321 lines
12 KiB
INI
321 lines
12 KiB
INI
|
# zone11.xa
|
||
|
|
zone11.xa:53 {
|
||
|
|
bind 127.19.11.21 # ns1.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
|
||
|
|
bind 127.19.11.22 # ns2.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/zone11.xa.zone zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
##
|
||
|
|
## Regular scenarios
|
||
|
|
##
|
||
|
|
|
||
|
|
# good-spf-1.zone11.xa
|
||
|
|
good-spf-1.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/good-spf-1.zone11.xa.zone good-spf-1.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# good-spf-2.zone11.xa
|
||
|
|
good-spf-2.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/good-spf-2.zone11.xa.zone good-spf-2.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# same-spf-different-txt.zone11.xa
|
||
|
|
same-spf-different-txt.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns1.same-spf-different-txt.zone11.xa.zone same-spf-different-txt.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
same-spf-different-txt.zone11.xa:53 {
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns2.same-spf-different-txt.zone11.xa.zone same-spf-different-txt.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# no-txt.zone11.xa
|
||
|
|
no-txt.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/no-txt.zone11.xa.zone no-txt.zone11.xa
|
||
|
|
|
||
|
|
# CoreDNS erroneously returns NXDOMAIN when a node exists but no records
|
||
|
|
# matching QTYPE. This is a workaround to ensure we get NODATA.
|
||
|
|
template IN TXT no-txt.zone11.xa {
|
||
|
|
rcode NOERROR
|
||
|
|
# CAUTION: Make sure this remains in sync with the contents of COMMON-SCENARIO-INCLUDE
|
||
|
|
authority "no-txt.zone11.xa. 3600 IN SOA ns1.child.zone11.xa. admin.zone11.xa. 2025080400 21600 3600 604800 86400"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# no-spf-txt.zone11.xa
|
||
|
|
no-spf-txt.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/no-spf-txt.zone11.xa.zone no-spf-txt.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# invalid-syntax-1.zone11.xa
|
||
|
|
invalid-syntax-1.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/invalid-syntax-1.zone11.xa.zone invalid-syntax-1.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# invalid-syntax-2.zone11.xa
|
||
|
|
invalid-syntax-2.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1{a,b}.invalid-syntax-2.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1{a,b}.invalid-syntax-2.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.invalid-syntax-2.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.invalid-syntax-2.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/invalid-syntax-2.zone11.xa.zone invalid-syntax-2.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# invalid-syntax-3.zone11.xa
|
||
|
|
invalid-syntax-3.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/invalid-syntax-3.zone11.xa.zone invalid-syntax-3.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# non-auth-txt.zone11.xa
|
||
|
|
non-auth-txt.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/non-auth-txt.zone11.xa.zone non-auth-txt.zone11.xa
|
||
|
|
|
||
|
|
header {
|
||
|
|
response clear aa
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# servfail.zone11.xa
|
||
|
|
servfail.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/servfail.zone11.xa.zone servfail.zone11.xa
|
||
|
|
|
||
|
|
template IN TXT servfail.zone11.xa {
|
||
|
|
rcode SERVFAIL
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# inconsistent-spf.zone11.xa
|
||
|
|
inconsistent-spf.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns1.inconsistent-spf.zone11.xa.zone inconsistent-spf.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
inconsistent-spf.zone11.xa:53 {
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns2.inconsistent-spf.zone11.xa.zone inconsistent-spf.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# spf-missing-on-one.zone11.xa
|
||
|
|
spf-missing-on-one.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns1.spf-missing-on-one.zone11.xa.zone spf-missing-on-one.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
spf-missing-on-one.zone11.xa:53 {
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
bind 127.19.11.33 # ns3.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:33 # ns3.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns2-3.spf-missing-on-one.zone11.xa.zone spf-missing-on-one.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# all-different-spf.zone11.xa
|
||
|
|
all-different-spf.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns1.all-different-spf.zone11.xa.zone all-different-spf.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
all-different-spf.zone11.xa:53 {
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns2.all-different-spf.zone11.xa.zone all-different-spf.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
all-different-spf.zone11.xa:53 {
|
||
|
|
bind 127.19.11.33 # ns3.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:33 # ns3.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/ns3.all-different-spf.zone11.xa.zone all-different-spf.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
# multiple-spf-records.zone11.xa
|
||
|
|
multiple-spf-records.zone11.xa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/multiple-spf-records.zone11.xa.zone multiple-spf-records.zone11.xa
|
||
|
|
}
|
||
|
|
|
||
|
|
##
|
||
|
|
## TLD and ARPA scenarios
|
||
|
|
##
|
||
|
|
|
||
|
|
# no-spf-zone11
|
||
|
|
no-spf-zone11:53 {
|
||
|
|
bind 127.19.11.21 # ns1.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
|
||
|
|
bind 127.19.11.22 # ns2.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/no-spf-zone11.zone no-spf-zone11
|
||
|
|
|
||
|
|
# CoreDNS erroneously returns NXDOMAIN when a node exists but no records
|
||
|
|
# matching QTYPE. This is a workaround to ensure we get NODATA.
|
||
|
|
template IN TXT no-spf-zone11 {
|
||
|
|
rcode NOERROR
|
||
|
|
# CAUTION: Make sure this remains in sync with the contents of COMMON-TLD-ARPA-INCLUDE
|
||
|
|
authority "no-spf-zone11. 3600 IN SOA ns1.zone11.xa. admin.zone11.xa. 2025080400 21600 3600 604800 86400"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# null-spf-zone11
|
||
|
|
null-spf-zone11:53 {
|
||
|
|
bind 127.19.11.21 # ns1.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
|
||
|
|
bind 127.19.11.22 # ns2.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/null-spf-zone11.zone null-spf-zone11
|
||
|
|
}
|
||
|
|
|
||
|
|
# non-null-spf-zone11
|
||
|
|
non-null-spf-zone11:53 {
|
||
|
|
bind 127.19.11.21 # ns1.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
|
||
|
|
bind 127.19.11.22 # ns2.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/non-null-spf-zone11.zone non-null-spf-zone11
|
||
|
|
}
|
||
|
|
|
||
|
|
# zone11.arpa
|
||
|
|
zone11.arpa:53 {
|
||
|
|
bind 127.19.11.21 # ns1.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
|
||
|
|
bind 127.19.11.22 # ns2.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/zone11.arpa.zone zone11.arpa
|
||
|
|
}
|
||
|
|
|
||
|
|
# no-spf-arpa-zone.zone11.arpa
|
||
|
|
no-spf-arpa-zone.zone11.arpa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/no-spf-arpa-zone.zone11.arpa.zone no-spf-arpa-zone.zone11.arpa
|
||
|
|
|
||
|
|
# CoreDNS erroneously returns NXDOMAIN when a node exists but no records
|
||
|
|
# matching QTYPE. This is a workaround to ensure we get NODATA.
|
||
|
|
template IN TXT no-spf-arpa-zone.zone11.arpa {
|
||
|
|
rcode NOERROR
|
||
|
|
# CAUTION: Make sure this remains in sync with the contents of COMMON-TLD-ARPA-INCLUDE
|
||
|
|
authority "no-spf-arpa-zone.zone11.arpa. 3600 IN SOA ns1.zone11.xa. admin.zone11.xa. 2025080400 21600 3600 604800 86400"
|
||
|
|
}
|
||
|
|
}
|
||
|
|
|
||
|
|
# null-spf-arpa-zone.zone11.arpa
|
||
|
|
null-spf-arpa-zone.zone11.arpa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/null-spf-arpa-zone.zone11.arpa.zone null-spf-arpa-zone.zone11.arpa
|
||
|
|
}
|
||
|
|
|
||
|
|
# non-null-spf-arpa-zone.zone11.arpa
|
||
|
|
non-null-spf-arpa-zone.zone11.arpa:53 {
|
||
|
|
bind 127.19.11.31 # ns1.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
|
||
|
|
bind 127.19.11.32 # ns2.child.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/non-null-spf-arpa-zone.zone11.arpa.zone non-null-spf-arpa-zone.zone11.arpa
|
||
|
|
}
|
||
|
|
|
||
|
|
|
||
|
|
##
|
||
|
|
## Alternative root zones
|
||
|
|
##
|
||
|
|
|
||
|
|
.:53 {
|
||
|
|
bind 127.19.11.41 # ns1.no-spf.root-servers.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:41 # ns1.no-spf.root-servers.zone11.xa
|
||
|
|
bind 127.19.11.42 # ns2.no-spf.root-servers.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:42 # ns2.no-spf.root-servers.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/root-no-spf.zone .
|
||
|
|
}
|
||
|
|
|
||
|
|
.:53 {
|
||
|
|
bind 127.19.11.43 # ns1.null-spf.root-servers.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:43 # ns1.null-spf.root-servers.zone11.xa
|
||
|
|
bind 127.19.11.44 # ns2.null-spf.root-servers.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:44 # ns2.null-spf.root-servers.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/root-null-spf.zone .
|
||
|
|
}
|
||
|
|
|
||
|
|
.:53 {
|
||
|
|
bind 127.19.11.45 # ns1.non-null-spf.root-servers.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:45 # ns1.non-null-spf.root-servers.zone11.xa
|
||
|
|
bind 127.19.11.46 # ns2.non-null-spf.root-servers.zone11.xa
|
||
|
|
bind fda1:b2:c3::127:19:11:46 # ns2.non-null-spf.root-servers.zone11.xa
|
||
|
|
log
|
||
|
|
file Zone-TP/zone11/root-non-null-spf.zone .
|
||
|
|
}
|