1; config options 2server: 3 module-config: "respip validator iterator" 4 target-fetch-policy: "0 0 0 0 0" 5 qname-minimisation: no 6 rrset-roundrobin: no 7 access-control: 192.0.0.0/8 allow 8 9rpz: 10 name: "rpz.example.com" 11 rpz-log: yes 12 rpz-log-name: "rpz.example.com" 13 zonefile: 14TEMPFILE_NAME rpz.example.com 15TEMPFILE_CONTENTS rpz.example.com 16rpz.example.com. 3600 IN SOA ns.rpz.example.com. hostmaster.rpz.example.com. 1 3600 900 86400 3600 17rpz.example.com. 3600 IN NS ns.rpz.example.net. 18a.foo.rpz.example.com. 120 IN A 10.99.99.99 19TEMPFILE_END 20 21stub-zone: 22 name: "." 23 stub-addr: 10.20.30.40 24 25CONFIG_END 26 27SCENARIO_BEGIN Test RPZ with cached CNAME to A record 28 29RANGE_BEGIN 0 100 30 ADDRESS 10.20.30.40 31 32ENTRY_BEGIN 33MATCH opcode qname qtype 34ADJUST copy_id 35REPLY QR NOERROR AA 36SECTION QUESTION 37. IN NS 38SECTION ANSWER 39. IN NS ns. 40SECTION ADDITIONAL 41ns. IN NS 10.20.30.40 42ENTRY_END 43 44ENTRY_BEGIN 45MATCH opcode qname qtype 46ADJUST copy_id 47REPLY QR NOERROR AA 48SECTION QUESTION 49b.foo. IN A 50SECTION ANSWER 51b.foo. 30 CNAME a.foo. 52a.foo. 30 A 1.2.3.4 53ENTRY_END 54 55ENTRY_BEGIN 56MATCH opcode qname qtype 57ADJUST copy_id 58REPLY QR NOERROR AA 59SECTION QUESTION 60a.foo. IN A 61SECTION ANSWER 62a.foo. A 1.2.3.4 63ENTRY_END 64 65RANGE_END 66 67STEP 10 QUERY 68ENTRY_BEGIN 69REPLY RD 70SECTION QUESTION 71a.foo. IN A 72ENTRY_END 73 74STEP 20 CHECK_ANSWER 75ENTRY_BEGIN 76MATCH all 77REPLY QR RD RA AA NOERROR 78SECTION QUESTION 79a.foo. IN A 80SECTION ANSWER 81a.foo. 120 A 10.99.99.99 82ENTRY_END 83 84STEP 30 QUERY 85ENTRY_BEGIN 86REPLY RD 87SECTION QUESTION 88b.foo. IN A 89ENTRY_END 90 91STEP 40 CHECK_ANSWER 92ENTRY_BEGIN 93MATCH all 94REPLY QR RD RA AA NOERROR 95SECTION QUESTION 96b.foo. IN A 97SECTION ANSWER 98b.foo. 30 CNAME a.foo. 99a.foo. 120 A 10.99.99.99 100ENTRY_END 101 102STEP 50 TIME_PASSES ELAPSE 3 103 104STEP 60 QUERY 105ENTRY_BEGIN 106REPLY RD 107SECTION QUESTION 108b.foo. IN A 109ENTRY_END 110 111STEP 70 CHECK_ANSWER 112ENTRY_BEGIN 113MATCH all 114REPLY QR RD RA AA NOERROR 115SECTION QUESTION 116b.foo. IN A 117SECTION ANSWER 118b.foo. 30 CNAME a.foo. 119a.foo. 120 A 10.99.99.99 120ENTRY_END 121 122SCENARIO_END 123