diff options
Diffstat (limited to 'testdata')
| -rw-r--r-- | testdata/iter_scrub_promiscuous.rpl | 84 | ||||
| -rw-r--r-- | testdata/ratelimit.tdir/ratelimit.testns | 30 |
2 files changed, 108 insertions, 6 deletions
diff --git a/testdata/iter_scrub_promiscuous.rpl b/testdata/iter_scrub_promiscuous.rpl index 61fca0d28061..febbee81ce4e 100644 --- a/testdata/iter_scrub_promiscuous.rpl +++ b/testdata/iter_scrub_promiscuous.rpl @@ -16,6 +16,7 @@ SCENARIO_BEGIN Test iterator with scrub of promiscuous records ; The spoofed contents are ns.attacker.mesa and its IPs 5.6.7.8 and 5.6.7.9. ; The pollute1.mesa NS, ns.pollute2.mesa A, and test3.atkr.pollute3.mesa NS ; with ns.pollute3.mesa A records are tested for cache placement. +; pollute4.mesa uses YXDOMAIN. ; ns.root RANGE_BEGIN 0 400 @@ -89,6 +90,18 @@ MATCH opcode subdomain ADJUST copy_id copy_query REPLY QR NOERROR SECTION QUESTION +pollute4.mesa. IN NS +SECTION AUTHORITY +pollute4.mesa. IN NS ns.pollute4.mesa. +SECTION ADDITIONAL +ns.pollute4.mesa. IN A 1.2.4.4 +ENTRY_END + +ENTRY_BEGIN +MATCH opcode subdomain +ADJUST copy_id copy_query +REPLY QR NOERROR +SECTION QUESTION attacker.mesa. IN NS SECTION AUTHORITY attacker.mesa. IN NS ns.attacker.mesa. @@ -188,6 +201,35 @@ check.pollute3.mesa. IN A 1.8.9.3 ENTRY_END RANGE_END +; ns.pollute4.mesa +RANGE_BEGIN 0 400 + ADDRESS 1.2.4.4 + +; This is the spoofed answer that is returned. +ENTRY_BEGIN +MATCH opcode qtype qname +ADJUST copy_id +REPLY QR AA YXDOMAIN +SECTION QUESTION +test4.atkr.pollute4.mesa. IN A +SECTION ANSWER +test4.atkr.pollute4.mesa. 86400 IN A 1.2.3.4 +SECTION AUTHORITY +pollute4.mesa. 86400 IN NS ns.attacker.mesa. +ENTRY_END + +; correct answer for the check query. +ENTRY_BEGIN +MATCH opcode qtype qname +ADJUST copy_id +REPLY QR AA NOERROR +SECTION QUESTION +check.pollute4.mesa. IN A +SECTION ANSWER +check.pollute4.mesa. IN A 1.8.9.4 +ENTRY_END +RANGE_END + ; ns.attacker.mesa RANGE_BEGIN 0 400 ADDRESS 5.6.7.8 @@ -370,4 +412,46 @@ check.pollute3.mesa. IN A 1.8.9.3 ;check.pollute3.mesa. IN A 5.6.7.9 ENTRY_END +; Test query 4 +STEP 120 QUERY +ENTRY_BEGIN +REPLY RD +SECTION QUESTION +test4.atkr.pollute4.mesa. IN A +ENTRY_END + +STEP 130 CHECK_ANSWER +ENTRY_BEGIN +MATCH all +REPLY QR RD RA YXDOMAIN +SECTION QUESTION +test4.atkr.pollute4.mesa. IN A +SECTION ANSWER +test4.atkr.pollute4.mesa. 86400 IN A 1.2.3.4 +SECTION AUTHORITY +; removed record +;pollute4.mesa. 0 IN NS ns.attacker.mesa. +ENTRY_END + +; Check the cache contents, for query 4. +STEP 140 QUERY +ENTRY_BEGIN +REPLY RD +SECTION QUESTION +check.pollute4.mesa. IN A +ENTRY_END + +STEP 150 CHECK_ANSWER +ENTRY_BEGIN +MATCH all +REPLY QR RD RA NOERROR +SECTION QUESTION +check.pollute4.mesa. IN A +SECTION ANSWER +; good answer +check.pollute4.mesa. IN A 1.8.9.4 +; bad answer +;check.pollute4.mesa. IN A 5.6.7.9 +ENTRY_END + SCENARIO_END diff --git a/testdata/ratelimit.tdir/ratelimit.testns b/testdata/ratelimit.tdir/ratelimit.testns index 563c1db6a1f2..5c22c292d6fd 100644 --- a/testdata/ratelimit.tdir/ratelimit.testns +++ b/testdata/ratelimit.tdir/ratelimit.testns @@ -3,13 +3,31 @@ $ORIGIN example.com. $TTL 3600 ENTRY_BEGIN -MATCH opcode qtype +MATCH opcode qname qtype REPLY QR AA NOERROR -ADJUST copy_id copy_query +ADJUST copy_id SECTION QUESTION -wild IN A +www1 IN A SECTION ANSWER -wild IN A 10.20.30.40 -SECTION AUTHORITY -example.com. IN NS ns.example.com. +www1 IN A 1.1.1.1 +ENTRY_END + +ENTRY_BEGIN +MATCH opcode qname qtype +REPLY QR AA NOERROR +ADJUST copy_id +SECTION QUESTION +www2 IN A +SECTION ANSWER +www2 IN A 2.2.2.2 +ENTRY_END + +ENTRY_BEGIN +MATCH opcode qname qtype +REPLY QR AA NOERROR +ADJUST copy_id +SECTION QUESTION +www3 IN A +SECTION ANSWER +www3 IN A 3.3.3.3 ENTRY_END |