nsec_no_data_response.rpl 7.61 KB
Newer Older
Marek Vavruša's avatar
Marek Vavruša committed
1
; config options
2
;server:
Marek Vavruša's avatar
Marek Vavruša committed
3
	trust-anchor: ". 3600 IN DS 17272 13 4 B87AD8C76DC2244E7AA57285057BF533F2E248CC8D7E1A071D8A3837A711A5EA705C4707E6E8911DA653BE1AE019927B"
Grigorii Demidov's avatar
Grigorii Demidov committed
4
	val-override-timestamp: "1442839270"
5
	do-not-query-localhost: off
Marek Vavruša's avatar
Marek Vavruša committed
6

7 8
;stub-zone:
;	name: "."
9
	stub-addr: 127.0.0.1 	# ns.
Marek Vavruša's avatar
Marek Vavruša committed
10 11
CONFIG_END

12
SCENARIO_BEGIN Test validation of NSEC name error responses.
Marek Vavruša's avatar
Marek Vavruša committed
13 14 15

; ns.
RANGE_BEGIN 0 100
16
	ADDRESS 127.0.0.1
Marek Vavruša's avatar
Marek Vavruša committed
17 18 19

ENTRY_BEGIN
MATCH opcode qtype qname
20
ADJUST copy_id copy_query
Marek Vavruša's avatar
Marek Vavruša committed
21 22 23 24 25 26 27
REPLY QR AA NOERROR
SECTION QUESTION
. IN NS
SECTION ANSWER
.                       3600    IN      NS      ns.
.                       3600    IN      RRSIG   NS 13 0 3600 20151014142315 20150914142315 17272 . aEIYUS4S8Hd7vAVYvHwFyV97lKx4xt2PgAUbM4A7JUXHkTJDHUQEDVQh LWGxK6e+AUeuq4qlDo4vSz3IedmOBQ==
SECTION ADDITIONAL
28
ns.                     3600    IN      A       127.0.0.1
Marek Vavruša's avatar
Marek Vavruša committed
29 30 31 32 33
ns.                     3600    IN      RRSIG   A 13 1 3600 20151014142315 20150914142315 17272 . 27h0pFJyb5t/2cZsFjynp0TRIdUlQwPYcAwCer2UbXTiBBaD8n15hfh8 PFU0if8X0ikqHusz6rCNTx/aBraYdQ==
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
34
ADJUST copy_id copy_query
Marek Vavruša's avatar
Marek Vavruša committed
35 36 37 38 39 40 41 42 43
REPLY QR AA NOERROR
SECTION QUESTION
. IN DNSKEY
SECTION ANSWER
.                       3600    IN      DNSKEY  256 3 13 qKlBZ0TvdY8C8+7bTcdnQdrLZxEwvxEwlGmIOTd/ccL5Jiei1whNktoE /Qzo1lJ0cXfVssy4EVMaqEdzIa+pkA==
.                       3600    IN      RRSIG   DNSKEY 13 0 3600 20151014142315 20150914142315 17272 . FaY+kslqSPIRZsk65z8SrROt7kfx+RGUEBGbVgLQxKruJxc9+MMrl4e4 +RefYIlwpecj4jXwb75RTbT0g7OGGg==
ENTRY_END

ENTRY_BEGIN
44 45
MATCH opcode subdomain
ADJUST copy_id copy_query
Marek Vavruša's avatar
Marek Vavruša committed
46 47
REPLY QR NOERROR
SECTION QUESTION
48
example. IN NS
Marek Vavruša's avatar
Marek Vavruša committed
49 50 51 52 53
SECTION AUTHORITY
example.                3600    IN      NS      ns.example.
example.                3600    IN      DS      11225 13 4 B4BDAB0B3751300BFB9D0D240649279B4BA0E67A308E1B0BFE2931D9 47F7FD71A2BD807D84CDE24286D955A35752484F
example.                3600    IN      RRSIG   DS 13 1 3600 20151014143533 20150914143533 17272 . b0+fXKmsBBXkzf+Myr5eRsXWDvY75oMlr4Yi5j+3iF7cOviVGKz3Dw8u bfKW+OmyHiuTeL71gez/84P+vHEvHA==
SECTION ADDITIONAL
54
ns.example.             3600    IN      A       127.0.0.2
Marek Vavruša's avatar
Marek Vavruša committed
55 56 57 58 59 60
ENTRY_END

RANGE_END

; ns.example.
RANGE_BEGIN 0 100
61
	ADDRESS 127.0.0.2
Marek Vavruša's avatar
Marek Vavruša committed
62 63 64

ENTRY_BEGIN
MATCH opcode qtype qname
65
ADJUST copy_id copy_query
Marek Vavruša's avatar
Marek Vavruša committed
66 67 68 69 70 71 72
REPLY QR AA NOERROR
SECTION QUESTION
example. IN NS
SECTION ANSWER
example.                3600    IN      NS      ns.example.
example.                3600    IN      RRSIG   NS 13 1 3600 20151014143225 20150914143225 11225 example. C6KOyVJzeRh/3KL9BxSVOVZN0RIyBhlBmmmnVEFT5qPUrn3m5FjcIBtI hi7cAl2FeY1rqstztvKAY6UOBE0kGQ==
SECTION ADDITIONAL
73
ns.example.             3600    IN      A       127.0.0.2
Marek Vavruša's avatar
Marek Vavruša committed
74 75 76 77 78
ns.example.             3600    IN      RRSIG   A 13 2 3600 20151014143225 20150914143225 11225 example. fM/mwUOtyIbKTxgxaekZf5A8kV3qYIFADtvhcQi0TUh09nfkHQtUqhew zVBXCEtjKMnYFvNhWF6PyiirtOeM8w==
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
79
ADJUST copy_id copy_query
Marek Vavruša's avatar
Marek Vavruša committed
80 81 82 83 84 85 86 87 88 89
REPLY QR AA NOERROR
SECTION QUESTION
example. IN DNSKEY
SECTION ANSWER
example.                3600    IN      DNSKEY  256 3 13 d9Qb4Tj90Y2cvdWcZfu45clfoLKqGbJn2vQKqZv07nc4FMf2oRkrNXtP fixVTLfbbWAFtbbFf3mhCNUsetRUVQ==
example.                3600    IN      RRSIG   DNSKEY 13 1 3600 20151015124839 20150915124839 11225 example. 4DemFjvys9Gfq+gG1i8IB6GPBUw9lIv3F082JwW7O8tqNIn45n2z14gg ieeJTRhU9xXOVIfj6amITZWbjvGyFA==
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
90
ADJUST copy_id copy_query
Marek Vavruša's avatar
Marek Vavruša committed
91 92
REPLY QR NOERROR
SECTION QUESTION
93
nsec.example. IN CNAME
Marek Vavruša's avatar
Marek Vavruša committed
94 95 96 97 98
SECTION AUTHORITY
nsec.example.           3600    IN      NS      ns.nsec.example.
nsec.example.           3600    IN      DS      54343 13 4 90ABD4FB9F053CF67F6D838DD2437FB16104B8BF127319706223004F 2ED72AF2872B4E507EB483A303BF60BF08C87364
nsec.example.           3600    IN      RRSIG   DS 13 2 3600 20151015124611 20150915124611 11225 example. HYzlEdyYugggsEwUVyyY4XHFVUZZ8yiIh4vnuViGBQQJP+yryYh1aLyN ap2Q51nkmSG1fXDb2IySiAYuqUJyLw==
SECTION ADDITIONAL
99
ns.nsec.example.        3600    IN      A       127.0.0.3
Marek Vavruša's avatar
Marek Vavruša committed
100 101 102 103 104 105
ENTRY_END

RANGE_END

; ns.nsec.example.
RANGE_BEGIN 0 100
106
	ADDRESS 127.0.0.3
Marek Vavruša's avatar
Marek Vavruša committed
107 108 109

ENTRY_BEGIN
MATCH opcode qtype qname
110
ADJUST copy_id copy_query
Marek Vavruša's avatar
Marek Vavruša committed
111 112 113 114 115 116 117
REPLY QR AA NOERROR
SECTION QUESTION
nsec.example. IN NS
SECTION ANSWER
nsec.example.           3600    IN      NS      ns.nsec.example.
nsec.example.           3600    IN      RRSIG   NS 13 2 3600 20151015124917 20150915124917 54343 nsec.example. 6s75LEuylIKAxqAbcPmmnkOMC7jxF6cPZGW5EFbhOOeR63ENyh642GE1 71WtJc7Ta4Y/PsnAT+/dTv8NSTDCHQ==
SECTION ADDITIONAL
118
ns.nsec.example.        3600    IN      A       127.0.0.3
Marek Vavruša's avatar
Marek Vavruša committed
119 120 121 122 123
ns.nsec.example.        3600    IN      RRSIG   A 13 3 3600 20151015124917 20150915124917 54343 nsec.example. oJpF87bjXR0DjIoNvEAo+Wu+p9jF+URX5lxi+g53OFCX1Q1lxqj5ujGd KOPsNAbKvTCsoFFW4tQyhCYJYD1HlQ==
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
124
ADJUST copy_id copy_query
Marek Vavruša's avatar
Marek Vavruša committed
125 126 127 128 129 130 131 132 133 134
REPLY QR AA NOERROR
SECTION QUESTION
nsec.example. IN DNSKEY
SECTION ANSWER
nsec.example.           3600    IN      DNSKEY  256 3 13 HA6nKf+X7/mYkmmRO8qS2tIKT0B60P7COAiRs25xKs/rAP+tDtGWkrkG NQx2D3ajccC9whjRaKz2JVS3ItTFQg==
nsec.example.           3600    IN      RRSIG   DNSKEY 13 2 3600 20151015124917 20150915124917 54343 nsec.example. 965Mfxs1QtgxwzyhfxXyKyOZ9iT1DXpvypBBR10sLyjHe/w7cRhgcyev Cza6K+2jJwHJBmbknc3Qhi+1dd+AJw==
ENTRY_END

ENTRY_BEGIN
MATCH opcode qtype qname
135
ADJUST copy_id copy_query
136
REPLY QR AA NOERROR
Marek Vavruša's avatar
Marek Vavruša committed
137
SECTION QUESTION
138
nsec.example. IN CNAME
Marek Vavruša's avatar
Marek Vavruša committed
139
SECTION AUTHORITY
140
nsec.example.           3600    IN      SOA     ns.nsec.example. root.nsec.example. 6 60 60 120 3600
Marek Vavruša's avatar
Marek Vavruša committed
141
nsec.example.           3600    IN      NSEC    alias.nsec.example. A NS SOA MX AAAA RRSIG NSEC DNSKEY
142
nsec.example.           3600    IN      RRSIG   SOA 13 2 3600 20151017113144 20150917113144 54343 nsec.example. /3orb3cezQbBCZsFP9rx6Col9AB2QxHQtzQ32BYe09MfN7YZxtTE/HZJ aSXGWD3D7sLBdEkg8TGP8JPQtbW2yQ==
Marek Vavruša's avatar
Marek Vavruša committed
143 144 145
nsec.example.           3600    IN      RRSIG   NSEC 13 2 3600 20151015124917 20150915124917 54343 nsec.example. STcV7Lc1a794i9DTgflI+d0N0KXTMws0G8VGc0Wo4tVI8lvFJcG1SFXW /jJaXkQstdZ2EM63fIs/u1hhBaV2Gw==
ENTRY_END

146 147
ENTRY_BEGIN
MATCH opcode qtype qname
148
ADJUST copy_id copy_query
149 150 151 152 153 154 155 156
REPLY QR AA NOERROR
SECTION QUESTION
nsec.example. IN TYPE1000
SECTION AUTHORITY
nsec.example.           3600    IN      SOA     ns.nsec.example. root.nsec.example. 6 60 60 120 3600
nsec.example.           3600    IN      RRSIG   SOA 13 2 3600 20151017113144 20150917113144 54343 nsec.example. /3orb3cezQbBCZsFP9rx6Col9AB2QxHQtzQ32BYe09MfN7YZxtTE/HZJ aSXGWD3D7sLBdEkg8TGP8JPQtbW2yQ==
ENTRY_END

Marek Vavruša's avatar
Marek Vavruša committed
157 158 159 160 161 162 163 164
RANGE_END

;STEP 0 TIME_PASSES ELAPSE 1000

STEP 1 QUERY
ENTRY_BEGIN
REPLY RD DO
SECTION QUESTION
165
nsec.example. IN CNAME
Marek Vavruša's avatar
Marek Vavruša committed
166 167 168 169 170
ENTRY_END

; recursion happens here.
STEP 2 CHECK_ANSWER
ENTRY_BEGIN
171
MATCH all
172
ADJUST copy_id copy_query
173 174 175 176 177 178 179 180 181 182
REPLY QR RD RA AD NOERROR
SECTION QUESTION
nsec.example. IN CNAME
SECTION AUTHORITY
nsec.example.           3600    IN      SOA     ns.nsec.example. root.nsec.example. 6 60 60 120 3600
nsec.example.           3600    IN      NSEC    alias.nsec.example. A NS SOA MX AAAA RRSIG NSEC DNSKEY
nsec.example.           3600    IN      RRSIG   SOA 13 2 3600 20151017113144 20150917113144 54343 nsec.example. /3orb3cezQbBCZsFP9rx6Col9AB2QxHQtzQ32BYe09MfN7YZxtTE/HZJ aSXGWD3D7sLBdEkg8TGP8JPQtbW2yQ==
nsec.example.           3600    IN      RRSIG   NSEC 13 2 3600 20151015124917 20150915124917 54343 nsec.example. STcV7Lc1a794i9DTgflI+d0N0KXTMws0G8VGc0Wo4tVI8lvFJcG1SFXW /jJaXkQstdZ2EM63fIs/u1hhBaV2Gw==
ENTRY_END

183 184 185 186 187 188 189 190 191 192 193
; TODO: aggressive caching can return the same answer as in STEP 2, without asking again.
;STEP 3 QUERY
;ENTRY_BEGIN
;REPLY RD DO
;SECTION QUESTION
;nsec.example. IN TYPE1000
;ENTRY_END
;
;STEP 4 CHECK_ANSWER
;ENTRY_BEGIN
;MATCH all
194
;ADJUST copy_id copy_query
195 196 197 198 199
;REPLY QR RD RA SERVFAIL
;SECTION QUESTION
;nsec.example. IN TYPE1000
;SECTION AUTHORITY
;ENTRY_END
Marek Vavruša's avatar
Marek Vavruša committed
200 201

SCENARIO_END