY4/bMOo= ;{id = 2854} 172eaad808eSchristosSECTION AUTHORITY 173eaad808eSchristos;example.com. IN NS ns.example.com. 174eaad808eSchristos;example.com. IN NS ns.blabla.com. 175eaad808eSchristos;example.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACiWu7zjBHqgEX3iUoOF7rfpOmIAHj1npKQ+XDIaNlmdkfJxoCwFl04= ;{id = 2854} 176eaad808eSchristosSECTION ADDITIONAL 177eaad808eSchristos;ns.example.com. IN A 1.2.3.4 178eaad808eSchristos;ns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. ACmAsKTf7hqDaYK8CQ7FL1cGYPW+blTCnzZGkExFtEUAGrHeze87o+A= ;{id = 2854} 179eaad808eSchristosENTRY_END 180eaad808eSchristos 181eaad808eSchristosENTRY_BEGIN 182eaad808eSchristosMATCH opcode qtype qname 183eaad808eSchristosADJUST copy_id 184eaad808eSchristosREPLY QR NOERROR 185eaad808eSchristosSECTION QUESTION 186eaad808eSchristoswww.example.com. IN A 187eaad808eSchristosSECTION ANSWER 188eaad808eSchristoswww.example.com. IN A 10.20.30.40 189eaad808eSchristoswww.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGj9kE8oW3OhOLhkmJ3HBaNIOpvGf3S8zSd5gWmhpxAMc5hh6cxZfpQ= ;{id = 2854} 190eaad808eSchristosSECTION AUTHORITY 191eaad808eSchristosexample.com. IN NS ns.example.com. 192eaad808eSchristosexample.com. IN NS ns.blabla.com. 193eaad808eSchristosexample.com. 3600 IN RRSIG NS 3 2 3600 20030926134150 20030829134150 2854 example.com. ACHETweBNPgbmRoNRdKvxuw4X9qNUUTEpSuwV+HhuiBE83gbB98asAc= ;{id = 2854} 194eaad808eSchristosSECTION ADDITIONAL 195eaad808eSchristosns.example.com. IN A 1.2.3.4 196eaad808eSchristosns.example.com. 3600 IN RRSIG A 3 3 3600 20030926134150 20030829134150 2854 example.com. AGvu9A/nGsbatxJCmnObioIhKg2Tm0Apr0eo+DO1kIDrAHco/bt/EdY= ;{id = 2854} 197eaad808eSchristosENTRY_END 198eaad808eSchristos 199eaad808eSchristos; DS request 200eaad808eSchristosENTRY_BEGIN 201eaad808eSchristosMATCH opcode qtype qname 202eaad808eSchristosADJUST copy_id 203eaad808eSchristosREPLY QR AA NOERROR 204eaad808eSchristosSECTION QUESTION 205eaad808eSchristossub.example.com. IN DS 206eaad808eSchristosSECTION ANSWER 207eaad808eSchristossub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 208eaad808eSchristossub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 209eaad808eSchristos;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854} 210eaad808eSchristosENTRY_END 211eaad808eSchristos 212eaad808eSchristosENTRY_BEGIN 213eaad808eSchristosMATCH opcode subdomain 214eaad808eSchristosADJUST copy_id copy_query 215eaad808eSchristosREPLY QR AA NOERROR 216eaad808eSchristosSECTION QUESTION 217eaad808eSchristossub.example.com. IN NS 218eaad808eSchristosSECTION AUTHORITY 219eaad808eSchristossub.example.com. IN NS ns.sub.example.com. 220eaad808eSchristossub.example.com. IN NS ns.foo.com. 221eaad808eSchristossub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 222eaad808eSchristossub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 223eaad808eSchristos;sub.example.com. 3600 IN RRSIG DS 3 3 3600 20030926134150 20030829134150 2854 example.com. AAT/7XwtMjHiT1GFHfV6Wvv4n+oOkqxllNdf9bLnpTHw/8h586yBgwg= ;{id = 2854} 224eaad808eSchristosSECTION ADDITIONAL 225eaad808eSchristosns.sub.example.com. IN A 1.2.4.6 226eaad808eSchristosENTRY_END 227eaad808eSchristos 228eaad808eSchristosRANGE_END 229eaad808eSchristos 230eaad808eSchristos; ns.blabla.com. 231eaad808eSchristosRANGE_BEGIN 0 100 232eaad808eSchristos ADDRESS 1.2.3.5 233eaad808eSchristosENTRY_BEGIN 234eaad808eSchristosMATCH opcode qtype qname 235eaad808eSchristosADJUST copy_id 236eaad808eSchristosREPLY QR NOERROR 237eaad808eSchristosSECTION QUESTION 238eaad808eSchristosexample.com. IN NS 239eaad808eSchristosSECTION ANSWER 240eaad808eSchristosexample.com. IN NS ns.example.com. 241eaad808eSchristosexample.com. IN NS ns.blabla.com. 242eaad808eSchristosexample.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 243eaad808eSchristosSECTION ADDITIONAL 244eaad808eSchristosns.example.com. IN A 1.2.3.4 245eaad808eSchristosns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 246eaad808eSchristosENTRY_END 247eaad808eSchristos 248eaad808eSchristosENTRY_BEGIN 249eaad808eSchristosMATCH opcode qtype qname 250eaad808eSchristosADJUST copy_id 251eaad808eSchristosREPLY QR NOERROR 252eaad808eSchristosSECTION QUESTION 253eaad808eSchristosns.example.com. IN A 254eaad808eSchristosSECTION ANSWER 255eaad808eSchristosns.example.com. IN A 1.2.3.4 256eaad808eSchristosns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 257eaad808eSchristosSECTION ADDITIONAL 258eaad808eSchristosENTRY_END 259eaad808eSchristos 260eaad808eSchristosENTRY_BEGIN 261eaad808eSchristosMATCH opcode qtype qname 262eaad808eSchristosADJUST copy_id 263eaad808eSchristosREPLY QR NOERROR 264eaad808eSchristosSECTION QUESTION 265eaad808eSchristosns.example.com. IN AAAA 266eaad808eSchristosSECTION ANSWER 267eaad808eSchristosSECTION ADDITIONAL 268eaad808eSchristosns.example.com. IN NSEC oof.example.com. NSEC RRSIG A 269eaad808eSchristosns.example.com. 3600 IN RRSIG NSEC 3 3 3600 20070926134150 20070829134150 2854 example.com. ABhDNtJramb2a4R1SK5gb/CTYJybQts6mZ++z3kLiwsrUSZInA4ikeQ= ;{id = 2854} 270eaad808eSchristosENTRY_END 271eaad808eSchristos 272eaad808eSchristos; response to DNSKEY priming query 273eaad808eSchristosENTRY_BEGIN 274eaad808eSchristosMATCH opcode qtype qname 275eaad808eSchristosADJUST copy_id 276eaad808eSchristosREPLY QR NOERROR 277eaad808eSchristosSECTION QUESTION 278eaad808eSchristosexample.com. IN DNSKEY 279eaad808eSchristosSECTION ANSWER 280eaad808eSchristosexample.com. 3600 IN DNSKEY 256 3 3 ALXLUsWqUrY3JYER3T4TBJII s70j+sDS/UT2QRp61SE7S3E EXopNXoFE73JLRmvpi/UrOO/Vz4Se 6wXv/CYCKjGw06U4WRgR YXcpEhJROyNapmdIKSx hOzfLVE1gqA0PweZR8d tY3aNQSRn3sPpwJr6Mi /PqQKAMMrZ9ckJpf1+b QMOOvxgzz2U1GS18b3y ZKcgTMEaJzd/GZYzi/B N2DzQ0MsrSwYXfsNLFO Bbs8PJMW4LYIxeeOe6rUgkWOF 7CC9Dh/dduQ1QrsJhmZAEFfd6ByYV+ ;{id = 2854 (zsk), size = 1688b} 281eaad808eSchristosexample.com. 3600 IN RRSIG DNSKEY 3 2 3600 20070926134802 20070829134802 2854 example.com. MCwCFG1yhRNtTEa3Eno2zhVVuy2EJX3wAhQeLyUp6+UXcpC5qGNu9tkrTEgPUg== ;{id = 2854} 282eaad808eSchristosSECTION AUTHORITY 283eaad808eSchristosexample.com. IN NS ns.example.com. 284eaad808eSchristosexample.com. IN NS ns.blabla.com. 285eaad808eSchristosexample.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 286eaad808eSchristosSECTION ADDITIONAL 287eaad808eSchristosns.example.com. IN A 1.2.3.4 288eaad808eSchristosns.example.com. 3600 IN RRSIG A 3 3 3600 20070926135752 20070829135752 2854 example.com. MC0CFQCMSWxVehgOQLoYclB9PIAbNP229AIUeH0vNNGJhjnZiqgIOKvs1EhzqAo= ;{id = 2854} 289eaad808eSchristosENTRY_END 290eaad808eSchristos 291eaad808eSchristosENTRY_BEGIN 292eaad808eSchristosMATCH opcode qtype qname 293eaad808eSchristosADJUST copy_id 294eaad808eSchristosREPLY QR NOERROR 295eaad808eSchristosSECTION QUESTION 296eaad808eSchristoswww.example.com. IN A 297eaad808eSchristosSECTION ANSWER 298eaad808eSchristoswww.example.com. IN A 10.20.30.40 299eaad808eSchristosns.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFQCQMyTjn7WWwpwAR1LlVeLpRgZGuQIUCcJDEkwAuzytTDRlYK7nIMwH1CM= ;{id = 2854} 300eaad808eSchristosSECTION AUTHORITY 301eaad808eSchristosexample.com. IN NS ns.example.com. 302eaad808eSchristosexample.com. IN NS ns.blabla.com. 303eaad808eSchristosexample.com. 3600 IN RRSIG NS 3 2 3600 20070926134150 20070829134150 2854 example.com. AAJHNhPYVG6+550zQga9ZgV8McQZHLboOWjfbdiq2ZC+gUcQeQDDlFs= ;{id = 2854} 304eaad808eSchristosSECTION ADDITIONAL 305eaad808eSchristosns.example.com. IN A 1.2.3.4 306eaad808eSchristoswww.example.com. 3600 IN RRSIG A 3 3 3600 20070926134150 20070829134150 2854 example.com. MC0CFC99iE9K5y2WNgI0gFvBWaTi9wm6AhUAoUqOpDtG5Zct+Qr9F3mSdnbc6V4= ;{id = 2854} 307eaad808eSchristosENTRY_END 308eaad808eSchristos 309eaad808eSchristos; DS request 310eaad808eSchristosENTRY_BEGIN 311eaad808eSchristosMATCH opcode qtype qname 312eaad808eSchristosADJUST copy_id 313eaad808eSchristosREPLY QR AA NOERROR 314eaad808eSchristosSECTION QUESTION 315eaad808eSchristossub.example.com. IN DS 316eaad808eSchristosSECTION ANSWER 317eaad808eSchristossub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 318eaad808eSchristossub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 319eaad808eSchristosENTRY_END 320eaad808eSchristos 321eaad808eSchristosENTRY_BEGIN 322eaad808eSchristosMATCH opcode subdomain 323eaad808eSchristosADJUST copy_id copy_query 324eaad808eSchristosREPLY QR AA NOERROR 325eaad808eSchristosSECTION QUESTION 326eaad808eSchristossub.example.com. IN NS 327eaad808eSchristosSECTION AUTHORITY 328eaad808eSchristossub.example.com. IN NS ns.sub.example.com. 329eaad808eSchristossub.example.com. IN NS ns.foo.com. 330eaad808eSchristossub.example.com. 3600 IN DS 30899 RSASHA1 1 f7ed618f24d5e5202927e1d27bc2e84a141cb4b3 331eaad808eSchristossub.example.com. 3600 IN RRSIG DS 3 3 3600 20070926134150 20070829134150 2854 example.com. AKslZ9oXcoyeOkPfGkTB3/hxnpdgU5ahzElLyK6B0n6+BdIXeirIEtE= ;{id = 2854} 332eaad808eSchristosSECTION ADDITIONAL 333eaad808eSchristosns.sub.example.com. IN A 1.2.4.6 334eaad808eSchristosENTRY_END 335eaad808eSchristos 336eaad808eSchristosRANGE_END 337eaad808eSchristos 338eaad808eSchristos; ns.sub.example.com. 339eaad808eSchristosRANGE_BEGIN 0 100 340eaad808eSchristos ADDRESS 1.2.4.6 341eaad808eSchristosENTRY_BEGIN 342eaad808eSchristosMATCH opcode qtype qname 343eaad808eSchristosADJUST copy_id 344eaad808eSchristosREPLY QR AA NOERROR 345eaad808eSchristosSECTION QUESTION 346eaad808eSchristossub.example.com. IN DNSKEY 347eaad808eSchristosSECTION ANSWER 348eaad808eSchristossub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 349eaad808eSchristossub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. g+YoDwrCF75YCFyqYoxlF+/mNfcscnuZ6LfmfBgPLohlvCCC7jYj/wkc2fxAl3MEK0CriWkHp1hw0QQYkmbbKw== ;{id = 30899} 350eaad808eSchristosENTRY_END 351eaad808eSchristos 352eaad808eSchristosENTRY_BEGIN 353eaad808eSchristosMATCH opcode qtype qname 354eaad808eSchristosADJUST copy_id 355eaad808eSchristosREPLY QR AA NOERROR 356eaad808eSchristosSECTION QUESTION 357eaad808eSchristossub.example.com. IN NS 358eaad808eSchristosSECTION ANSWER 359eaad808eSchristossub.example.com. IN NS ns.sub.example.com. 360eaad808eSchristossub.example.com. IN NS ns.foo.com. 361eaad808eSchristossub.example.com. 3600 IN RRSIG NS 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. VCDq+gfZHuziE81Uypxm2va4eXCtoD8F8YKkwNo8laMNUcXh/hvGdbHKXMMghwuJXgxLh89Diu5kywBVwb/AIg== ;{id = 30899} 362eaad808eSchristosSECTION ADDITIONAL 363eaad808eSchristosns.sub.example.com. IN A 1.2.4.6 364eaad808eSchristosns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899} 365eaad808eSchristosENTRY_END 366eaad808eSchristos 367eaad808eSchristosENTRY_BEGIN 368eaad808eSchristosMATCH opcode qtype qname 369eaad808eSchristosADJUST copy_id 370eaad808eSchristosREPLY QR AA NOERROR 371eaad808eSchristosSECTION QUESTION 372eaad808eSchristosns.sub.example.com. IN A 373eaad808eSchristosSECTION ANSWER 374eaad808eSchristosns.sub.example.com. IN A 1.2.4.6 375eaad808eSchristosns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. l3wjlbDU2y7ECix6t1pp5Rtz+qFlADRMohcRsCrnD9b99IoOL0/cTpvvf2V1VTJveIibFGhbcHTuCqAQ4G4FKA== ;{id = 30899} 376eaad808eSchristosENTRY_END 377eaad808eSchristos 378eaad808eSchristosENTRY_BEGIN 379eaad808eSchristosMATCH opcode qtype qname 380eaad808eSchristosADJUST copy_id 381eaad808eSchristosREPLY QR AA NOERROR 382eaad808eSchristosSECTION QUESTION 383eaad808eSchristosns.sub.example.com. IN AAAA 384eaad808eSchristosSECTION AUTHORITY 385eaad808eSchristosns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 386eaad808eSchristosns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. eVe3iQS2/a1Y57AA2QSlMU/z31xaJ2mwUU36PZh8vlv6shPpQywAT70JdX6+ZsuliRpsbY6crkVXTXJ2qpKTiQ== ;{id = 30899} 387eaad808eSchristossub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 388eaad808eSchristossub.example.com. 3600 IN RRSIG SOA 5 3 3600 20030926134150 20030829134150 30899 sub.example.com. vEX2n1CksMr5jPq9d2BQJMIDwxaXdWlY5mYg+PBmOFI4xngFMKTsXa/+SfJy2SiqAgHTDI6joIo30AdQJsjdHA== ;{id = 30899} 389eaad808eSchristosENTRY_END 390eaad808eSchristos 391eaad808eSchristosENTRY_BEGIN 392eaad808eSchristosMATCH opcode qtype qname 393eaad808eSchristosADJUST copy_id 394eaad808eSchristosREPLY QR AA NOERROR 395eaad808eSchristosSECTION QUESTION 396eaad808eSchristoswww.sub.example.com. IN A 397eaad808eSchristosSECTION ANSWER 398eaad808eSchristoswww.sub.example.com. IN A 10.20.30.40 399eaad808eSchristoswww.sub.example.com. 3600 IN RRSIG A 5 4 3600 20030926134150 20030829134150 30899 sub.example.com. dBK6JOkKlp2G+f7mhInKnQM6DUBnEziTS+KpXzQ/5HT8/h9XkryOt4vAJKGCz0Ew3qRqjLgylsbGrcuxmIO9jA== ;{id = 30899} 400eaad808eSchristosENTRY_END 401eaad808eSchristos 402eaad808eSchristosRANGE_END 403eaad808eSchristos 404eaad808eSchristos; ns.foo.com. 405eaad808eSchristosRANGE_BEGIN 0 100 406eaad808eSchristos ADDRESS 1.2.4.7 407eaad808eSchristosENTRY_BEGIN 408eaad808eSchristosMATCH opcode qtype qname 409eaad808eSchristosADJUST copy_id 410eaad808eSchristosREPLY QR AA NOERROR 411eaad808eSchristosSECTION QUESTION 412eaad808eSchristossub.example.com. IN DNSKEY 413eaad808eSchristosSECTION ANSWER 414eaad808eSchristossub.example.com. 3600 IN DNSKEY 256 3 5 AQPQ41chR9DEHt/aIzIFAqanbDlRflJoRs5yz1jFsoRIT7dWf0r+PeDuewdxkszNH6wnU4QL8pfKFRh5PIYVBLK3 ;{id = 30899 (zsk), size = 512b} 415eaad808eSchristossub.example.com. 3600 IN RRSIG DNSKEY 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. uNGp99iznjD7oOX02XnQbDnbg75UwBHRvZSKYUorTKvPUnCWMHKdRsQ+mf+Fx3GZ+Fz9BVjoCmQqpnfgXLEYqw== ;{id = 30899} 416eaad808eSchristosENTRY_END 417eaad808eSchristos 418eaad808eSchristosENTRY_BEGIN 419eaad808eSchristosMATCH opcode qtype qname 420eaad808eSchristosADJUST copy_id 421eaad808eSchristosREPLY QR AA NOERROR 422eaad808eSchristosSECTION QUESTION 423eaad808eSchristossub.example.com. IN NS 424eaad808eSchristosSECTION ANSWER 425eaad808eSchristossub.example.com. IN NS ns.sub.example.com. 426eaad808eSchristossub.example.com. IN NS ns.foo.com. 427eaad808eSchristossub.example.com. 3600 IN RRSIG NS 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. hJ3nkrfyBwPcfpwc9wEwzhF5+ZKUddKBHQuZuHPZBjBwb1BsT7B7ryadttbGE3keQJiwNmK9AqvE0Zb+WkDceg== ;{id = 30899} 428eaad808eSchristosSECTION ADDITIONAL 429eaad808eSchristosns.sub.example.com. IN A 1.2.4.6 430eaad808eSchristosns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 431eaad808eSchristosENTRY_END 432eaad808eSchristos 433eaad808eSchristosENTRY_BEGIN 434eaad808eSchristosMATCH opcode qtype qname 435eaad808eSchristosADJUST copy_id 436eaad808eSchristosREPLY QR AA NOERROR 437eaad808eSchristosSECTION QUESTION 438eaad808eSchristosns.sub.example.com. IN A 439eaad808eSchristosSECTION ANSWER 440eaad808eSchristosns.sub.example.com. IN A 1.2.4.6 441eaad808eSchristosns.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. fMRshSYDWgvGAwc24Lzg6746jnoG5shlK+o9CgzU7CQbkeNWmj3oO/0TJGP/zxp52JiDBpzRuTmBlrcJYV/gBA== ;{id = 30899} 442eaad808eSchristosENTRY_END 443eaad808eSchristos 444eaad808eSchristosENTRY_BEGIN 445eaad808eSchristosMATCH opcode qtype qname 446eaad808eSchristosADJUST copy_id 447eaad808eSchristosREPLY QR AA NOERROR 448eaad808eSchristosSECTION QUESTION 449eaad808eSchristosns.sub.example.com. IN AAAA 450eaad808eSchristosSECTION AUTHORITY 451eaad808eSchristosns.sub.example.com. IN NSEC nt.sub.example.com. NSEC RRSIG A 452eaad808eSchristosns.sub.example.com. 3600 IN RRSIG NSEC 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. qwUibvlPTFnxgiyCNtEJCYqJIgA8WFDqypmsO6TSYje2Rqhq4AaWEVxQwU4bdjmipCGVqtlP8mMyMQHaYNMGKA== ;{id = 30899} 453eaad808eSchristossub.example.com. IN SOA sub.example.com. hostmaster.sub.example.com. 1 2 3 4 5 454eaad808eSchristossub.example.com. 3600 IN RRSIG SOA 5 3 3600 20070926134150 20070829134150 30899 sub.example.com. sZQEMd0ys2mxPRajzBuvy4XdLNVvXMmJSnmfTHUL41d9IxbGN/ifpiIWs2MXOFPnbab05aYadrzZpT/cpDTxmQ== ;{id = 30899} 455eaad808eSchristosENTRY_END 456eaad808eSchristos 457eaad808eSchristosENTRY_BEGIN 458eaad808eSchristosMATCH opcode qtype qname 459eaad808eSchristosADJUST copy_id 460eaad808eSchristosREPLY QR AA NOERROR 461eaad808eSchristosSECTION QUESTION 462eaad808eSchristoswww.sub.example.com. IN A 463eaad808eSchristosSECTION ANSWER 464eaad808eSchristoswww.sub.example.com. IN A 10.20.30.40 465eaad808eSchristoswww.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 466eaad808eSchristosENTRY_END 467eaad808eSchristos 468eaad808eSchristosRANGE_END 469eaad808eSchristos 470eaad808eSchristosSTEP 1 QUERY 471eaad808eSchristosENTRY_BEGIN 472eaad808eSchristosREPLY RD DO 473eaad808eSchristosSECTION QUESTION 474eaad808eSchristoswww.sub.example.com. IN A 475eaad808eSchristosENTRY_END 476eaad808eSchristos 477eaad808eSchristos; recursion happens here. 478eaad808eSchristosSTEP 10 CHECK_ANSWER 479eaad808eSchristosENTRY_BEGIN 480eaad808eSchristosMATCH all 481eaad808eSchristosREPLY QR RD RA AD DO NOERROR 482eaad808eSchristosSECTION QUESTION 483eaad808eSchristoswww.sub.example.com. IN A 484eaad808eSchristosSECTION ANSWER 485eaad808eSchristoswww.sub.example.com. IN A 10.20.30.40 486eaad808eSchristoswww.sub.example.com. 3600 IN RRSIG A 5 4 3600 20070926134150 20070829134150 30899 sub.example.com. deNzEy9Hq+6gDZhafC0M7UDuRBm51AA1/FAIauAitNuQlYUzOvWLVHFQ95bn308rCVPqrb4rFDV+gNzxkzm1rw== ;{id = 30899} 487eaad808eSchristosENTRY_END 488eaad808eSchristos 489eaad808eSchristos; remove pending ns.blabla.com AAAA msg 490eaad808eSchristosSTEP 30 QUERY 491eaad808eSchristosENTRY_BEGIN 492eaad808eSchristosREPLY RD DO CD 493eaad808eSchristosSECTION QUESTION 494eaad808eSchristosns.blabla.com. IN AAAA 495eaad808eSchristosENTRY_END 496eaad808eSchristos 497eaad808eSchristos; recursion happens here. 498eaad808eSchristosSTEP 40 CHECK_ANSWER 499eaad808eSchristosENTRY_BEGIN 500eaad808eSchristosMATCH all 501eaad808eSchristosREPLY QR RD CD RA DO NOERROR 502eaad808eSchristosSECTION QUESTION 503eaad808eSchristosns.blabla.com. IN AAAA 504eaad808eSchristosSECTION ANSWER 505eaad808eSchristosSECTION AUTHORITY 506eaad808eSchristoscom. IN SOA com. com. 2009100100 28800 7200 604800 3600 507eaad808eSchristosENTRY_END 508eaad808eSchristos 509eaad808eSchristosSCENARIO_END 510