upstream/knot-dns
1
0
Fork 0
mirror of https://gitlab.nic.cz/knot/knot-dns.git synced 2026-02-03 18:49:28 -05:00
Code Issues Projects Releases Packages Wiki Activity Actions
knot-dns/tests-extra/data/flags.zone

233 lines
7.1 KiB
Dns
Raw Permalink Normal View History

func-test: add response flags check
2013-09-03 11:25:39 -04:00
$ORIGIN flags.
$TTL 3600
bugfix: NXDOMAIN authority SOA has TTL limited by minimum-ttl field See https://tools.ietf.org/html/rfc2308#section-3
2020-01-27 08:45:25 -05:00
@ SOA dns1 hostmaster 2010111213 10800 3600 1209600 1800
func-test: add response flags check
2013-09-03 11:25:39 -04:00
NS dns1
AUTHORITY NS not added for CNAME loop or CNAME leading to out-of-zone data. This conforms to RFC1034, 4.3.2/pt 3.a I think, as the CNAME target would lead us out of available zones. (We don't support answer from multiple local zones as of now.)
2014-01-17 09:13:45 -05:00
NS dns.out-of-zone. ; NS out-of-zone record
func-test: add response flags check
2013-09-03 11:25:39 -04:00
NS dns2
MX 10 mail
Added some more test cases to basic tests.
2014-02-12 13:02:52 -05:00
MX 20 mail-no-a-rr ; MX record without additional A/AAAA record
func-test: add response flags check
2013-09-03 11:25:39 -04:00
dns1 A 192.0.2.1
AAAA 2001:DB8::1
dns2 A 192.0.2.2
AAAA 2001:DB8::2
mail A 192.0.2.3
AAAA 2001:DB8::3
; Delegation of a subdomain
sub NS ns.sub
internet: skip empty non-terminal parents during delegation lookup
2016-10-24 13:10:10 -04:00
sub NS sub
sub A 192.0.0.1
func-test: add response flags check
2013-09-03 11:25:39 -04:00
ns.sub A 192.0.2.4
bugfix: fix answering with opt-outed NSEC3 on empty-non-terminal
2021-08-30 08:15:32 -04:00
; Opt-outable delegation below empty-non-terminal
deleg.ent NS sub
tests/flags: add NULL record with empty rdata (just for fun)
2023-08-22 09:56:35 -04:00
; NULL type with empty rdata
empty-null TYPE10 \# 0
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
; CNAME to A record
func-test: update query test
2013-11-21 06:59:19 -05:00
cname CNAME dns1
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
; CNAME to delegation
func-test: update query test
2013-11-21 06:59:19 -05:00
cname-ns CNAME sub
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
tests-extra: fix query for a CNAME below NS
2015-07-09 09:15:54 -04:00
; CNAME to a name below delegation
cname-below-ns CNAME below.sub
nameserver: don't follow CNAME under delegation (NONAUTH node)
2021-01-14 06:57:55 -05:00
; CNAME being below a delegation
cname.below.sub CNAME mail
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
; CNAME to out
func-test: update query test
2013-11-21 06:59:19 -05:00
cname-out CNAME another.world.
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
Added some more test cases to basic tests.
2014-02-12 13:02:52 -05:00
; CNAME to wildcard-covered name
cname-wildcard CNAME a.wildcard
; CNAME to DNAME tree
cname-dname CNAME a.dname-tree
; CNAME to DNAME tree (not existing)
cname-dname-nx CNAME b.dname-tree
; CNAMEs in Additional
; MX record leading to CNAME (existing)
cname-mx MX 10 cname
; MX record leading to CNAME (delegation)
cname-mx-deleg MX 10 cname-ns
; MX record leading to CNAME (wildcard-covered)
cname-mx-wc MX 10 cname-wildcard
; MX record leading to CNAME (outside zone)
cname-mx-out MX 10 cname-out
func-test: update query test
2013-11-21 06:59:19 -05:00
; DNAME subtree
dname DNAME dname-tree
dname-tree A 1.2.3.4
a.dname-tree A 5.6.7.8
Added some more test cases to basic tests.
2014-02-12 13:02:52 -05:00
c.dname-tree CNAME dns1
d.dname-tree CNAME cname-wildcard
e.dname-tree CNAME e.dname
tests-extra: fix DNAME loop test case in basic/query
2020-12-18 12:18:17 -05:00
f.dname-tree DNAME f.f.dname-tree
Added some more test cases to basic tests.
2014-02-12 13:02:52 -05:00
nameserver: decrease maximum CNAME/DNAME chain length from 20 to 5 The reason for this change is to reduce possible amplification attacks and other negative effects of long processing loops. Also most resolvers don't accept multiple jumps without requerying, so this change should be harmless.
2021-03-04 13:03:42 -05:00
dname-outloop DNAME loop.dname-outloop
loop.dname-inloop A 1.2.3.4
loop.dname-inloop DNAME dname-inloop
Added some more test cases to basic tests.
2014-02-12 13:02:52 -05:00
dname-out DNAME outside.zone.
DNAME: synthesized CNAME might be perfect answer to CNAME query
2020-11-16 05:50:28 -05:00
dname-dangl DNAME dangling
nameserver: don't follow DNAME under delegation (NONAUTH node)
2021-01-14 07:33:18 -05:00
dname.below.sub DNAME dname-tree
func-test: update query test
2013-11-21 06:59:19 -05:00
nameserver: dont put additionals induced by additionals
2021-09-30 06:48:59 -04:00
; SVCB loop
tests: make flags. zone readable by bind
2021-10-01 04:44:15 -04:00
svcb-loop TYPE64 \# 20 00000A737663622D6C6F6F703105666C61677300
svcb-loop1 TYPE64 \# 20 00000A737663622D6C6F6F703205666C61677300
svcb-loop2 TYPE64 \# 19 000009737663622D6C6F6F7005666C61677300
nameserver: dont put additionals induced by additionals
2021-09-30 06:48:59 -04:00
internet: solve DS query bellow a delegation point as a delegation
2017-11-18 10:05:53 -05:00
; DS tests
ds-sub NS dns.net.ds-sub
dns.net.ds-sub A 1.1.1.1
func-test: update query test
2013-11-21 06:59:19 -05:00
; Fourth level domain with A record
fourth.third.second A 1.1.1.1
; Delegated fourth level domain with A record
fourth.third.sub A 2.2.2.2
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
; Wildcard
func-test: update query test
2013-11-21 06:59:19 -05:00
*.wildcard A 4.3.2.1
; Asterisk label
sub.*.wildcard A 6.7.8.9
; Wildcard under asterisk label
*.*.wildcard A 9.8.7.6
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
; Wildcard under DNAME subtree
Added some more test cases to basic tests.
2014-02-12 13:02:52 -05:00
*.wildcard.dname-tree A 8.7.6.5
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
; Wildcard to CNAME
func-test: update query test
2013-11-21 06:59:19 -05:00
*.wildcard-cname CNAME cname
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
nameserver: correct owner of answered CNAME from wildcard expansion fixes #715
2021-05-21 07:23:28 -04:00
; CNAME to asterix-leading expansion
wild-cname CNAME *.expanded.wildcard-cname2
*.wildcard-cname2 CNAME *.expanded.wildcard-cname
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
; Wildcard to delegation
func-test: update query test
2013-11-21 06:59:19 -05:00
*.wildcard-deleg CNAME cname-ns
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
; Wildcard leading out
func-test: update query test
2013-11-21 06:59:19 -05:00
*.wildcard-out CNAME another.world.
Added functional tests for various query processing states.
2013-11-18 10:13:28 -05:00
nameserver: avoid wildcard-expansion-by-compression trick on DNAME... ...as in that case the DNAME node owner differs from original qname
2023-09-19 05:22:55 -04:00
; Wildcard DNAME
*.wildcard-dname DNAME some.domain.
func-test: update tests + add dig cmp
2013-09-11 09:52:48 -04:00
; Text record which doesn't fit into answer section in 512 B UDP message
513resp TXT ( "12345678901234567890123456789012345678901234567890"
func-test: add response flags check
2013-09-03 11:25:39 -04:00
"12345678901234567890123456789012345678901234567890"
func-test: update tests + add dig cmp
2013-09-11 09:52:48 -04:00
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"1234567890" )
; Text record which in answer section makes 512 B message
512resp TXT ( "12345678901234567890123456789012345678901234567890"
func-test: add response flags check
2013-09-03 11:25:39 -04:00
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
func-test: update tests + add dig cmp
2013-09-11 09:52:48 -04:00
"123456789" )
CNAME loop over wildcard is checked after RR is added. This is to give requestor proof of the loop in single response. Also added test for this case.
2014-01-15 11:38:45 -05:00
tests-extra: update EDNS payload tests
2017-01-28 06:57:42 -05:00
; Text record which in answer section and with EDNS sections makes 1220 B message
1220resp TXT ( "12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"123456789012345678901234567890123456789012" )
; Text record which in answer section and with EDNS sections makes 1221 B message
1221resp TXT ( "12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"12345678901234567890123456789012345678901234567890"
"1234567890123456789012345678901234567890123" )
CNAME loop over wildcard is checked after RR is added. This is to give requestor proof of the loop in single response. Also added test for this case.
2014-01-15 11:38:45 -05:00
; CNAME loop
*.loop-entry CNAME jump.loop-target
*.loop-target CNAME jump.loop-entry
Discover wildcard-covered additional records for affected nodes. This requires an additional passthrough of the adjusted nodes and may pose a performance penalty in the future. If that need arises, we could sort it out in a different way.
2014-01-15 12:25:26 -05:00
; MX record with name leading to wildcard-covered additional record
mx-additional MX 10 jump.wildcard-additional
*.wildcard-additional A 1.2.3.4
tests-extra: CNAME loop + fixed basic/query test. - Test response with a long CNAME loop. - Some queries in basic/query test did not have the zone name appended, resulting in bogus answers (REFUSED). Not visible, because the responses are only compared to ones from Bind. TODO: Comparison with Bind should be replaced by checks for particular requirements for the response.
2014-11-11 06:52:01 -05:00
; Really long CNAME loop
ab CNAME bc
bc CNAME cd
cd CNAME de
de CNAME ef
ef CNAME fg
fg CNAME gh
gh CNAME hi
hi CNAME ij
ij CNAME jk
jk CNAME kl
kl CNAME lm
lm CNAME mn
mn CNAME no
no CNAME op
op CNAME pq
pq CNAME qr
qr CNAME rs
rs CNAME st
nameserver: limit processing depth of C/DNAME chain
2019-11-25 05:18:49 -05:00
st CNAME ab
tests-extra: CNAME loop + fixed basic/query test. - Test response with a long CNAME loop. - Some queries in basic/query test did not have the zone name appended, resulting in bogus answers (REFUSED). Not visible, because the responses are only compared to ones from Bind. TODO: Comparison with Bind should be replaced by checks for particular requirements for the response.
2014-11-11 06:52:01 -05:00
Reference in a new issue Copy permalink