feat: add full Zonemaster stack with Docker and Spanish UI
- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI) - Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend - Dockerfile.gui: Astro static build served via nginx - docker-compose.yml: backend (internal) + frontend (port 5353) - nginx.conf: root redirects to /es/, /api/ proxied to backend - zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish) Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
@@ -0,0 +1,36 @@
|
||||
; Must be kept zone independent to work for any level of zone including TLD.
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2022121300 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
DNSKEY 256 3 8 (
|
||||
AwEAAakN9dPQcFI31NqnC2y9E5gCzNAeQdLvbEcNJ8bO
|
||||
xqXwkNlKZ1bA7YLWpFpofYDvWQDKK2RMtvkL7ZWGokve
|
||||
EA1edxVhtxSjJ+HrlJ3GGnXqeEzuEK6OkVdGvVmgjv6J
|
||||
XAsOuKxnYnhUc39WvnA2UxNhqPaqKB2Hxlcqu2LwSAnt
|
||||
) ; ZSK; alg = RSASHA256 ; key id = 53655
|
||||
DNSKEY 257 3 8 (
|
||||
AwEAAdjFhIuIbkugW2DTaHNGN0PVV79EBGxlUEmnim0K
|
||||
QHfnzZt6Qr9L0BSQ5wRNV3MqEQnMHBxq3okabyT+S/zf
|
||||
8PNaKWybyE3HGs7tF1OCbarxqQ0WlEY6MrefzB7gPL0m
|
||||
uyaAYT4PUW8dsIRrRQAqTxQXiLDgAJAfynF6bCgT7urA
|
||||
PqtCOOgzfj0XzfWCPbG7iFy506CQfX77MlgiDOLkB3sd
|
||||
/Z8x4Ahp0UowQUdyrP9M8mMeD/d/UI/kDQ9KiT2VWpaG
|
||||
bW2ZH2unz++7alWQG73nt+8gT//mjj8EaJU3Xmfm3Q/i
|
||||
zu54ASzsQ/+76b225SC7URTfXUZiGHG3XvVOyUc=
|
||||
) ; KSK; alg = RSASHA256 ; key id = 23401
|
||||
|
||||
NS ns1
|
||||
NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
|
||||
202
zonemaster/test-zone-data/DNSSEC-TP/dnssec03/README.md
Normal file
202
zonemaster/test-zone-data/DNSSEC-TP/dnssec03/README.md
Normal file
@@ -0,0 +1,202 @@
|
||||
# DNSSEC03
|
||||
|
||||
[This directory](.), i.e. the same directory as this README file, holds
|
||||
zone files and `coredns` configuration files for scenarios for test case DNSSEC03:
|
||||
|
||||
* NO-DNSSEC-SUPPORT
|
||||
* NO-NSEC3
|
||||
* GOOD-VALUES
|
||||
* ERR-MULT-NSEC3
|
||||
* BAD-VALUES
|
||||
* INCONSISTENT-VALUES
|
||||
* NSEC3-OPT-OUT-ENABLED-TLD
|
||||
* SERVER-NO-DNSSEC-SUPPORT
|
||||
* SERVER-NO-NSEC3
|
||||
* UNASSIGNED-FLAG-USED
|
||||
|
||||
|
||||
## Limitation
|
||||
|
||||
These scenarios cannot be tested until pull request zonemaster/zonemaster#1189
|
||||
has been implemented.
|
||||
|
||||
|
||||
## zonemaster-cli commands and their output for each test scenario
|
||||
|
||||
The level (`--level`) must be set to the lowest level of the message tags. For
|
||||
this test case `INFO` is the lowest level. It is only meaningful to test the
|
||||
test zones with test case DNSSEC03.
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
NO-DNSSEC-SUPPORT | DS03_NO_DNSSEC_SUPPORT | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_DISABLED, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli no-dnssec-support.dnssec03.xa --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.12 NOTICE DS03_NO_DNSSEC_SUPPORT ns_list=ns1.no-dnssec-support.dnssec03.xa/127.15.3.31;ns1.no-dnssec-support.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.no-dnssec-support.dnssec03.xa/127.15.3.32;ns2.no-dnssec-support.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
NO-NSEC3 | DS03_NO_NSEC3 | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NO_DNSSEC_SUPPORT, DS03_NSEC3_OPT_OUT_DISABLED, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info no-nsec3.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.16 INFO DS03_NO_NSEC3 ns_list=ns1.no-nsec3.dnssec03.xa/127.15.3.31;ns1.no-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.no-nsec3.dnssec03.xa/127.15.3.32;ns2.no-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
GOOD-VALUES | DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NSEC3_OPT_OUT_DISABLED | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info good-values.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.11 INFO DS03_LEGAL_HASH_ALGO ns_list=ns1.good-values.dnssec03.xa/127.15.3.31;ns1.good-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.good-values.dnssec03.xa/127.15.3.32;ns2.good-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.11 INFO DS03_NSEC3_OPT_OUT_DISABLED ns_list=ns1.good-values.dnssec03.xa/127.15.3.31;ns1.good-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.good-values.dnssec03.xa/127.15.3.32;ns2.good-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.11 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns1.good-values.dnssec03.xa/127.15.3.31;ns1.good-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.good-values.dnssec03.xa/127.15.3.32;ns2.good-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.11 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns1.good-values.dnssec03.xa/127.15.3.31;ns1.good-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.good-values.dnssec03.xa/127.15.3.32;ns2.good-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
ERR-MULT-NSEC3 | DS03_ERR_MULT_NSEC3, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NSEC3_OPT_OUT_DISABLED | DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info err-mult-nsec3.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.18 ERROR DS03_ERR_MULT_NSEC3 ns_list=ns1.err-mult-nsec3.dnssec03.xa/127.15.3.31;ns1.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.err-mult-nsec3.dnssec03.xa/127.15.3.32;ns2.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.18 INFO DS03_LEGAL_HASH_ALGO ns_list=ns1.err-mult-nsec3.dnssec03.xa/127.15.3.31;ns1.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.err-mult-nsec3.dnssec03.xa/127.15.3.32;ns2.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.18 INFO DS03_NSEC3_OPT_OUT_DISABLED ns_list=ns1.err-mult-nsec3.dnssec03.xa/127.15.3.31;ns1.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.err-mult-nsec3.dnssec03.xa/127.15.3.32;ns2.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.18 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns1.err-mult-nsec3.dnssec03.xa/127.15.3.31;ns1.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.err-mult-nsec3.dnssec03.xa/127.15.3.32;ns2.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.18 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns1.err-mult-nsec3.dnssec03.xa/127.15.3.31;ns1.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.err-mult-nsec3.dnssec03.xa/127.15.3.32;ns2.err-mult-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
BAD-VALUES | DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD | DS03_ERR_MULT_NSEC3, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_DISABLED, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info bad-values.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.12 ERROR DS03_ILLEGAL_HASH_ALGO algo_num=2; ns_list=ns1.bad-values.dnssec03.xa/127.15.3.31;ns1.bad-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.bad-values.dnssec03.xa/127.15.3.32;ns2.bad-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.12 NOTICE DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD ns_list=ns1.bad-values.dnssec03.xa/127.15.3.31;ns1.bad-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.bad-values.dnssec03.xa/127.15.3.32;ns2.bad-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.12 ERROR DS03_ILLEGAL_ITERATION_VALUE int=1; ns_list=ns1.bad-values.dnssec03.xa/127.15.3.31;ns1.bad-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.bad-values.dnssec03.xa/127.15.3.32;ns2.bad-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.12 WARNING DS03_ILLEGAL_SALT_LENGTH int=4; ns_list=ns1.bad-values.dnssec03.xa/127.15.3.31;ns1.bad-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.bad-values.dnssec03.xa/127.15.3.32;ns2.bad-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
INCONSISTENT-VALUES | DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NSEC3_OPT_OUT_DISABLED, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD | DS03_ERR_MULT_NSEC3, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info inconsistent-values.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.16 ERROR DS03_INCONSISTENT_HASH_ALGO
|
||||
0.17 ERROR DS03_ILLEGAL_HASH_ALGO algo_num=2; ns_list=ns2.inconsistent-values.dnssec03.xa/127.15.3.32;ns2.inconsistent-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.17 INFO DS03_LEGAL_HASH_ALGO ns_list=ns1.inconsistent-values.dnssec03.xa/127.15.3.31;ns1.inconsistent-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.17 ERROR DS03_INCONSISTENT_NSEC3_FLAGS
|
||||
0.17 NOTICE DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD ns_list=ns2.inconsistent-values.dnssec03.xa/127.15.3.32;ns2.inconsistent-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.17 INFO DS03_NSEC3_OPT_OUT_DISABLED ns_list=ns1.inconsistent-values.dnssec03.xa/127.15.3.31;ns1.inconsistent-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.17 ERROR DS03_INCONSISTENT_ITERATION
|
||||
0.17 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns1.inconsistent-values.dnssec03.xa/127.15.3.31;ns1.inconsistent-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.17 ERROR DS03_ILLEGAL_ITERATION_VALUE int=1; ns_list=ns2.inconsistent-values.dnssec03.xa/127.15.3.32;ns2.inconsistent-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.17 ERROR DS03_INCONSISTENT_SALT_LENGTH
|
||||
0.17 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns1.inconsistent-values.dnssec03.xa/127.15.3.31;ns1.inconsistent-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.17 WARNING DS03_ILLEGAL_SALT_LENGTH int=4; ns_list=ns2.inconsistent-values.dnssec03.xa/127.15.3.32;ns2.inconsistent-values.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
NSEC3-OPT-OUT-ENABLED-TLD | DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_DISABLED, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info nsec3-opt-out-enabled-tld-dnssec03
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.07 INFO DS03_LEGAL_HASH_ALGO ns_list=ns1.nsec3-opt-out-enabled-tld-dnssec03/127.15.3.31;ns1.nsec3-opt-out-enabled-tld-dnssec03/fda1:b2:c3:0:127:15:3:31;ns2.nsec3-opt-out-enabled-tld-dnssec03/127.15.3.32;ns2.nsec3-opt-out-enabled-tld-dnssec03/fda1:b2:c3:0:127:15:3:32
|
||||
0.07 INFO DS03_NSEC3_OPT_OUT_ENABLED_TLD ns_list=ns1.nsec3-opt-out-enabled-tld-dnssec03/127.15.3.31;ns1.nsec3-opt-out-enabled-tld-dnssec03/fda1:b2:c3:0:127:15:3:31;ns2.nsec3-opt-out-enabled-tld-dnssec03/127.15.3.32;ns2.nsec3-opt-out-enabled-tld-dnssec03/fda1:b2:c3:0:127:15:3:32
|
||||
0.07 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns1.nsec3-opt-out-enabled-tld-dnssec03/127.15.3.31;ns1.nsec3-opt-out-enabled-tld-dnssec03/fda1:b2:c3:0:127:15:3:31;ns2.nsec3-opt-out-enabled-tld-dnssec03/127.15.3.32;ns2.nsec3-opt-out-enabled-tld-dnssec03/fda1:b2:c3:0:127:15:3:32
|
||||
0.07 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns1.nsec3-opt-out-enabled-tld-dnssec03/127.15.3.31;ns1.nsec3-opt-out-enabled-tld-dnssec03/fda1:b2:c3:0:127:15:3:31;ns2.nsec3-opt-out-enabled-tld-dnssec03/127.15.3.32;ns2.nsec3-opt-out-enabled-tld-dnssec03/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
SERVER-NO-DNSSEC-SUPPORT | DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NSEC3_OPT_OUT_DISABLED | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info server-no-dnssec-support.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.22 ERROR DS03_SERVER_NO_DNSSEC_SUPPORT ns_list=ns2.server-no-dnssec-support.dnssec03.xa/127.15.3.32;ns2.server-no-dnssec-support.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.22 INFO DS03_LEGAL_HASH_ALGO ns_list=ns1.server-no-dnssec-support.dnssec03.xa/127.15.3.31;ns1.server-no-dnssec-support.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.22 INFO DS03_NSEC3_OPT_OUT_DISABLED ns_list=ns1.server-no-dnssec-support.dnssec03.xa/127.15.3.31;ns1.server-no-dnssec-support.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.23 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns1.server-no-dnssec-support.dnssec03.xa/127.15.3.31;ns1.server-no-dnssec-support.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.23 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns1.server-no-dnssec-support.dnssec03.xa/127.15.3.31;ns1.server-no-dnssec-support.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
SERVER-NO-NSEC3 | DS03_SERVER_NO_NSEC3, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NSEC3_OPT_OUT_DISABLED | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info server-no-nsec3.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.14 ERROR DS03_SERVER_NO_NSEC3 ns_list=ns2.server-no-nsec3.dnssec03.xa/127.15.3.32;ns2.server-no-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.14 INFO DS03_LEGAL_HASH_ALGO ns_list=ns1.server-no-nsec3.dnssec03.xa/127.15.3.31;ns1.server-no-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.14 INFO DS03_NSEC3_OPT_OUT_DISABLED ns_list=ns1.server-no-nsec3.dnssec03.xa/127.15.3.31;ns1.server-no-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.14 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns1.server-no-nsec3.dnssec03.xa/127.15.3.31;ns1.server-no-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
0.14 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns1.server-no-nsec3.dnssec03.xa/127.15.3.31;ns1.server-no-nsec3.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
UNASSIGNED-FLAG-USED | DS03_UNASSIGNED_FLAG_USED, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NSEC3_OPT_OUT_DISABLED | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info unassigned-flag-used.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.14 INFO DS03_LEGAL_HASH_ALGO ns_list=ns1.unassigned-flag-used.dnssec03.xa/127.15.3.31;ns1.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.unassigned-flag-used.dnssec03.xa/127.15.3.32;ns2.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.14 INFO DS03_NSEC3_OPT_OUT_DISABLED ns_list=ns1.unassigned-flag-used.dnssec03.xa/127.15.3.31;ns1.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.unassigned-flag-used.dnssec03.xa/127.15.3.32;ns2.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.14 ERROR DS03_UNASSIGNED_FLAG_USED int=2; ns_list=ns1.unassigned-flag-used.dnssec03.xa/127.15.3.31;ns1.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.unassigned-flag-used.dnssec03.xa/127.15.3.32;ns2.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.14 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns1.unassigned-flag-used.dnssec03.xa/127.15.3.31;ns1.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.unassigned-flag-used.dnssec03.xa/127.15.3.32;ns2.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.14 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns1.unassigned-flag-used.dnssec03.xa/127.15.3.31;ns1.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:31;ns2.unassigned-flag-used.dnssec03.xa/127.15.3.32;ns2.unassigned-flag-used.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
ERROR-RESPONSE-NSEC-QUERY | DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NSEC3_OPT_OUT_DISABLED, DS03_ERROR_RESPONSE_NSEC_QUERY | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_NO_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info error-response-nsec-query.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
0.11 INFO DS03_LEGAL_HASH_ALGO ns_list=ns2.error-response-nsec-query.dnssec03.xa/127.15.3.32;ns2.error-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.11 INFO DS03_NSEC3_OPT_OUT_DISABLED ns_list=ns2.error-response-nsec-query.dnssec03.xa/127.15.3.32;ns2.error-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.11 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns2.error-response-nsec-query.dnssec03.xa/127.15.3.32;ns2.error-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.11 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns2.error-response-nsec-query.dnssec03.xa/127.15.3.32;ns2.error-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
0.11 ERROR DS03_ERROR_RESPONSE_NSEC_QUERY ns_list=ns1.error-response-nsec-query.dnssec03.xa/127.15.3.31;ns1.error-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
NO-RESPONSE-NSEC-QUERY | DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NSEC3_OPT_OUT_DISABLED, DS03_NO_RESPONSE_NSEC_QUERY | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED, DS03_ERROR_RESPONSE_NSEC_QUERY
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info no-response-nsec-query.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
20.15 INFO DS03_LEGAL_HASH_ALGO ns_list=ns1.no-response-nsec-query.dnssec03.xa/127.15.3.31;ns1.no-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
20.15 INFO DS03_NSEC3_OPT_OUT_DISABLED ns_list=ns1.no-response-nsec-query.dnssec03.xa/127.15.3.31;ns1.no-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
20.15 INFO DS03_LEGAL_ITERATION_VALUE ns_list=ns1.no-response-nsec-query.dnssec03.xa/127.15.3.31;ns1.no-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
20.15 INFO DS03_LEGAL_EMPTY_SALT ns_list=ns1.no-response-nsec-query.dnssec03.xa/127.15.3.31;ns1.no-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
20.15 ERROR DS03_NO_RESPONSE_NSEC_QUERY ns_list=ns2.no-response-nsec-query.dnssec03.xa/127.15.3.32;ns2.no-response-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
```
|
||||
--> OK
|
||||
|
||||
Scenario name | Mandatory message tags | Forbidden message tags
|
||||
:----------------------------|:--------------------------------------------------|:-------------------------------------------
|
||||
ERROR-NSEC-QUERY | DS03_ERROR_RESPONSE_NSEC_QUERY, DS03_NO_RESPONSE_NSEC_QUERY | DS03_ERR_MULT_NSEC3, DS03_ILLEGAL_HASH_ALGO, DS03_ILLEGAL_ITERATION_VALUE, DS03_ILLEGAL_SALT_LENGTH, DS03_INCONSISTENT_HASH_ALGO, DS03_INCONSISTENT_ITERATION, DS03_INCONSISTENT_NSEC3_FLAGS, DS03_INCONSISTENT_SALT_LENGTH, DS03_LEGAL_EMPTY_SALT, DS03_LEGAL_HASH_ALGO, DS03_LEGAL_ITERATION_VALUE, DS03_NO_DNSSEC_SUPPORT, DS03_NO_NSEC3, DS03_NSEC3_OPT_OUT_DISABLED, DS03_NSEC3_OPT_OUT_ENABLED_NON_TLD, DS03_NSEC3_OPT_OUT_ENABLED_TLD, DS03_SERVER_NO_DNSSEC_SUPPORT, DS03_SERVER_NO_NSEC3, DS03_UNASSIGNED_FLAG_USED
|
||||
```
|
||||
$ zonemaster-cli --raw --test DNSSEC/dnssec03 --hints COMMON/hintfile --level info error-nsec-query.dnssec03.xa
|
||||
0.00 INFO GLOBAL_VERSION version=v4.7.3
|
||||
20.16 ERROR DS03_NO_RESPONSE_NSEC_QUERY ns_list=ns2.error-nsec-query.dnssec03.xa/127.15.3.32;ns2.error-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:32
|
||||
20.16 ERROR DS03_ERROR_RESPONSE_NSEC_QUERY ns_list=ns1.error-nsec-query.dnssec03.xa/127.15.3.31;ns1.error-nsec-query.dnssec03.xa/fda1:b2:c3:0:127:15:3:31
|
||||
```
|
||||
--> OK
|
||||
299
zonemaster/test-zone-data/DNSSEC-TP/dnssec03/dnssec03.cfg
Normal file
299
zonemaster/test-zone-data/DNSSEC-TP/dnssec03/dnssec03.cfg
Normal file
@@ -0,0 +1,299 @@
|
||||
|
||||
# ns1.dnssec03.xa
|
||||
. {
|
||||
bind 127.15.3.21
|
||||
bind fda1:b2:c3:0:127:15:3:21
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/dnssec03.xa dnssec03.xa
|
||||
}
|
||||
|
||||
# ns2.dnssec03.xa
|
||||
. {
|
||||
bind 127.15.3.22
|
||||
bind fda1:b2:c3:0:127:15:3:22
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/dnssec03.xa dnssec03.xa
|
||||
}
|
||||
|
||||
### ==== Scenarios DNSSEC03 ====
|
||||
|
||||
|
||||
|
||||
# no-dnssec-support.dnssec03.xa
|
||||
no-dnssec-support.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/no-dnssec-support.dnssec03.xa no-dnssec-support.dnssec03.xa
|
||||
}
|
||||
|
||||
# no-nsec3.dnssec03.xa.
|
||||
no-nsec3.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE no-nsec3.dnssec03.xa.
|
||||
|
||||
template IN NSEC no-nsec3.dnssec03.xa. {
|
||||
answer "no-nsec3.dnssec03.xa. 600 IN NSEC _dmarc.no-nsec3.dnssec03.xa. NS SOA RRSIG NSEC DNSKEY"
|
||||
answer "no-nsec3.dnssec03.xa. 600 IN RRSIG NSEC 13 2 600 20231128063822 20231024050822 48933 no-nsec3.dnssec03.xa. rep5od58VBq5sScvx2il4vAh+dIle4WqcJ3r6TOZeN12OzTgEK5QVvGK 01mFOtfRyxHKe5ORe5uKmrVLwAmkMQ=="
|
||||
}
|
||||
}
|
||||
|
||||
# good-values.dnssec03.xa
|
||||
good-values.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE good-values.dnssec03.xa.
|
||||
|
||||
template IN NSEC good-values.dnssec03.xa. {
|
||||
authority "good-values.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.good-values.dnssec03.xa. 900 IN NSEC3 1 0 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.good-values.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 good-values.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "good-values.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 good-values.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
|
||||
# err-mult-nsec3.dnssec03.xa.
|
||||
err-mult-nsec3.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE err-mult-nsec3.dnssec03.xa.
|
||||
|
||||
template IN NSEC err-mult-nsec3.dnssec03.xa. {
|
||||
authority "err-mult-nsec3.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R4.err-mult-nsec3.dnssec03.xa. 900 IN NSEC3 1 0 0 - C91QE244ND0Q5QH3JLN35A809MIK8D38 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R4.err-mult-nsec3.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 err-mult-nsec3.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.err-mult-nsec3.dnssec03.xa. 900 IN NSEC3 1 0 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.err-mult-nsec3.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 err-mult-nsec3.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "err-mult-nsec3.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 err-mult-nsec3.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
|
||||
# bad-values.dnssec03.xa.
|
||||
bad-values.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE bad-values.dnssec03.xa.
|
||||
|
||||
template IN NSEC bad-values.dnssec03.xa. {
|
||||
authority "bad-values.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.bad-values.dnssec03.xa. 900 IN NSEC3 2 1 1 8104 C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.bad-values.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 bad-values.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "bad-values.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 bad-values.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
|
||||
# inconsistent-values.dnssec03.xa.
|
||||
#
|
||||
# replies from ns1
|
||||
inconsistent-values.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE inconsistent-values.dnssec03.xa.
|
||||
|
||||
template IN NSEC inconsistent-values.dnssec03.xa. {
|
||||
authority "inconsistent-values.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.inconsistent-values.dnssec03.xa. 900 IN NSEC3 1 0 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.inconsistent-values.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 inconsistent-values.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "inconsistent-values.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 inconsistent-values.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
# replies from ns2
|
||||
inconsistent-values.dnssec03.xa:53 {
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE inconsistent-values.dnssec03.xa.
|
||||
|
||||
template IN NSEC inconsistent-values.dnssec03.xa {
|
||||
authority "inconsistent-values.dnssec03.xa 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.inconsistent-values.dnssec03.xa 900 IN NSEC3 2 1 1 8104 C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.inconsistent-values.dnssec03.xa 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 inconsistent-values.dnssec03.xa eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "inconsistent-values.dnssec03.xa 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 inconsistent-values.dnssec03.xa l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
|
||||
# nsec3-opt-out-enabled-tld-dnssec03. (TLD)
|
||||
nsec3-opt-out-enabled-tld-dnssec03:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE nsec3-opt-out-enabled-tld-dnssec03.
|
||||
|
||||
template IN NSEC nsec3-opt-out-enabled-tld-dnssec03. {
|
||||
authority "nsec3-opt-out-enabled-tld-dnssec03. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.nsec3-opt-out-enabled-tld-dnssec03. 900 IN NSEC3 1 1 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.nsec3-opt-out-enabled-tld-dnssec03. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 nsec3-opt-out-enabled-tld-dnssec03. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "nsec3-opt-out-enabled-tld-dnssec03. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 nsec3-opt-out-enabled-tld-dnssec03. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
|
||||
# server-no-dnssec-support.dnssec03.xa
|
||||
#
|
||||
# replies from ns1
|
||||
server-no-dnssec-support.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE server-no-dnssec-support.dnssec03.xa.
|
||||
|
||||
template IN NSEC server-no-dnssec-support.dnssec03.xa. {
|
||||
authority "server-no-dnssec-support.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.server-no-dnssec-support.dnssec03.xa. 900 IN NSEC3 1 0 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.server-no-dnssec-support.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 server-no-dnssec-support.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "server-no-dnssec-support.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 server-no-dnssec-support.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
# replies from ns2
|
||||
server-no-dnssec-support.dnssec03.xa:53 {
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/server-no-dnssec-support.dnssec03.xa server-no-dnssec-support.dnssec03.xa
|
||||
}
|
||||
|
||||
# server-no-nsec3.dnssec03.xa
|
||||
#
|
||||
# Replies from ns1
|
||||
server-no-nsec3.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE server-no-nsec3.dnssec03.xa.
|
||||
|
||||
template IN NSEC server-no-nsec3.dnssec03.xa. {
|
||||
authority "server-no-nsec3.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.server-no-nsec3.dnssec03.xa. 900 IN NSEC3 1 0 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.server-no-nsec3.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 server-no-nsec3.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "server-no-nsec3.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 server-no-nsec3.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
# Replies from ns2
|
||||
server-no-nsec3.dnssec03.xa:53 {
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE server-no-nsec3.dnssec03.xa.
|
||||
|
||||
template IN NSEC server-no-nsec3.dnssec03.xa. {
|
||||
answer "server-no-nsec3.dnssec03.xa. 600 IN NSEC _dmarc.server-no-nsec3.dnssec03.xa. NS SOA RRSIG NSEC DNSKEY"
|
||||
answer "server-no-nsec3.dnssec03.xa. 600 IN RRSIG NSEC 13 2 600 20231128063822 20231024050822 48933 server-no-nsec3.dnssec03.xa. rep5od58VBq5sScvx2il4vAh+dIle4WqcJ3r6TOZeN12OzTgEK5QVvGK 01mFOtfRyxHKe5ORe5uKmrVLwAmkMQ=="
|
||||
}
|
||||
}
|
||||
|
||||
# unassigned-flag-used.dnssec03.xa
|
||||
unassigned-flag-used.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE unassigned-flag-used.dnssec03.xa.
|
||||
|
||||
template IN NSEC unassigned-flag-used.dnssec03.xa. {
|
||||
authority "unassigned-flag-used.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.unassigned-flag-used.dnssec03.xa. 900 IN NSEC3 1 2 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.unassigned-flag-used.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 unassigned-flag-used.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "unassigned-flag-used.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 unassigned-flag-used.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
|
||||
# error-response-nsec-query.dnssec03.xa
|
||||
#
|
||||
# Replies from ns1
|
||||
error-response-nsec-query.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE error-response-nsec-query.dnssec03.xa.
|
||||
|
||||
template IN NSEC error-response-nsec-query.dnssec03.xa. {
|
||||
rcode SERVFAIL
|
||||
}
|
||||
}
|
||||
# Replies from ns2
|
||||
error-response-nsec-query.dnssec03.xa:53 {
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE error-response-nsec-query.dnssec03.xa.
|
||||
|
||||
template IN NSEC error-response-nsec-query.dnssec03.xa. {
|
||||
authority "error-response-nsec-query.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.error-response-nsec-query.dnssec03.xa. 900 IN NSEC3 1 0 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.error-response-nsec-query.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 error-response-nsec-query.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "error-response-nsec-query.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 error-response-nsec-query.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
|
||||
# no-response-nsec-query.dnssec03.xa
|
||||
#
|
||||
# Replies from ns1
|
||||
no-response-nsec-query.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE no-response-nsec-query.dnssec03.xa.
|
||||
|
||||
template IN NSEC no-response-nsec-query.dnssec03.xa. {
|
||||
authority "no-response-nsec-query.dnssec03.xa. 900 IN SOA ns4.scania.com. hostmaster.scania.com. 2008095524 10800 900 1209600 900"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.no-response-nsec-query.dnssec03.xa. 900 IN NSEC3 1 0 0 - C91QE244ND0Q5QH3JLN35A809MIK8D39 A NS SOA MX TXT RRSIG DNSKEY NSEC3PARAM"
|
||||
authority "BP7OICBR09FICEULBF46U8DMJ1J1V8R3.no-response-nsec-query.dnssec03.xa. 900 IN RRSIG NSEC3 8 3 900 20231117165358 20231018163325 53655 no-response-nsec-query.dnssec03.xa. eRmNGNfFv/cFpcp2l/5NoSyopWvMdiO52ZeecCg+Ej/Itkm6vAEAYQsJ H1JHltEn0NYtZRjY1KbwAeo7O6D91SOW67xEWgjujJzcH56b47Ju9MBe JTEwNS2RXDRb04I5Rupl2zD5nxQkUs2Ymr9Aln+nZCZNS8X/mWJ/TxE9 5mY="
|
||||
authority "no-response-nsec-query.dnssec03.xa. 900 IN RRSIG SOA 8 2 10800 20231123093906 20231024083906 53655 no-response-nsec-query.dnssec03.xa. l5WZA9Zl/JCL+bqhu38oXz5dPx3w1lPV88PnL6OPPdBKRX3c+98/yr3U w4oXrob6GkY0ND/ioGCbA0UX0EV4AJNnh6OqavxfAYohWym058gp1nLm WUgx6HoE19jHHAn18DcQtHRS3ZyHcqKpMMhklUw43wyKcZZL3p2nrYTa Tb0="
|
||||
}
|
||||
}
|
||||
# Replies from ns2
|
||||
no-response-nsec-query.dnssec03.xa:53 {
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE no-response-nsec-query.dnssec03.xa.
|
||||
|
||||
acl no-response-nsec-query.dnssec03.xa {
|
||||
drop type NSEC
|
||||
}
|
||||
}
|
||||
|
||||
# error-nsec-query.dnssec03.xa
|
||||
#
|
||||
# Replies from ns1
|
||||
error-nsec-query.dnssec03.xa:53 {
|
||||
bind 127.15.3.31
|
||||
bind fda1:b2:c3:0:127:15:3:31
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE error-nsec-query.dnssec03.xa.
|
||||
|
||||
template IN NSEC error-nsec-query.dnssec03.xa. {
|
||||
rcode SERVFAIL
|
||||
}
|
||||
}
|
||||
# Replies from ns2
|
||||
error-nsec-query.dnssec03.xa:53 {
|
||||
bind 127.15.3.32
|
||||
bind fda1:b2:c3:0:127:15:3:32
|
||||
log
|
||||
file DNSSEC-TP/dnssec03/DNSSEC03-SCENARIO-DEFAULT-ZONE error-nsec-query.dnssec03.xa.
|
||||
|
||||
acl error-nsec-query.dnssec03.xa {
|
||||
drop type NSEC
|
||||
}
|
||||
}
|
||||
|
||||
|
||||
116
zonemaster/test-zone-data/DNSSEC-TP/dnssec03/dnssec03.xa
Normal file
116
zonemaster/test-zone-data/DNSSEC-TP/dnssec03/dnssec03.xa
Normal file
@@ -0,0 +1,116 @@
|
||||
$ORIGIN dnssec03.xa. ; Must end with "."
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2022121300 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
NS ns1
|
||||
NS ns2
|
||||
|
||||
ns1 A 127.15.3.21
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:21
|
||||
ns2 A 127.15.3.22
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:22
|
||||
|
||||
$ORIGIN no-dnssec-support.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN no-nsec3.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN good-values.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN err-mult-nsec3.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN bad-values.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN inconsistent-values.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
;;;; nsec3-opt-out-enabled-tld-dnssec03. (TLD) delegated from root zone
|
||||
|
||||
$ORIGIN server-no-dnssec-support.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN server-no-nsec3.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN unassigned-flag-used.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN error-response-nsec-query.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN no-response-nsec-query.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
$ORIGIN error-nsec-query.dnssec03.xa. ; Must end with "."
|
||||
@ NS ns1
|
||||
@ NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
@@ -0,0 +1,17 @@
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2022121300 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
NS ns1
|
||||
NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
|
||||
@@ -0,0 +1,19 @@
|
||||
; For server-no-dnssec-support.dnssec03.xa, ns2 only
|
||||
|
||||
$TTL 3600
|
||||
|
||||
@ SOA ns1 admin. (
|
||||
2022121300 ; serial
|
||||
6h ; refresh
|
||||
1h ; retry
|
||||
1w ; expire
|
||||
1d ) ; minimum
|
||||
|
||||
NS ns1
|
||||
NS ns2
|
||||
ns1 A 127.15.3.31
|
||||
ns1 AAAA fda1:b2:c3:0:127:15:3:31
|
||||
ns2 A 127.15.3.32
|
||||
ns2 AAAA fda1:b2:c3:0:127:15:3:32
|
||||
|
||||
|
||||
Reference in New Issue
Block a user