CloudHost/zonemaster.es
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

feat: add full Zonemaster stack with Docker and Spanish UI

Browse Source 
- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI)
- Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend
- Dockerfile.gui: Astro static build served via nginx
- docker-compose.yml: backend (internal) + frontend (port 5353)
- nginx.conf: root redirects to /es/, /api/ proxied to backend
- zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
Malin
2026-04-21 08:19:24 +02:00
commit 8d4eaa1489
1567 changed files with 204155 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

26
zonemaster/test-zone-data/Zone-TP/zone09/COMMON.zone09.xa Normal file
View File

@@ -0,0 +1,26 @@
; This zone file is common for several sub-zones to zone09.xa. Note that
;
; * $ORIGIN must not be set here,
; * All names must be relative
$TTL 3600
@ SOA ns1 admin.mail.xa. (
2022112300 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1
NS ns2
ns1 A 127.19.9.31
ns1 AAAA fda1:b2:c3::127:19:9:31
ns2 A 127.19.9.32
ns2 AAAA fda1:b2:c3::127:19:9:32
mail A 127.3.0.25
mail2 A 127.3.0.26
;EOF

184
zonemaster/test-zone-data/Zone-TP/zone09/README.md Normal file
View File

@@ -0,0 +1,184 @@
# ZONE09
[This directory](.), i.e. the same directory as this README file, holds
zonefiles and `coredns` configuration files for scenarios for test case ZONE09:
* NO-RESPONSE-MX-QUERY
* UNEXPECTED-RCODE-MX
* NON-AUTH-MX-RESPONSE
* INCONSISTENT-MX
* INCONSISTENT-MX-DATA
* NULL-MX-WITH-OTHER-MX
* NULL-MX-NON-ZERO-PREF
* TLD-EMAIL-DOMAIN
* ROOT-EMAIL-DOMAIN
* MX-DATA
* NULL-MX
* NO-MX-SLD
* NO-MX-TLD
* NO-MX-ARPA
## zonemaster-cli commands and their output for each test scenario
The level (`--level`) must be set to the lowest level of the message tags. For
this test case `INFO` is the lowest level.
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
NO-RESPONSE-MX-QUERY | Z09\_NO\_RESPONSE\_MX\_QUERY | (none)
```
$ zonemaster-cli NO-RESPONSE-MX-QUERY.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
20.11 WARNING Z09_NO_RESPONSE_MX_QUERY ns_ip_list=127.19.9.32;fda1:b2:c3:0:127:19:9:32
20.11 INFO Z09_MX_DATA mailtarget_list=mail.no-response-mx-query.zone09.xa.; ns_ip_list=127.19.9.31;fda1:b2:c3:0:127:19:9:31
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
UNEXPECTED-RCODE-MX | Z09\_UNEXPECTED\_RCODE\_MX | (none)
```
$ zonemaster-cli UNEXPECTED-RCODE-MX.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.07 WARNING Z09_UNEXPECTED_RCODE_MX ns_ip_list=ARRAY(0x5638fec55130); rcode=NOTIMPL
0.07 NOTICE Z09_MISSING_MAIL_TARGET
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
NON-AUTH-MX-RESPONSE | Z09\_NON\_AUTH\_MX\_RESPONSE | (none)
```
$ zonemaster-cli NON-AUTH-MX-RESPONSE.zone09.xa --raw --test Zone/zone09 --hint COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.08 INFO Z09_MX_DATA mailtarget_list=mail.non-auth-mx-response.zone09.xa.; ns_ip_list=127.19.9.31;127.19.9.32;fda1:b2:c3:0:127:19:9:32;fda1:b2:c3:0:127:19:9:31
```
-> The zone file configuration is not yet correct.
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:-------------------------------------------------------------------------|:-------------------------------------------
INCONSISTENT-MX | Z09\_INCONSISTENT\_MX, Z09\_MX\_FOUND, Z09\_NO\_MX\_FOUND, Z09\_MX\_DATA | Z09\_MISSING\_MAIL\_TARGET
```
$ zonemaster-cli INCONSISTENT-MX.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.07 WARNING Z09_INCONSISTENT_MX
0.07 INFO Z09_NO_MX_FOUND ns_ip_list=127.19.9.32;fda1:b2:c3:0:127:19:9:32
0.07 INFO Z09_MX_FOUND ns_ip_list=127.19.9.31;fda1:b2:c3:0:127:19:9:31
0.07 INFO Z09_MX_DATA mailtarget_list=mail.inconsistent-mx.zone09.xa.; ns_ip_list=127.19.9.31;fda1:b2:c3:0:127:19:9:31
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
INCONSISTENT-MX-DATA | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA | Z09\_MISSING\_MAIL\_TARGET, Z09\_NULL\_MX\_NON\_ZERO\_PREF, Z09\_NULL\_MX\_WITH\_OTHER\_MX, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_TLD\_EMAIL\_DOMAIN
```
$ zonemaster-cli INCONSISTENT-MX-DATA.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.08 WARNING Z09_INCONSISTENT_MX_DATA
0.08 INFO Z09_MX_DATA mailtarget_list=mail2.inconsistent-mx-data.zone09.xa.; ns_ip_list=127.19.9.32;fda1:b2:c3:0:127:19:9:32
0.08 INFO Z09_MX_DATA mailtarget_list=mail.inconsistent-mx-data.zone09.xa.;mail2.inconsistent-mx-data.zone09.xa.; ns_ip_list=127.19.9.31;fda1:b2:c3:0:127:19:9:31
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
NULL-MX-WITH-OTHER-MX | Z09\_NULL\_MX\_WITH\_OTHER\_MX | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA, Z09\_MISSING\_MAIL\_TARGET, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_TLD\_EMAIL\_DOMAIN
```
$ zonemaster-cli null-mx-with-other-mx.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.09 WARNING Z09_NULL_MX_WITH_OTHER_MX
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
NULL-MX-NON-ZERO-PREF | Z09\_NULL\_MX\_NON\_ZERO\_PREF | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA, Z09\_MISSING\_MAIL\_TARGET, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_TLD\_EMAIL\_DOMAIN
```
$ zonemaster-cli null-mx-non-zero-pref.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.09 NOTICE Z09_NULL_MX_NON_ZERO_PREF
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
TLD-EMAIL-DOMAIN | Z09\_TLD\_EMAIL\_DOMAIN | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA, Z09\_MISSING\_MAIL\_TARGET, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_NULL\_MX\_WITH\_OTHER\_MX, Z09\_NULL\_MX\_NON\_ZERO\_PREF
```
$ zonemaster-cli tld-email-domain-zone09 --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.03 WARNING Z09_TLD_EMAIL_DOMAIN
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
ROOT-EMAIL-DOMAIN | Z09\_ROOT\_EMAIL\_DOMAIN | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA, Z09\_MISSING\_MAIL\_TARGET, Z09\_TLD\_EMAIL\_DOMAIN, Z09\_NULL\_MX\_WITH\_OTHER\_MX, Z09\_NULL\_MX\_NON\_ZERO\_PREF
```
$ zonemaster-cli . --raw --test Zone/zone09 --hints Zone-TP/zone09/hintfile-root-email-domain --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.01 NOTICE Z09_ROOT_EMAIL_DOMAIN
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
MX-DATA | Z09\_MX\_DATA | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MISSING\_MAIL\_TARGET, Z09\_TLD\_EMAIL\_DOMAIN, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_NULL\_MX\_WITH\_OTHER\_MX, Z09\_NULL\_MX\_NON\_ZERO\_PREF
```
$ zonemaster-cli mx-data.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.07 INFO Z09_MX_DATA mailtarget_list=mail.mx-data.zone09.xa.; ns_ip_list=fda1:b2:c3:0:127:19:9:32;127.19.9.32;fda1:b2:c3:0:127:19:9:31;127.19.9.31
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
NULL-MX | (none) | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA, Z09\_MISSING\_MAIL\_TARGET, Z09\_TLD\_EMAIL\_DOMAIN, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_NULL\_MX\_WITH\_OTHER\_MX, Z09\_NULL\_MX\_NON\_ZERO\_PREF
```
$ zonemaster-cli null-mx.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
NO-MX-SLD | Z09\_MISSING\_MAIL\_TARGET | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA, Z09\_TLD\_EMAIL\_DOMAIN, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_NULL\_MX\_WITH\_OTHER\_MX, Z09\_NULL\_MX\_NON\_ZERO\_PREF
```
$ zonemaster-cli no-mx-sld.zone09.xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
0.09 NOTICE Z09_MISSING_MAIL_TARGET
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
NO-MX-TLD | (none) | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA, Z09\_MISSING\_MAIL\_TARGET, Z09\_TLD\_EMAIL\_DOMAIN, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_NULL\_MX\_WITH\_OTHER\_MX, Z09\_NULL\_MX\_NON\_ZERO\_PREF
```
$ zonemaster-cli xa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
```
-> OK
Scenario name | Mandatory message tags | Forbidden message tags
:---------------------|:--------------------------------------------------|:-------------------------------------------
NO-MX-ARPA | (none) | Z09\_INCONSISTENT\_MX\_DATA, Z09\_MX\_DATA, Z09\_MISSING\_MAIL\_TARGET, Z09\_TLD\_EMAIL\_DOMAIN, Z09\_ROOT\_EMAIL\_DOMAIN, Z09\_NULL\_MX\_WITH\_OTHER\_MX, Z09\_NULL\_MX\_NON\_ZERO\_PREF
```
$ zonemaster-cli arpa --raw --test Zone/zone09 --hints COMMON/hintfile --level info
0.00 INFO GLOBAL_VERSION version=v4.5.1
```
-> OK

9
zonemaster/test-zone-data/Zone-TP/zone09/hintfile-root-email-domain Normal file
View File

@@ -0,0 +1,9 @@
. 3600000 NS ns1.
ns1. 3600000 A 127.19.9.43
ns1. 3600000 AAAA fda1:b2:c3::127:19:9:43
;
. 3600000 NS ns2.
ns2. 3600000 A 127.19.9.44
ns2. 3600000 AAAA fda1:b2:c3::127:19:9:44
;EOF

45
zonemaster/test-zone-data/Zone-TP/zone09/root-email-domain Normal file
View File

@@ -0,0 +1,45 @@
$ORIGIN .
$TTL 3600
@ SOA ns1. admin.xb. (
2022112300 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1.
NS ns2.
MX 10 mail
mail A 127.3.0.25
ns1. A 127.19.9.43
ns1. AAAA fda1:b2:c3::127:19:9:43
ns2. A 127.19.9.44
ns2. AAAA fda1:b2:c3::127:19:9:44
arpa. NS ns1.
arpa. NS ns2.
xa NS ns1.xa.
ns1.xa. A 127.2.0.11
ns1.xa. AAAA fda1:b2:c3::127:2:0:11
xa NS ns2.xa.
ns2.xa. A 127.2.0.12
ns2.xa. AAAA fda1:b2:c3::127:2:0:12
tld-email-domain-zone09 NS ns1.tld-email-domain-zone09
ns1.tld-email-domain-zone09 A 127.19.9.41
ns1.tld-email-domain-zone09 AAAA fda1:b2:c3::127:19:9:41
tld-email-domain-zone09 NS ns2.tld-email-domain-zone09
ns2.tld-email-domain-zone09 A 127.19.9.42
ns2.tld-email-domain-zone09 AAAA fda1:b2:c3::127:19:9:42
asnlookup.zonemaster.net. 306 IN NS ns2.asnlookup.zonemaster.net.
asnlookup.zonemaster.net. 306 IN NS ns1.asnlookup.zonemaster.net.
ns1.asnlookup.zonemaster.net. 359 IN A 127.3.0.1
ns2.asnlookup.zonemaster.net. 348 IN A 127.3.0.2

20
zonemaster/test-zone-data/Zone-TP/zone09/tld-email-domain-zone09 Normal file
View File

@@ -0,0 +1,20 @@
$ORIGIN tld-email-domain-zone09.
$TTL 3600
@ SOA ns1 admin.tld-email-domain-zone09. (
2022112300 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1
NS ns2
MX 10 mail
mail A 127.3.0.25
ns1 A 127.19.9.41
ns1 AAAA fda1:b2:c3:0:127:19:9:41
ns2 A 127.19.9.42
ns2 AAAA fda1:b2:c3:0:127:19:9:42

221
zonemaster/test-zone-data/Zone-TP/zone09/zone09.cfg Normal file
View File

@@ -0,0 +1,221 @@
# ns1.zone09.xa
. {
bind 127.19.9.21
bind fda1:b2:c3:0:127:19:9:21
log
file Zone-TP/zone09/zone09.xa zone09.xa
}
# ns2.zone09.xa
. {
bind 127.19.9.22
bind fda1:b2:c3:0:127:19:9:22
log
file Zone-TP/zone09/zone09.xa zone09.xa
}
# ns1.tld-email-domain-zone09
. {
bind 127.19.9.41
bind fda1:b2:c3:0:127:19:9:41
log
file Zone-TP/zone09/tld-email-domain-zone09 tld-email-domain-zone09
}
# ns2.tld-email-domain-zone09
. {
bind 127.19.9.42
bind fda1:b2:c3:0:127:19:9:42
log
file Zone-TP/zone09/tld-email-domain-zone09 tld-email-domain-zone09
}
# ns1.root-email-domain
. {
bind 127.19.9.43
bind fda1:b2:c3:0:127:19:9:43
log
file Zone-TP/zone09/root-email-domain .
}
# ns2.root-email-domain
. {
bind 127.19.9.44
bind fda1:b2:c3:0:127:19:9:44
log
file Zone-TP/zone09/root-email-domain .
}
# testzones ns1
. {
bind 127.19.9.31
bind fda1:b2:c3:0:127:19:9:31
log
# NO-RESPONSE-MX-QUERY.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa no-response-mx-query.zone09.xa
template IN MX no-response-mx-query.zone09.xa {
answer "no-response-mx-query.zone09.xa. 600 MX 10 mail.no-response-mx-query.zone09.xa."
}
# UNEXPECTED-RCODE-MX.zone09.xa
template IN MX UNEXPECTED-RCODE-MX.zone09.xa {
rcode NOTIMP
fallthrough
}
file Zone-TP/zone09/COMMON.zone09.xa unexpected-rcode-mx.zone09.xa
# NON-AUTH-MX-RESPONSE.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa non-auth-mx-response.zone09.xa
template IN MX non-auth-mx-response.zone09.xa {
answer "non-auth-mx-response.zone09.xa. 600 MX 10 mail.non-auth-mx-response.zone09.xa."
}
# INCONSISTENT-MX.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa inconsistent-mx.zone09.xa
template IN MX inconsistent-mx.zone09.xa {
answer "inconsistent-mx.zone09.xa. 600 MX 10 mail.inconsistent-mx.zone09.xa."
}
# INCONSISTENT-MX-DATA.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa inconsistent-mx-data.zone09.xa
template IN MX inconsistent-mx-data.zone09.xa {
answer "inconsistent-mx-data.zone09.xa. 600 MX 10 mail.inconsistent-mx-data.zone09.xa."
answer "inconsistent-mx-data.zone09.xa. 600 MX 10 mail2.inconsistent-mx-data.zone09.xa."
}
# NULL-MX-WITH-OTHER-MX.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa null-mx-with-other-mx.zone09.xa
template IN MX null-mx-with-other-mx.zone09.xa {
answer "null-mx-with-other-mx.zone09.xa. 600 MX 10 mail.null-mx-with-other-mx.zone09.xa"
answer "null-mx-with-other-mx.zone09.xa. 600 MX 0 ."
}
template IN A null-mx-with-other-mx.zone09.xa {
answer "null-mx-with-other-mx.zone09.xa. 600 A 127.3.0.25"
}
# NULL-MX-NON-ZERO-PREF.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa null-mx-non-zero-pref.zone09.xa
template IN MX null-mx-non-zero-pref.zone09.xa {
answer "null-mx-non-zero-pref.zone09.xa. 600 MX 99 ."
}
# TLD-EMAIL-DOMAIN (located with the other TLD configs in this file)
# ROOT-EMAIL-DOMAIN (located with the other root-zone configs in this file)
# MX-DATA.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa mx-data.zone09.xa
template IN MX mx-data.zone09.xa {
answer "mx-data.zone09.xa. 600 MX 10 mail.mx-data.zone09.xa."
}
# NULL-MX.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa null-mx.zone09.xa
template IN MX null-mx.zone09.xa {
answer "null-mx.zone09.xa. 600 MX 0 ."
}
# NO-MX-SLD.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa no-mx-sld.zone09.xa
# NO-MX-TLD (implemented in .xa)
# NO-MX-ARPA (implemented in .arpa)
}
# testzones ns2
. {
bind 127.19.9.32
bind fda1:b2:c3:0:127:19:9:32
log
# NO-RESPONSE-MX-QUERY.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa no-response-mx-query.zone09.xa
acl no-response-mx-query.zone09.xa {
drop type MX
}
# UNEXPECTED-RCODE-MX.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa unexpected-rcode-mx.zone09.xa
# NON-AUTH-MX-RESPONSE.zone09.xa
template IN SOA non-auth-mx-response.zone09.xa {
match "non-auth-mx-response\.zone09\.xa"
answer "non-auth-mx-response.zone09.xa. 3600 IN SOA ns1.non-auth-mx-response.zone09.xa. admin.non-auth-mx-response.zone09.xa. 2022112300 21600 3600 604800 86400"
}
file Zone-TP/zone09/COMMON.zone09.xa non-auth-mx-response.zone09.xa
template IN MX non-auth-mx-response.zone09.xa {
answer "non-auth-mx-response.zone09.xa. 600 MX 10 mail.non-auth-mx-response.zone09.xa."
}
# INCONSISTENT-MX.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa inconsistent-mx.zone09.xa
# INCONSISTENT-MX-DATA.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa inconsistent-mx-data.zone09.xa
template IN MX inconsistent-mx-data.zone09.xa {
answer "inconsistent-mx-data.zone09.xa. 600 MX 10 mail2.inconsistent-mx-data.zone09.xa."
}
# NULL-MX-WITH-OTHER-MX.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa null-mx-with-other-mx.zone09.xa
template IN MX null-mx-with-other-mx.zone09.xa {
answer "null-mx-with-other-mx.zone09.xa. 600 MX 10 mail.null-mx-with-other-mx.zone09.xa"
answer "null-mx-with-other-mx.zone09.xa. 600 MX 0 ."
}
template IN A null-mx-with-other-mx.zone09.xa {
answer "null-mx-with-other-mx.zone09.xa. 600 A 127.3.0.25"
}
# NULL-MX-NON-ZERO-PREF.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa null-mx-non-zero-pref.zone09.xa
template IN MX null-mx-non-zero-pref.zone09.xa {
answer "null-mx-non-zero-pref.zone09.xa. 600 MX 99 ."
}
# TLD-EMAIL-DOMAIN (located with the other TLD configs in this file)
# ROOT-EMAIL-DOMAIN (located with the other root-zone configs in this file)
# MX-DATA.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa mx-data.zone09.xa
template IN MX MX-DATA.zone09.xa {
answer "MX-DATA.zone09.xa. 600 MX 10 mail.mx-data.zone09.xa."
}
# NULL-MX.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa null-mx.zone09.xa
template IN MX null-mx.zone09.xa {
answer "null-mx.zone09.xa. 600 MX 0 ."
}
# NO-MX-SLD.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa no-mx-sld.zone09.xa
# NO-MX-TLD (implemented in .xa)
# NO-MX-ARPA (implemented in .arpa)
}
# testzones ns that answers without authoritative answer
. {
bind 127.19.9.34
bind fda1:b2:c3:0:127:19:9:34
log
# NON-AUTH-MX-RESPONSE.zone09.xa
file Zone-TP/zone09/COMMON.zone09.xa non-auth-mx-response.zone09.xa
template IN MX non-auth-mx-response.zone09.xa {
answer "non-auth-mx-response.zone09.xa. 600 MX 10 mail.non-auth-mx-response.zone09.xa."
fallthrough
}
header {
response clear aa
}
}

119
zonemaster/test-zone-data/Zone-TP/zone09/zone09.xa Normal file
View File

@@ -0,0 +1,119 @@
$ORIGIN zone09.xa.
$TTL 3600
@ SOA ns1 admin. (
2022112300 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1
NS ns2
ns1 A 127.19.9.21
ns1 AAAA fda1:b2:c3:0:127:19:9:21
ns2 A 127.19.9.22
ns2 AAAA fda1:b2:c3:0:127:19:9:22
inconsistent-mx NS ns1.inconsistent-mx
inconsistent-mx NS ns2.inconsistent-mx
ns1.inconsistent-mx A 127.19.9.31
ns1.inconsistent-mx AAAA fda1:b2:c3::127:19:9:31
ns2.inconsistent-mx A 127.19.9.32
ns2.inconsistent-mx AAAA fda1:b2:c3::127:19:9:32
inconsistent-mx-data NS ns1.inconsistent-mx-data
inconsistent-mx-data NS ns2.inconsistent-mx-data
ns1.inconsistent-mx-data A 127.19.9.31
ns1.inconsistent-mx-data AAAA fda1:b2:c3::127:19:9:31
ns2.inconsistent-mx-data A 127.19.9.32
ns2.inconsistent-mx-data AAAA fda1:b2:c3::127:19:9:32
mx-data NS ns1.mx-data
mx-data NS ns2.mx-data
ns1.mx-data A 127.19.9.31
ns1.mx-data AAAA fda1:b2:c3::127:19:9:31
ns2.mx-data A 127.19.9.32
ns2.mx-data AAAA fda1:b2:c3::127:19:9:32
unexpected-rcode-mx NS ns1.unexpected-rcode-mx
unexpected-rcode-mx NS ns2.unexpected-rcode-mx
ns1.unexpected-rcode-mx A 127.19.9.31
ns1.unexpected-rcode-mx AAAA fda1:b2:c3::127:19:9:31
ns2.unexpected-rcode-mx A 127.19.9.32
ns2.unexpected-rcode-mx AAAA fda1:b2:c3::127:19:9:32
tld-email-domain NS ns1.tld-email-domain
tld-email-domain NS ns2.tld-email-domain
ns1.tld-email-domain A 127.19.9.31
ns1.tld-email-domain AAAA fda1:b2:c3::127:19:9:31
ns2.tld-email-domain A 127.19.9.32
ns2.tld-email-domain AAAA fda1:b2:c3::127:19:9:32
null-mx NS ns1.null-mx
null-mx NS ns2.null-mx
ns1.null-mx A 127.19.9.31
ns1.null-mx AAAA fda1:b2:c3::127:19:9:31
ns2.null-mx A 127.19.9.32
ns2.null-mx AAAA fda1:b2:c3::127:19:9:32
no-mx-sld NS ns1.no-mx-sld
no-mx-sld NS ns2.no-mx-sld
ns1.no-mx-sld A 127.19.9.31
ns1.no-mx-sld AAAA fda1:b2:c3::127:19:9:31
ns2.no-mx-sld A 127.19.9.32
ns2.no-mx-sld AAAA fda1:b2:c3::127:19:9:32
no-mx-tld NS ns1.no-mx-tld
no-mx-tld NS ns2.no-mx-tld
ns1.no-mx-tld A 127.19.9.31
ns1.no-mx-tld AAAA fda1:b2:c3::127:19:9:31
ns2.no-mx-tld A 127.19.9.32
ns2.no-mx-tld AAAA fda1:b2:c3::127:19:9:32
no-mx-arpa NS ns1.no-mx-arpa
no-mx-arpa NS ns2.no-mx-arpa
ns1.no-mx-arpa A 127.19.9.31
ns1.no-mx-arpa AAAA fda1:b2:c3::127:19:9:31
ns2.no-mx-arpa A 127.19.9.32
ns2.no-mx-arpa AAAA fda1:b2:c3::127:19:9:32
non-auth-mx-response NS ns1.non-auth-mx-response
non-auth-mx-response NS ns2.non-auth-mx-response
ns1.non-auth-mx-response A 127.19.9.31
ns1.non-auth-mx-response AAAA fda1:b2:c3::127:19:9:31
ns2.non-auth-mx-response A 127.19.9.32
ns2.non-auth-mx-response AAAA fda1:b2:c3::127:19:9:32
no-response-mx-query NS ns1.no-response-mx-query
no-response-mx-query NS ns2.no-response-mx-query
ns1.no-response-mx-query A 127.19.9.31
ns1.no-response-mx-query AAAA fda1:b2:c3::127:19:9:31
ns2.no-response-mx-query A 127.19.9.32
ns2.no-response-mx-query AAAA fda1:b2:c3::127:19:9:32
null-mx-non-zero-pref NS ns1.null-mx-non-zero-pref
null-mx-non-zero-pref NS ns2.null-mx-non-zero-pref
ns1.null-mx-non-zero-pref A 127.19.9.31
ns1.null-mx-non-zero-pref AAAA fda1:b2:c3::127:19:9:31
ns2.null-mx-non-zero-pref A 127.19.9.32
ns2.null-mx-non-zero-pref AAAA fda1:b2:c3::127:19:9:32
null-mx-with-other-mx NS ns1.null-mx-with-other-mx
null-mx-with-other-mx NS ns2.null-mx-with-other-mx
ns1.null-mx-with-other-mx A 127.19.9.31
ns1.null-mx-with-other-mx AAAA fda1:b2:c3::127:19:9:31
ns2.null-mx-with-other-mx A 127.19.9.32
ns2.null-mx-with-other-mx AAAA fda1:b2:c3::127:19:9:32
root-email-domain NS ns1.root-email-domain
root-email-domain NS ns2.root-email-domain
ns1.root-email-domain A 127.19.9.31
ns1.root-email-domain AAAA fda1:b2:c3::127:19:9:31
ns2.root-email-domain A 127.19.9.32
ns2.root-email-domain AAAA fda1:b2:c3::127:19:9:32
; EOF

23
zonemaster/test-zone-data/Zone-TP/zone11/COMMON-SCENARIO-INCLUDE Normal file
View File

@@ -0,0 +1,23 @@
;; This file factors out common boilerplate in zone files for
;; {SCENARIO}.zone11.xa or {SCENARIO}.zone11.arpa zones.
;;
;; Do not use $ORIGIN here!
$TTL 3600
;; CAUTION: If changing the $TTL or the SOA contents, also edit zone11.cfg
;; because some “template” blocks include a copy of this SOA record.
@ SOA ns1.child.zone11.xa. admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1.child.zone11.xa.
NS ns2.child.zone11.xa.
;; Local Variables:
;; mode: dns
;; End:

21
zonemaster/test-zone-data/Zone-TP/zone11/COMMON-SCENARIO-INCLUDE-THREE-NS Normal file
View File

@@ -0,0 +1,21 @@
;; This file factors out common boilerplate in zone files for
;; {SCENARIO}.zone11.xa zones having three authoritative name servers.
;;
;; Do not use $ORIGIN here!
$TTL 3600
@ SOA ns1.child.zone11.xa. admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1.child.zone11.xa.
NS ns2.child.zone11.xa.
NS ns3.child.zone11.xa.
;; Local Variables:
;; mode: dns
;; End:

28
zonemaster/test-zone-data/Zone-TP/zone11/COMMON-TLD-INCLUDE Normal file
View File

@@ -0,0 +1,28 @@
;; This file factors out common boilerplate in zone files for
;; TLD zones.
;;
;; Do not use $ORIGIN here!
$TTL 3600
;; CAUTION: If changing the $TTL or the SOA contents, also edit zone11.cfg
;; because some “template” blocks include a copy of this SOA record.
@ SOA ns1.zone11.xa. admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1.zone11.xa.
NS ns2.zone11.xa.
ns1.zone11.xa. A 127.19.11.21
AAAA fda1:b2:c3::127:19:11:21
ns2.zone11.xa. A 127.19.11.22
AAAA fda1:b2:c3::127:19:11:22
;; Local Variables:
;; mode: dns
;; End:

13
zonemaster/test-zone-data/Zone-TP/zone11/README.md Normal file
View File

@@ -0,0 +1,13 @@
[This directory], i.e. the same directory as this README file, holds zone
files and configuration files to implement the test zones for the scenarios
defined in [Zone11 test scenario specification].
For these test zones the following files are found in [this directory]:
* Zone files for `zone11.xa` and other related zones;
* CoreDNS configuration file;
* Output from `zonemaster-cli` on all test scenarios in
[Zone11 Test Zones Output].
[Zone11 Test Zones Output]: ./test-zones-output.md
[Zone11 test scenario specification]: ../../../docs/public/specifications/test-zones/Zone-TP/zone11.md
[This directory]: .

6
zonemaster/test-zone-data/Zone-TP/zone11/good-spf-1.zone11.xa.zone Normal file
View File

@@ -0,0 +1,6 @@
$ORIGIN good-spf-1.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "v=spf1"

6
zonemaster/test-zone-data/Zone-TP/zone11/good-spf-2.zone11.xa.zone Normal file
View File

@@ -0,0 +1,6 @@
$ORIGIN good-spf-2.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "v=spf1 a mx ip4:192.0.2.50 ip6:2001:db8:0:8::50 -all"

6
zonemaster/test-zone-data/Zone-TP/zone11/invalid-syntax-1.zone11.xa.zone Normal file
View File

@@ -0,0 +1,6 @@
$ORIGIN invalid-syntax-1.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "v=spf1 amx-all"

22
zonemaster/test-zone-data/Zone-TP/zone11/invalid-syntax-2.zone11.xa.zone Normal file
View File

@@ -0,0 +1,22 @@
$ORIGIN invalid-syntax-2.zone11.xa.
$TTL 3600
@ SOA ns1a admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1a
NS ns1b
NS ns2
ns1a A 127.19.11.31
AAAA fda1:b2:c3::127:19:11:31
ns1b A 127.19.11.31
AAAA fda1:b2:c3::127:19:11:31
ns2 A 127.19.11.32
AAAA fda1:b2:c3::127:19:11:32
@ TXT "v=spf1 amx-all"

6
zonemaster/test-zone-data/Zone-TP/zone11/invalid-syntax-3.zone11.xa.zone Normal file
View File

@@ -0,0 +1,6 @@
$ORIGIN invalid-syntax-3.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "v=spf1 include\0117\245\215\187\250;\135"

7
zonemaster/test-zone-data/Zone-TP/zone11/multiple-spf-records.zone11.xa.zone Normal file
View File

@@ -0,0 +1,7 @@
$ORIGIN multiple-spf-records.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "v=spf1 -all"
IN TXT "v=spf1 a mx ~all"

5
zonemaster/test-zone-data/Zone-TP/zone11/no-spf-arpa-zone.zone11.arpa.zone Normal file
View File

@@ -0,0 +1,5 @@
$ORIGIN no-spf-arpa-zone.zone11.arpa.
$INCLUDE COMMON-SCENARIO-INCLUDE
; This zone file intentionally left blank

7
zonemaster/test-zone-data/Zone-TP/zone11/no-spf-txt.zone11.xa.zone Normal file
View File

@@ -0,0 +1,7 @@
$ORIGIN no-spf-txt.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "There are no SPF policy records here."

5
zonemaster/test-zone-data/Zone-TP/zone11/no-spf-zone11.zone Normal file
View File

@@ -0,0 +1,5 @@
$ORIGIN no-spf-zone11.
$INCLUDE COMMON-TLD-INCLUDE
; This zone file intentionally left blank

7
zonemaster/test-zone-data/Zone-TP/zone11/no-spf.hintfile Normal file
View File

@@ -0,0 +1,7 @@
. 3600000 NS ns1.no-spf.root-servers.zone11.xa.
ns1.no-spf.root-servers.zone11.xa. 3600000 A 127.19.11.41
ns1.no-spf.root-servers.zone11.xa. 3600000 AAAA fda1:b2:c3::127:19:11:41
;
. 3600000 NS ns2.no-spf.root-servers.zone11.xa.
ns2.no-spf.root-servers.zone11.xa. 3600000 A 127.19.11.42
ns2.no-spf.root-servers.zone11.xa. 3600000 AAAA fda1:b2:c3::127:19:11:42

6
zonemaster/test-zone-data/Zone-TP/zone11/no-txt.zone11.xa.zone Normal file
View File

@@ -0,0 +1,6 @@
$ORIGIN no-txt.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
; The remainder of this zone file intentionally left blank

6
zonemaster/test-zone-data/Zone-TP/zone11/non-auth-txt.zone11.xa.zone Normal file
View File

@@ -0,0 +1,6 @@
$ORIGIN non-auth-txt.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "Look ma, no AA bit!"

5
zonemaster/test-zone-data/Zone-TP/zone11/non-null-spf-arpa-zone.zone11.arpa.zone Normal file
View File

@@ -0,0 +1,5 @@
$ORIGIN non-null-spf-arpa-zone.zone11.arpa.
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "v=spf1 ip4:192.0.2.50 ip6:2001:db8:0:8::50 -all"

5
zonemaster/test-zone-data/Zone-TP/zone11/non-null-spf-zone11.zone Normal file
View File

@@ -0,0 +1,5 @@
$ORIGIN non-null-spf-zone11.
$INCLUDE COMMON-TLD-INCLUDE
@ IN TXT "v=spf1 ip4:192.0.2.50 ip6:2001:db8:0:8::50 -all"

7
zonemaster/test-zone-data/Zone-TP/zone11/non-null-spf.hintfile Normal file
View File

@@ -0,0 +1,7 @@
. 3600000 NS ns1.non-null-spf.root-servers.zone11.xa.
ns1.non-null-spf.root-servers.zone11.xa. 3600000 A 127.19.11.45
ns1.non-null-spf.root-servers.zone11.xa. 3600000 AAAA fda1:b2:c3::127:19:11:45
;
. 3600000 NS ns2.non-null-spf.root-servers.zone11.xa.
ns2.non-null-spf.root-servers.zone11.xa. 3600000 A 127.19.11.46
ns2.non-null-spf.root-servers.zone11.xa. 3600000 AAAA fda1:b2:c3::127:19:11:46

8
zonemaster/test-zone-data/Zone-TP/zone11/ns1.all-different-spf.zone11.xa.zone Normal file
View File

@@ -0,0 +1,8 @@
; For ns1.child.zone11.xa
$ORIGIN all-different-spf.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE-THREE-NS
@ IN TXT "v=spf1 -all"

9
zonemaster/test-zone-data/Zone-TP/zone11/ns1.inconsistent-spf.zone11.xa.zone Normal file
View File

@@ -0,0 +1,9 @@
; For ns1.child.zone11.xa
$ORIGIN inconsistent-spf.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "I am name server one"
IN TXT "v=spf1 ip4:192.0.2.50 ip6:2001:db8:0:8::50 -all"

9
zonemaster/test-zone-data/Zone-TP/zone11/ns1.same-spf-different-txt.zone11.xa.zone Normal file
View File

@@ -0,0 +1,9 @@
; For ns1.child.zone11.xa
$ORIGIN same-spf-different-txt.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "I am name server one"
IN TXT "v=spf1 ip4:192.0.2.50 ip6:2001:db8:0:8::50 -all"

8
zonemaster/test-zone-data/Zone-TP/zone11/ns1.spf-missing-on-one.zone11.xa.zone Normal file
View File

@@ -0,0 +1,8 @@
; For ns1.child.zone11.xa
$ORIGIN spf-missing-on-one.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE-THREE-NS
@ IN TXT "No SPF here!"

8
zonemaster/test-zone-data/Zone-TP/zone11/ns2-3.spf-missing-on-one.zone11.xa.zone Normal file
View File

@@ -0,0 +1,8 @@
; For ns{2,3}.child.zone11.xa
$ORIGIN spf-missing-on-one.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE-THREE-NS
@ IN TXT "v=spf1 ip4:192.0.2.50 ip6:2001:db8:0:8::50 -all"

8
zonemaster/test-zone-data/Zone-TP/zone11/ns2.all-different-spf.zone11.xa.zone Normal file
View File

@@ -0,0 +1,8 @@
; For ns2.child.zone11.xa
$ORIGIN all-different-spf.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE-THREE-NS
@ IN TXT "v=spf1 ~all"

9
zonemaster/test-zone-data/Zone-TP/zone11/ns2.inconsistent-spf.zone11.xa.zone Normal file
View File

@@ -0,0 +1,9 @@
; For ns1.child.zone11.xa
$ORIGIN inconsistent-spf.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "I am name server two"
IN TXT "v=spf1 ip4:192.0.2.51 ip6:2001:db8:0:8::51 -all"

9
zonemaster/test-zone-data/Zone-TP/zone11/ns2.same-spf-different-txt.zone11.xa.zone Normal file
View File

@@ -0,0 +1,9 @@
; For ns2.child.zone11.xa
$ORIGIN same-spf-different-txt.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "I am name server two"
IN TXT "v=spf1 ip4:192.0.2.50 ip6:2001:db8:0:8::50 -all"

8
zonemaster/test-zone-data/Zone-TP/zone11/ns3.all-different-spf.zone11.xa.zone Normal file
View File

@@ -0,0 +1,8 @@
; For ns3.child.zone11.xa
$ORIGIN all-different-spf.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE-THREE-NS
@ IN TXT "v=spf1 ?all"

5
zonemaster/test-zone-data/Zone-TP/zone11/null-spf-arpa-zone.zone11.arpa.zone Normal file
View File

@@ -0,0 +1,5 @@
$ORIGIN null-spf-arpa-zone.zone11.arpa.
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "v=spf1 -all"

5
zonemaster/test-zone-data/Zone-TP/zone11/null-spf-zone11.zone Normal file
View File

@@ -0,0 +1,5 @@
$ORIGIN null-spf-zone11.
$INCLUDE COMMON-TLD-INCLUDE
@ IN TXT "v=spf1 -all"

7
zonemaster/test-zone-data/Zone-TP/zone11/null-spf.hintfile Normal file
View File

@@ -0,0 +1,7 @@
. 3600000 NS ns1.null-spf.root-servers.zone11.xa.
ns1.null-spf.root-servers.zone11.xa. 3600000 A 127.19.11.43
ns1.null-spf.root-servers.zone11.xa. 3600000 AAAA fda1:b2:c3::127:19:11:43
;
. 3600000 NS ns2.null-spf.root-servers.zone11.xa.
ns2.null-spf.root-servers.zone11.xa. 3600000 A 127.19.11.44
ns2.null-spf.root-servers.zone11.xa. 3600000 AAAA fda1:b2:c3::127:19:11:44

17
zonemaster/test-zone-data/Zone-TP/zone11/root-no-spf.zone Normal file
View File

@@ -0,0 +1,17 @@
$ORIGIN .
$TTL 3600
@ SOA ns1.no-spf.root-servers.zone11.xa. admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1.no-spf.root-servers.zone11.xa.
NS ns2.no-spf.root-servers.zone11.xa.
ns1.no-spf.root-servers.zone11.xa. A 127.19.11.41
AAAA fda1:b2:c3::127:19:11:41
ns2.no-spf.root-servers.zone11.xa. A 127.19.11.42
AAAA fda1:b2:c3::127:19:11:42

19
zonemaster/test-zone-data/Zone-TP/zone11/root-non-null-spf.zone Normal file
View File

@@ -0,0 +1,19 @@
$ORIGIN .
$TTL 3600
@ SOA ns1.non-null-spf.root-servers.zone11.xa. admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1.non-null-spf.root-servers.zone11.xa.
NS ns2.non-null-spf.root-servers.zone11.xa.
TXT "v=spf1 ip6:fda1:b2:c3::/64 -all"
ns1.non-null-spf.root-servers.zone11.xa. A 127.19.11.45
AAAA fda1:b2:c3::127:19:11:45
ns2.non-null-spf.root-servers.zone11.xa. A 127.19.11.46
AAAA fda1:b2:c3::127:19:11:46

20
zonemaster/test-zone-data/Zone-TP/zone11/root-null-spf.zone Normal file
View File

@@ -0,0 +1,20 @@
$ORIGIN .
$TTL 3600
@ SOA ns1.null-spf.root-servers.zone11.xa. admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1.null-spf.root-servers.zone11.xa.
NS ns2.null-spf.root-servers.zone11.xa.
TXT "v=spf1 -all"
ns1.null-spf.root-servers.zone11.xa. A 127.19.11.43
AAAA fda1:b2:c3::127:19:11:43
ns2.null-spf.root-servers.zone11.xa. A 127.19.11.44
AAAA fda1:b2:c3::127:19:11:44

6
zonemaster/test-zone-data/Zone-TP/zone11/servfail.zone11.xa.zone Normal file
View File

@@ -0,0 +1,6 @@
$ORIGIN servfail.zone11.xa.
$TTL 3600
$INCLUDE COMMON-SCENARIO-INCLUDE
@ IN TXT "Playing dead"

374
zonemaster/test-zone-data/Zone-TP/zone11/test-zones-output.md Normal file
View File

@@ -0,0 +1,374 @@
# Zone11 Test Zones Output
# Table of contents
* [Introduction](#introduction)
* [All message tags](#all-message-tags)
* [All scenarios](#all-scenarios)
* [zonemaster-cli commands and their output for each test scenario](#zonemaster-cli-commands-and-their-output-for-each-test-scenario)
## Introduction
In this file the output of running `zonemaster-cli` for every test zone is
found. This file is created during the development of the test zones and should
be updated as the implementation of the test case or the test scenarios or test
zones are updated or corrected.
During development and any update this document serves as tracking and log tool.
It also serves as a template for future development of test zones for
scenarios for other test cases.
## All message tags
* Z11_DIFFERENT_SPF_POLICIES_FOUND
* Z11_INCONSISTENT_SPF_POLICIES
* Z11_NO_SPF_FOUND
* Z11_NO_SPF_NON_MAIL_DOMAIN
* Z11_NON_NULL_SPF_NON_MAIL_DOMAIN
* Z11_NULL_SPF_NON_MAIL_DOMAIN
* Z11_SPF_MULTIPLE_RECORDS
* Z11_SPF_SYNTAX_ERROR
* Z11_SPF_SYNTAX_OK
* Z11_UNABLE_TO_CHECK_FOR_SPF
## All scenarios
| Scenario name | Zone name |
|:-----------------------|:-----------------------------------|
| GOOD-SPF-1 | good-spf-1.zone11.xa |
| GOOD-SPF-2 | good-spf-2.zone11.xa |
| SAME-SPF-DIFFERENT-TXT | same-spf-different-txt.zone11.xa |
| NO-TXT | no-txt.zone11.xa |
| NO-SPF-TXT | no-spf-txt.zone11.xa |
| NO-SPF-ROOT-ZONE | . |
| NO-SPF-TLD-ZONE | no-spf-zone11 |
| NO-SPF-ARPA-ZONE | no-spf-arpa-zone.zone11.arpa |
| NULL-SPF-ROOT-ZONE | . |
| NULL-SPF-TLD-ZONE | null-spf-zone11 |
| NULL-SPF-ARPA-ZONE | null-spf-arpa-zone.zone11.arpa |
| NON-NULL-SPF-ROOT-ZONE | . |
| NON-NULL-SPF-TLD-ZONE | non-null-spf-zone11 |
| NON-NULL-SPF-ARPA-ZONE | non-null-spf-arpa-zone.zone11.arpa |
| INVALID-SYNTAX-1 | invalid-syntax-1.zone11.xa |
| INVALID-SYNTAX-2 | invalid-syntax-2.zone11.xa |
| INVALID-SYNTAX-3 | invalid-syntax-3.zone11.xa |
| NON-AUTH-TXT | non-auth-txt.zone11.xa |
| SERVFAIL | servfail.zone11.xa |
| INCONSISTENT-SPF | inconsistent-spf.zone11.xa |
| SPF-MISSING-ON-ONE | spf-missing-on-one.zone11.xa |
| ALL-DIFFERENT-SPF | all-different-spf.zone11.xa |
| MULTIPLE-SPF-RECORDS | multiple-spf-records.zone11.xa |
## zonemaster-cli commands and their output for each test scenario
The level (`--level`) must be set to the lowest level of the message tags. For
this test case `INFO` is the lowest level. It is only meaningful to test the
test zones with `--test Zone11`.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:--------------|:-----------------------|:-----------------------|
| GOOD-SPF-1 | Z11_SPF_SYNTAX_OK | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info good-spf-1.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.07 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="good-spf-1.zone11.xa"
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:--------------|:-----------------------|:-----------------------|
| GOOD-SPF-2 | Z11_SPF_SYNTAX_OK | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info good-spf-2.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.08 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="good-spf-2.zone11.xa"
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------------|:-----------------------|:-----------------------|
| SAME-SPF-DIFFERENT-TXT | Z11_SPF_SYNTAX_OK | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info same-spf-different-txt.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="same-spf-different-txt.zone11.xa"
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:--------------|:-----------------------|:-----------------------|
| NO-TXT | Z11_NO_SPF_FOUND | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info no-txt.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 NOTICE Zone11 Z11_NO_SPF_FOUND domain="no-txt.zone11.xa"
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:--------------|:-----------------------|:-----------------------|
| NO-SPF-TXT | Z11_NO_SPF_FOUND | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info no-spf-txt.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 NOTICE Zone11 Z11_NO_SPF_FOUND domain="no-spf-txt.zone11.xa"
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------|:---------------------------|:-----------------------|
| NO-SPF-ROOT-ZONE | Z11_NO_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints Zone-TP/zone11/no-spf.hintfile --level info .
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.01 NOTICE Zone11 Z11_NO_SPF_FOUND domain="."
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:----------------|:---------------------------|:-----------------------|
| NO-SPF-TLD-ZONE | Z11_NO_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info no-spf-zone11
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.03 NOTICE Zone11 Z11_NO_SPF_FOUND domain="no-spf-zone11"
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------|:---------------------------|:-----------------------|
| NO-SPF-ARPA-ZONE | Z11_NO_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info no-spf-arpa-zone.zone11.arpa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 NOTICE Zone11 Z11_NO_SPF_FOUND domain="no-spf-arpa-zone.zone11.arpa"
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-------------------|:-----------------------------|:-----------------------|
| NULL-SPF-ROOT-ZONE | Z11_NULL_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints Zone-TP/zone11/null-spf.hintfile --level info .
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.01 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="."
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------|:-----------------------------|:-----------------------|
| NULL-SPF-TLD-ZONE | Z11_NULL_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info null-spf-zone11
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.04 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="null-spf-zone11"
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-------------------|:-----------------------------|:-----------------------|
| NULL-SPF-ARPA-ZONE | Z11_NULL_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info null-spf-arpa-zone.zone11.arpa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="null-spf-arpa-zone.zone11.arpa"
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------------|:---------------------------------|:-----------------------|
| NON-NULL-SPF-ROOT-ZONE | Z11_NON_NULL_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints Zone-TP/zone11/non-null-spf.hintfile --level info .
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.01 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="."
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:----------------------|:---------------------------------|:-----------------------|
| NON-NULL-SPF-TLD-ZONE | Z11_NON_NULL_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info non-null-spf-zone11
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.04 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="non-null-spf-zone11"
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------------|:---------------------------------|:-----------------------|
| NON-NULL-SPF-ARPA-ZONE | Z11_NON_NULL_SPF_NON_MAIL_DOMAIN | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info non-null-spf-arpa-zone.zone11.arpa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 INFO Zone11 Z11_SPF1_SYNTAX_OK domain="non-null-spf-arpa-zone.zone11.arpa"
```
--> Not OK.
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------|:-----------------------|:-----------------------|
| INVALID-SYNTAX-1 | Z11_SPF_SYNTAX_ERROR | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info invalid-syntax-1.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.09 ERROR Zone11 Z11_SPF1_SYNTAX_ERROR domain="invalid-syntax-1.zone11.xa"; ns_ip_list=127.19.11.31;127.19.11.32;fda1:b2:c3:0:127:19:11:31;fda1:b2:c3:0:127:19:11:32
```
--> Not OK (expected argument "ns_list" for Z11_SPF1_SYNTAX_ERROR, got "ns_ip_list" instead).
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------|:-----------------------|:-----------------------|
| INVALID-SYNTAX-2 | Z11_SPF_SYNTAX_ERROR | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info invalid-syntax-2.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.11 ERROR Zone11 Z11_SPF1_SYNTAX_ERROR domain="invalid-syntax-2.zone11.xa"; ns_ip_list=127.19.11.31;127.19.11.32;fda1:b2:c3:0:127:19:11:31;fda1:b2:c3:0:127:19:11:32
```
--> Not OK (expected argument "ns_list" for Z11_SPF1_SYNTAX_ERROR, got "ns_ip_list" instead).
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------|:-----------------------|:-----------------------|
| INVALID-SYNTAX-3 | Z11_SPF_SYNTAX_ERROR | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info invalid-syntax-3.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.05 ERROR Zone11 Z11_SPF1_SYNTAX_ERROR domain="invalid-syntax-3.zone11.xa"; ns_ip_list=127.19.11.31;127.19.11.32;fda1:b2:c3:0:127:19:11:31;fda1:b2:c3:0:127:19:11:32
```
--> Not OK (expected argument "ns_list" for Z11_SPF1_SYNTAX_ERROR, got "ns_ip_list" instead).
| Scenario name | Mandatory message tags | Forbidden message tags |
|:--------------|:----------------------------|:-----------------------|
| NON-AUTH-TXT | Z11_UNABLE_TO_CHECK_FOR_SPF | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info non-auth-txt.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.04 ERROR Zone11 Z11_UNABLE_TO_CHECK_FOR_SPF
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:--------------|:----------------------------|:-----------------------|
| SERVFAIL | Z11_UNABLE_TO_CHECK_FOR_SPF | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info servfail.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.07 ERROR Zone11 Z11_UNABLE_TO_CHECK_FOR_SPF
```
--> OK
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-----------------|:----------------------------------------------------------------|:-----------------------|
| INCONSISTENT-SPF | Z11_INCONSISTENT_SPF_POLICIES, Z11_DIFFERENT_SPF_POLICIES_FOUND | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info inconsistent-spf.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.07 WARNING Zone11 Z11_INCONSISTENT_SPF_POLICIES
0.07 NOTICE Zone11 Z11_DIFFERENT_SPF_POLICIES_FOUND ns_ip_list=127.19.11.32;fda1:b2:c3:0:127:19:11:32
0.07 NOTICE Zone11 Z11_DIFFERENT_SPF_POLICIES_FOUND ns_ip_list=127.19.11.31;fda1:b2:c3:0:127:19:11:31
```
--> Not OK (expected argument "ns_list" for Z11_DIFFERENT_SPF_POLICIES_FOUND, got "ns_ip_list" instead).
| Scenario name | Mandatory message tags | Forbidden message tags |
|:-------------------|:----------------------------------------------------------------|:-----------------------|
| SPF-MISSING-ON-ONE | Z11_INCONSISTENT_SPF_POLICIES, Z11_DIFFERENT_SPF_POLICIES_FOUND | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info spf-missing-on-one.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.10 WARNING Zone11 Z11_INCONSISTENT_SPF_POLICIES
0.10 NOTICE Zone11 Z11_DIFFERENT_SPF_POLICIES_FOUND ns_ip_list=127.19.11.31;fda1:b2:c3:0:127:19:11:31
0.10 NOTICE Zone11 Z11_DIFFERENT_SPF_POLICIES_FOUND ns_ip_list=127.19.11.32;127.19.11.33;fda1:b2:c3:0:127:19:11:32;fda1:b2:c3:0:127:19:11:33
```
--> Not OK (expected argument "ns_list" for Z11_DIFFERENT_SPF_POLICIES_FOUND, got "ns_ip_list" instead).
| Scenario name | Mandatory message tags | Forbidden message tags |
|:------------------|:----------------------------------------------------------------|:-----------------------|
| ALL-DIFFERENT-SPF | Z11_INCONSISTENT_SPF_POLICIES, Z11_DIFFERENT_SPF_POLICIES_FOUND | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info all-different-spf.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.06 WARNING Zone11 Z11_INCONSISTENT_SPF_POLICIES
0.06 NOTICE Zone11 Z11_DIFFERENT_SPF_POLICIES_FOUND ns_ip_list=127.19.11.33;fda1:b2:c3:0:127:19:11:33
0.06 NOTICE Zone11 Z11_DIFFERENT_SPF_POLICIES_FOUND ns_ip_list=127.19.11.32;fda1:b2:c3:0:127:19:11:32
0.06 NOTICE Zone11 Z11_DIFFERENT_SPF_POLICIES_FOUND ns_ip_list=127.19.11.31;fda1:b2:c3:0:127:19:11:31
```
--> Not OK (expected argument "ns_list" for Z11_DIFFERENT_SPF_POLICIES_FOUND, got "ns_ip_list" instead).
| Scenario name | Mandatory message tags | Forbidden message tags |
|:---------------------|:-------------------------|:-----------------------|
| MULTIPLE-SPF-RECORDS | Z11_SPF_MULTIPLE_RECORDS | 2) |
* (2) All tags except for those specified as “Mandatory message tags”
```
$ zonemaster-cli --raw --show-testcase --test zone11 --hints COMMON/hintfile --level info multiple-spf-records.zone11.xa
0.00 INFO Unspecified GLOBAL_VERSION version=v8.0.0
0.08 ERROR Zone11 Z11_SPF1_MULTIPLE_RECORDS ns_ip_list=127.19.11.31;127.19.11.32;fda1:b2:c3:0:127:19:11:31;fda1:b2:c3:0:127:19:11:32
```
--> Not OK (expected argument "ns_list" for Z11_SPF1_MULTIPLE_RECORDS, got "ns_ip_list" instead).

21
zonemaster/test-zone-data/Zone-TP/zone11/zone11.arpa.zone Normal file
View File

@@ -0,0 +1,21 @@
$ORIGIN zone11.arpa.
$TTL 3600
@ SOA ns1.zone11.xa. admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1.zone11.xa.
NS ns2.zone11.xa.
no-spf-arpa-zone NS ns1.child.zone11.xa.
NS ns2.child.zone11.xa.
null-spf-arpa-zone NS ns1.child.zone11.xa.
NS ns2.child.zone11.xa.
non-null-spf-arpa-zone NS ns1.child.zone11.xa.
NS ns2.child.zone11.xa.

320
zonemaster/test-zone-data/Zone-TP/zone11/zone11.cfg Normal file
View File

@@ -0,0 +1,320 @@
# zone11.xa
zone11.xa:53 {
bind 127.19.11.21 # ns1.zone11.xa
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
bind 127.19.11.22 # ns2.zone11.xa
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
log
file Zone-TP/zone11/zone11.xa.zone zone11.xa
}
##
## Regular scenarios
##
# good-spf-1.zone11.xa
good-spf-1.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/good-spf-1.zone11.xa.zone good-spf-1.zone11.xa
}
# good-spf-2.zone11.xa
good-spf-2.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/good-spf-2.zone11.xa.zone good-spf-2.zone11.xa
}
# same-spf-different-txt.zone11.xa
same-spf-different-txt.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
log
file Zone-TP/zone11/ns1.same-spf-different-txt.zone11.xa.zone same-spf-different-txt.zone11.xa
}
same-spf-different-txt.zone11.xa:53 {
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/ns2.same-spf-different-txt.zone11.xa.zone same-spf-different-txt.zone11.xa
}
# no-txt.zone11.xa
no-txt.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/no-txt.zone11.xa.zone no-txt.zone11.xa
# CoreDNS erroneously returns NXDOMAIN when a node exists but no records
# matching QTYPE. This is a workaround to ensure we get NODATA.
template IN TXT no-txt.zone11.xa {
rcode NOERROR
# CAUTION: Make sure this remains in sync with the contents of COMMON-SCENARIO-INCLUDE
authority "no-txt.zone11.xa. 3600 IN SOA ns1.child.zone11.xa. admin.zone11.xa. 2025080400 21600 3600 604800 86400"
}
}
# no-spf-txt.zone11.xa
no-spf-txt.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/no-spf-txt.zone11.xa.zone no-spf-txt.zone11.xa
}
# invalid-syntax-1.zone11.xa
invalid-syntax-1.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/invalid-syntax-1.zone11.xa.zone invalid-syntax-1.zone11.xa
}
# invalid-syntax-2.zone11.xa
invalid-syntax-2.zone11.xa:53 {
bind 127.19.11.31 # ns1{a,b}.invalid-syntax-2.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1{a,b}.invalid-syntax-2.zone11.xa
bind 127.19.11.32 # ns2.invalid-syntax-2.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.invalid-syntax-2.zone11.xa
log
file Zone-TP/zone11/invalid-syntax-2.zone11.xa.zone invalid-syntax-2.zone11.xa
}
# invalid-syntax-3.zone11.xa
invalid-syntax-3.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/invalid-syntax-3.zone11.xa.zone invalid-syntax-3.zone11.xa
}
# non-auth-txt.zone11.xa
non-auth-txt.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/non-auth-txt.zone11.xa.zone non-auth-txt.zone11.xa
header {
response clear aa
}
}
# servfail.zone11.xa
servfail.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/servfail.zone11.xa.zone servfail.zone11.xa
template IN TXT servfail.zone11.xa {
rcode SERVFAIL
}
}
# inconsistent-spf.zone11.xa
inconsistent-spf.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
log
file Zone-TP/zone11/ns1.inconsistent-spf.zone11.xa.zone inconsistent-spf.zone11.xa
}
inconsistent-spf.zone11.xa:53 {
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/ns2.inconsistent-spf.zone11.xa.zone inconsistent-spf.zone11.xa
}
# spf-missing-on-one.zone11.xa
spf-missing-on-one.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
log
file Zone-TP/zone11/ns1.spf-missing-on-one.zone11.xa.zone spf-missing-on-one.zone11.xa
}
spf-missing-on-one.zone11.xa:53 {
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
bind 127.19.11.33 # ns3.child.zone11.xa
bind fda1:b2:c3::127:19:11:33 # ns3.child.zone11.xa
log
file Zone-TP/zone11/ns2-3.spf-missing-on-one.zone11.xa.zone spf-missing-on-one.zone11.xa
}
# all-different-spf.zone11.xa
all-different-spf.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
log
file Zone-TP/zone11/ns1.all-different-spf.zone11.xa.zone all-different-spf.zone11.xa
}
all-different-spf.zone11.xa:53 {
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/ns2.all-different-spf.zone11.xa.zone all-different-spf.zone11.xa
}
all-different-spf.zone11.xa:53 {
bind 127.19.11.33 # ns3.child.zone11.xa
bind fda1:b2:c3::127:19:11:33 # ns3.child.zone11.xa
log
file Zone-TP/zone11/ns3.all-different-spf.zone11.xa.zone all-different-spf.zone11.xa
}
# multiple-spf-records.zone11.xa
multiple-spf-records.zone11.xa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/multiple-spf-records.zone11.xa.zone multiple-spf-records.zone11.xa
}
##
## TLD and ARPA scenarios
##
# no-spf-zone11
no-spf-zone11:53 {
bind 127.19.11.21 # ns1.zone11.xa
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
bind 127.19.11.22 # ns2.zone11.xa
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
log
file Zone-TP/zone11/no-spf-zone11.zone no-spf-zone11
# CoreDNS erroneously returns NXDOMAIN when a node exists but no records
# matching QTYPE. This is a workaround to ensure we get NODATA.
template IN TXT no-spf-zone11 {
rcode NOERROR
# CAUTION: Make sure this remains in sync with the contents of COMMON-TLD-ARPA-INCLUDE
authority "no-spf-zone11. 3600 IN SOA ns1.zone11.xa. admin.zone11.xa. 2025080400 21600 3600 604800 86400"
}
}
# null-spf-zone11
null-spf-zone11:53 {
bind 127.19.11.21 # ns1.zone11.xa
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
bind 127.19.11.22 # ns2.zone11.xa
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
log
file Zone-TP/zone11/null-spf-zone11.zone null-spf-zone11
}
# non-null-spf-zone11
non-null-spf-zone11:53 {
bind 127.19.11.21 # ns1.zone11.xa
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
bind 127.19.11.22 # ns2.zone11.xa
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
log
file Zone-TP/zone11/non-null-spf-zone11.zone non-null-spf-zone11
}
# zone11.arpa
zone11.arpa:53 {
bind 127.19.11.21 # ns1.zone11.xa
bind fda1:b2:c3::127:19:11:21 # ns1.zone11.xa
bind 127.19.11.22 # ns2.zone11.xa
bind fda1:b2:c3::127:19:11:22 # ns2.zone11.xa
log
file Zone-TP/zone11/zone11.arpa.zone zone11.arpa
}
# no-spf-arpa-zone.zone11.arpa
no-spf-arpa-zone.zone11.arpa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/no-spf-arpa-zone.zone11.arpa.zone no-spf-arpa-zone.zone11.arpa
# CoreDNS erroneously returns NXDOMAIN when a node exists but no records
# matching QTYPE. This is a workaround to ensure we get NODATA.
template IN TXT no-spf-arpa-zone.zone11.arpa {
rcode NOERROR
# CAUTION: Make sure this remains in sync with the contents of COMMON-TLD-ARPA-INCLUDE
authority "no-spf-arpa-zone.zone11.arpa. 3600 IN SOA ns1.zone11.xa. admin.zone11.xa. 2025080400 21600 3600 604800 86400"
}
}
# null-spf-arpa-zone.zone11.arpa
null-spf-arpa-zone.zone11.arpa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/null-spf-arpa-zone.zone11.arpa.zone null-spf-arpa-zone.zone11.arpa
}
# non-null-spf-arpa-zone.zone11.arpa
non-null-spf-arpa-zone.zone11.arpa:53 {
bind 127.19.11.31 # ns1.child.zone11.xa
bind fda1:b2:c3::127:19:11:31 # ns1.child.zone11.xa
bind 127.19.11.32 # ns2.child.zone11.xa
bind fda1:b2:c3::127:19:11:32 # ns2.child.zone11.xa
log
file Zone-TP/zone11/non-null-spf-arpa-zone.zone11.arpa.zone non-null-spf-arpa-zone.zone11.arpa
}
##
## Alternative root zones
##
.:53 {
bind 127.19.11.41 # ns1.no-spf.root-servers.zone11.xa
bind fda1:b2:c3::127:19:11:41 # ns1.no-spf.root-servers.zone11.xa
bind 127.19.11.42 # ns2.no-spf.root-servers.zone11.xa
bind fda1:b2:c3::127:19:11:42 # ns2.no-spf.root-servers.zone11.xa
log
file Zone-TP/zone11/root-no-spf.zone .
}
.:53 {
bind 127.19.11.43 # ns1.null-spf.root-servers.zone11.xa
bind fda1:b2:c3::127:19:11:43 # ns1.null-spf.root-servers.zone11.xa
bind 127.19.11.44 # ns2.null-spf.root-servers.zone11.xa
bind fda1:b2:c3::127:19:11:44 # ns2.null-spf.root-servers.zone11.xa
log
file Zone-TP/zone11/root-null-spf.zone .
}
.:53 {
bind 127.19.11.45 # ns1.non-null-spf.root-servers.zone11.xa
bind fda1:b2:c3::127:19:11:45 # ns1.non-null-spf.root-servers.zone11.xa
bind 127.19.11.46 # ns2.non-null-spf.root-servers.zone11.xa
bind fda1:b2:c3::127:19:11:46 # ns2.non-null-spf.root-servers.zone11.xa
log
file Zone-TP/zone11/root-non-null-spf.zone .
}

78
zonemaster/test-zone-data/Zone-TP/zone11/zone11.xa.zone Normal file
View File

@@ -0,0 +1,78 @@
$ORIGIN zone11.xa.
$TTL 3600
@ SOA ns1 admin.zone11.xa. (
2025080400 ; serial
6h ; refresh
1h ; retry
1w ; expire
1d ) ; minimum
NS ns1
NS ns2
ns1 A 127.19.11.21
AAAA fda1:b2:c3:0:127:19:11:21
ns2 A 127.19.11.22
AAAA fda1:b2:c3:0:127:19:11:22
ns1.child A 127.19.11.31
AAAA fda1:b2:c3::127:19:11:31
ns2.child A 127.19.11.32
AAAA fda1:b2:c3::127:19:11:32
ns3.child A 127.19.11.33
AAAA fda1:b2:c3::127:19:11:33
good-spf-1 NS ns1.child
NS ns2.child
good-spf-2 NS ns1.child
NS ns2.child
same-spf-different-txt NS ns1.child
NS ns2.child
no-txt NS ns1.child
NS ns2.child
no-spf-txt NS ns1.child
NS ns2.child
invalid-syntax-1 NS ns1.child
NS ns2.child
invalid-syntax-2 NS ns1a.invalid-syntax-2
NS ns1b.invalid-syntax-2
NS ns2.invalid-syntax-2
;; NOTE: ns1a.invalid-syntax-2 deliberately has the same IPv4 and IPv6
;; addresses as ns1b.invalid-syntax-2. This is not a typo.
ns1a.invalid-syntax-2 A 127.19.11.31
AAAA fda1:b2:c3::127:19:11:31
ns1b.invalid-syntax-2 A 127.19.11.31
AAAA fda1:b2:c3::127:19:11:31
ns2.invalid-syntax-2 A 127.19.11.32
AAAA fda1:b2:c3::127:19:11:32
invalid-syntax-3 NS ns1.child
NS ns2.child
non-auth-txt NS ns1.child
NS ns2.child
servfail NS ns1.child
NS ns2.child
inconsistent-spf NS ns1.child
NS ns2.child
spf-missing-on-one NS ns1.child
NS ns2.child
NS ns3.child
all-different-spf NS ns1.child
NS ns2.child
NS ns3.child
multiple-spf-records NS ns1.child
NS ns2.child