$TTL 3600 $ORIGIN goodsub.cname.recursor.engine.xa. @ SOA ( ns1 root 2023103100 86400 14400 3600000 3600 ) @ NS ns1 ns1 A 127.30.1.34 ns1 AAAA fda1:b2:c3:0:127:30:1:34 ; For scenario GOOD-CNAME-OUT-OF-ZONE target A 127.0.0.1