Files
Malin 8d4eaa1489 feat: add full Zonemaster stack with Docker and Spanish UI
- Clone all 5 Zonemaster component repos (LDNS, Engine, CLI, Backend, GUI)
- Dockerfile.backend: 8-stage multi-stage build LDNS→Engine→CLI→Backend
- Dockerfile.gui: Astro static build served via nginx
- docker-compose.yml: backend (internal) + frontend (port 5353)
- nginx.conf: root redirects to /es/, /api/ proxied to backend
- zonemaster-gui/config.ts: defaultLanguage set to 'es' (Spanish)

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
2026-04-21 08:19:24 +02:00

536 lines
20 KiB
INI

## root
.:53 {
bind 127.15.5.27 # ns1
bind fda1:b2:c3:0:127:15:5:27 # ns1
bind 127.15.5.28 # ns2
bind fda1:b2:c3:0:127:15:5:28 # ns2
log
file DNSSEC-TP/dnssec05/root-zone.zone .
}
# Resolver using test case local root
. {
bind 127.15.5.53
unbound {
option root-hints DNSSEC-TP/dnssec05/hintfile.zone
}
log
}
dnssec05.xa:53 { #
bind 127.15.5.21 # ns1
bind fda1:b2:c3:0:127:15:5:21 # ns1
bind 127.15.5.22 # ns2
bind fda1:b2:c3:0:127:15:5:22 # ns2
log
file DNSSEC-TP/dnssec05/dnssec05.xa.zone dnssec05.xa
}
# ALGO-DEPRECATED-1
algo-deprecated-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-1.dnssec05.xa
template IN DNSKEY algo-deprecated-1.dnssec05.xa. {
answer "algo-deprecated-1.dnssec05.xa. 3600 IN DNSKEY 257 3 1 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-3
algo-deprecated-3.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-3.dnssec05.xa
template IN DNSKEY algo-deprecated-3.dnssec05.xa. {
answer "algo-deprecated-3.dnssec05.xa. 3600 IN DNSKEY 257 3 3 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-5
algo-deprecated-5.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-5.dnssec05.xa
template IN DNSKEY algo-deprecated-5.dnssec05.xa. {
answer "algo-deprecated-5.dnssec05.xa. 3600 IN DNSKEY 257 3 5 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-6
algo-deprecated-6.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-6.dnssec05.xa
template IN DNSKEY algo-deprecated-6.dnssec05.xa. {
answer "algo-deprecated-6.dnssec05.xa. 3600 IN DNSKEY 257 3 6 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-7
algo-deprecated-7.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-7.dnssec05.xa
template IN DNSKEY algo-deprecated-7.dnssec05.xa. {
answer "algo-deprecated-7.dnssec05.xa. 3600 IN DNSKEY 257 3 7 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
# ALGO-DEPRECATED-12
algo-deprecated-12.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-deprecated-12.dnssec05.xa
template IN DNSKEY algo-deprecated-12.dnssec05.xa. {
answer "algo-deprecated-12.dnssec05.xa. 3600 IN DNSKEY 257 3 12 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-4
algo-reserved-4.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-4.dnssec05.xa
template IN DNSKEY algo-reserved-4.dnssec05.xa. {
answer "algo-reserved-4.dnssec05.xa. 3600 IN DNSKEY 257 3 4 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-9
algo-reserved-9.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-9.dnssec05.xa
template IN DNSKEY algo-reserved-9.dnssec05.xa. {
answer "algo-reserved-9.dnssec05.xa. 3600 IN DNSKEY 257 3 9 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-11
algo-reserved-11.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-11.dnssec05.xa
template IN DNSKEY algo-reserved-11.dnssec05.xa. {
answer "algo-reserved-11.dnssec05.xa. 3600 IN DNSKEY 257 3 11 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-123
algo-reserved-123.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-123.dnssec05.xa
template IN DNSKEY algo-reserved-123.dnssec05.xa. {
answer "algo-reserved-123.dnssec05.xa. 3600 IN DNSKEY 257 3 123 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-251
algo-reserved-251.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-251.dnssec05.xa
template IN DNSKEY algo-reserved-251.dnssec05.xa. {
answer "algo-reserved-251.dnssec05.xa. 3600 IN DNSKEY 257 3 251 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-RESERVED-255
algo-reserved-255.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-reserved-255.dnssec05.xa
template IN DNSKEY algo-reserved-255.dnssec05.xa. {
answer "algo-reserved-255.dnssec05.xa. 3600 IN DNSKEY 257 3 255 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-UNASSIGNED-20
algo-unassigned-20.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-unassigned-20.dnssec05.xa
template IN DNSKEY algo-unassigned-20.dnssec05.xa. {
answer "algo-unassigned-20.dnssec05.xa. 3600 IN DNSKEY 257 3 20 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-UNASSIGNED-122
algo-unassigned-122.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-unassigned-122.dnssec05.xa
template IN DNSKEY algo-unassigned-122.dnssec05.xa. {
answer "algo-unassigned-122.dnssec05.xa. 3600 IN DNSKEY 257 3 122 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-PRIVATE-253
algo-private-253.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-private-253.dnssec05.xa
template IN DNSKEY algo-private-253.dnssec05.xa. {
answer "algo-private-253.dnssec05.xa. 3600 IN DNSKEY 257 3 253 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-PRIVATE-254
algo-private-254.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-private-254.dnssec05.xa
template IN DNSKEY algo-private-254.dnssec05.xa. {
answer "algo-private-254.dnssec05.xa. 3600 IN DNSKEY 257 3 254 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-NOT-ZONE-SIGN-0
algo-not-zone-sign-0.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-not-zone-sign-0.dnssec05.xa
template IN DNSKEY algo-not-zone-sign-0.dnssec05.xa. {
answer "algo-not-zone-sign-0.dnssec05.xa. 3600 IN DNSKEY 257 3 0 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-NOT-ZONE-SIGN-2
algo-not-zone-sign-2.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-not-zone-sign-2.dnssec05.xa
template IN DNSKEY algo-not-zone-sign-2.dnssec05.xa. {
answer "algo-not-zone-sign-2.dnssec05.xa. 3600 IN DNSKEY 257 3 2 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-NOT-ZONE-SIGN-252
algo-not-zone-sign-252.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-not-zone-sign-252.dnssec05.xa
template IN DNSKEY algo-not-zone-sign-252.dnssec05.xa. {
answer "algo-not-zone-sign-252.dnssec05.xa. 3600 IN DNSKEY 257 3 252 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-NOT-RECOMMENDED-10
algo-not-recommended-10.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-not-recommended-10.dnssec05.xa
template IN DNSKEY algo-not-recommended-10.dnssec05.xa. {
answer "algo-not-recommended-10.dnssec05.xa. 3600 IN DNSKEY 257 3 10 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-8
algo-ok-8.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-8.dnssec05.xa
template IN DNSKEY algo-ok-8.dnssec05.xa. {
answer "algo-ok-8.dnssec05.xa. 3600 IN DNSKEY 257 3 8 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-13
algo-ok-13.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-13.dnssec05.xa
template IN DNSKEY algo-ok-13.dnssec05.xa. {
answer "algo-ok-13.dnssec05.xa. 3600 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-14
algo-ok-14.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-14.dnssec05.xa
template IN DNSKEY algo-ok-14.dnssec05.xa. {
answer "algo-ok-14.dnssec05.xa. 3600 IN DNSKEY 257 3 14 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-15
algo-ok-15.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-15.dnssec05.xa
template IN DNSKEY algo-ok-15.dnssec05.xa. {
answer "algo-ok-15.dnssec05.xa. 3600 IN DNSKEY 257 3 15 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-16
algo-ok-16.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-16.dnssec05.xa
template IN DNSKEY algo-ok-16.dnssec05.xa. {
answer "algo-ok-16.dnssec05.xa. 3600 IN DNSKEY 257 3 16 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-17
algo-ok-17.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-17.dnssec05.xa
template IN DNSKEY algo-ok-17.dnssec05.xa. {
answer "algo-ok-17.dnssec05.xa. 3600 IN DNSKEY 257 3 17 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ALGO-OK-23
algo-ok-23.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone algo-ok-23.dnssec05.xa
template IN DNSKEY algo-ok-23.dnssec05.xa. {
answer "algo-ok-23.dnssec05.xa. 3600 IN DNSKEY 257 3 23 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
## MIXED-ALGO-1
mixed-algo-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone mixed-algo-1.dnssec05.xa
template IN DNSKEY mixed-algo-1.dnssec05.xa. {
answer "mixed-algo-1.dnssec05.xa. 3600 IN DNSKEY 257 3 7 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "mixed-algo-1.dnssec05.xa. 3600 IN DNSKEY 257 3 10 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
answer "mixed-algo-1.dnssec05.xa. 3600 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### NO-RESPONSE-1
no-response-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone no-response-1.dnssec05.xa
acl no-response-1.dnssec05.xa { #
drop type DNSKEY
}
}
no-response-1.dnssec05.xa:53 { #
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone no-response-1.dnssec05.xa
header {
response clear aa
}
}
### NO-RESPONSE-2
no-response-2.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone no-response-2.dnssec05.xa
template IN DNSKEY no-response-2.dnssec05.xa. {
rcode SERVFAIL
}
}
no-response-2.dnssec05.xa:53 { #
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone no-response-2.dnssec05.xa
template IN DNSKEY no-response-2.dnssec05.xa. {
rcode REFUSED
}
}
### SERVER-NO-DNSSEC-1
server-no-dnssec-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone server-no-dnssec-1.dnssec05.xa
}
server-no-dnssec-1.dnssec05.xa:53 { #
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone server-no-dnssec-1.dnssec05.xa
template IN DNSKEY server-no-dnssec-1.dnssec05.xa. {
answer "server-no-dnssec-1.dnssec05.xa. 3600 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### SHARED-IP-1
shared-ip-1.dnssec05.xa:53 { #
bind 127.15.5.31 # ns1a and ns1b
log
file DNSSEC-TP/dnssec05/shared-ip-1.dnssec05.xa.zone shared-ip-1.dnssec05.xa
template IN DNSKEY shared-ip-1.dnssec05.xa. {
answer "shared-ip-1.dnssec05.xa. 3600 IN DNSKEY 257 3 13 6/8fEc37k5iabGoWgsl7rmreQth8ADr9sYFGd0pxmgxN19MBR629YAH5ntzSus7SjJx6PAVqGzHHpCPVyDLQHQ=="
}
}
### ZONE-NO-DNSSEC-1
zone-no-dnssec-1.dnssec05.xa:53 { #
bind 127.15.5.23 # ns1.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:23 # ns1.child.dnssec05.xa
bind 127.15.5.24 # ns2.child.dnssec05.xa
bind fda1:b2:c3:0:127:15:5:24 # ns2.child.dnssec05.xa
log
file DNSSEC-TP/dnssec05/CHILD.dnssec05.xa.zone zone-no-dnssec-1.dnssec05.xa
}